1560 matches found
CVE-2024-50804
CVE-2024-50804 Writeup can be found on my blog below. Thanks! https://g3tsyst3m.github.io/cve/msi/Arbitrary-Write-Privilege-Escalation-CVE-2024-50804/...
POC-CVE-2024-12227
CVE-2024-12227 - NTIOLibX64.sys DoS PoC Proof of Concept for CVE-2024-12227 - Null Pointer Dereference vulnerability in MSI Dragon Center's NTIOLibX64.sys driver. Description NTIOLibX64.sys version 3.0.0.10 contains a null pointer dereference vulnerability in the ReadPhysicalMemory function IOCTL...
CVE-2024-0670-CheckMK-Agent-Local-Privilege-Escalation-Exploit
CVE-2024-0670 – CheckMK Agent Local Privilege Escalation PoC This repository contains a simple and clean proof-of-concept for CVE-2024-0670, a local privilege escalation vulnerability in the CheckMK Windows Agent. A low-privileged user can gain SYSTEM privileges by abusing writable temp file path...
mindmanager-poc
mindmanager-poc Affected application: MindManager23setup.exe Platform: Windows Issue: Local Privilege Escalation via MSI installer Repair Mode EXE hijacking race condition Discovered and reported by: Pawel Karwowski and Julian Horoszkiewicz Eviden Red Team Proposed mitigation:...
CVE-2026-89856
A flaw was found in the Linux kernel's scsi: qla2xxx component. A misconfigured or malicious hot-plugged device could provide specific Message Signaled Interrupts MSI-X vector counts, causing an internal queue count to become zero due to truncation. This leads to an attempt to access an invalid...
MAL-002
MAL-002: Force System Restart via Installed Windows MSIs Once a software is successfully installed on the system, one or more trusted MSI files will appear in the “C:\Windows\Installer” folder and may allow a low privilege user to perform “repair” and/or “modify” actions as the “NT...
CVE-2020-17382
CVE-2020-17382 Windows 10 x64 2004 Build 19041.264 Exploit Kudos to @matteomalvica for asking me so many questions about this vulnerability that forced me to write an exploit for him for the latest Windows 10 release 19041.264 without KVA Shadow i.e. non Specter vulnerable CPUs and without VBS...
CVE-2021-27965
CVE-2021-27965 The MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before 2.0.98.0 has a buffer overflow that allows privilege escalation via a crafted 0x80102040, 0x80102044, 0x80102050, or 0x80102054 IOCTL request. This exploit will be finished, this is a guarantee...
CVE-2019-16098
CVE-2019-16098 The driver in Micro-Star MSI Afterburner 4.6.2.15658 aka RTCore64.sys and RTCore32.sys allows any authenticated user to read and write to arbitrary memory, I/O ports, and MSRs. This can be exploited for privilege escalation, code execution under high privileges, and information...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: iommu/vt-d: Fixed a potential memory leak in intelsetupirqremapping. After committing e3beca48a45b “irqdomain/treewide: Keeps the firmware node unconditionally allocated”. For theardown scenario, fn is only freed after failing...
SUSE CVE-2026-98426
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path mwifiexpcierequestirq registers each MSI-X vector with a per-index devid &card-msixctxi. On a requestirq failure the cleanup loop "for j = 0; j msixctxi as the...
DEBIAN-CVE-2026-98426
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path mwifiexpcierequestirq registers each MSI-X vector with a per-index devid &card-msixctxi. On a requestirq failure the cleanup loop "for j = 0; j msixctxi as the...
AZL-108131 CVE-2026-98426 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path mwifiexpcierequestirq registers each MSI-X vector with a per-index devid &card-msixctxi. On a requestirq failure the cleanup loop "for j = 0; j msixctxi as the...
CVE-2026-98426
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path mwifiexpcierequestirq registers each MSI-X vector with a per-index devid &card-msixctxi. On a requestirq failure the cleanup loop "for j = 0; j msixctxi as the...
EUVD-2026-101075
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path mwifiexpcierequestirq registers each MSI-X vector with a per-index devid &card-msixctxi. On a requestirq failure the cleanup loop "for j = 0; j msixctxi as the...
CVE-2026-98426
A vulnerability exists in the Linux kernel 's mwifiex Wi-Fi driver. The mwifiex_pcie_request_irq() function incorrectly handles MSI-X vector registration; when request_irq() fails, the cleanup loop passes the incorrect dev_id to free_irq(). This mismatch causes previously requested IRQs to remain...
CVE-2026-98426 wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path mwifiexpcierequestirq registers each MSI-X vector with a per-index devid &card-msixctxi. On a requestirq failure the cleanup loop "for j = 0; j msixctxi as the...
CVE-2026-98426 wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path mwifiexpcierequestirq registers each MSI-X vector with a per-index devid &card-msixctxi. On a requestirq failure the cleanup loop "for j = 0; j msixctxi as the...
CVE-2026-98426
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path mwifiexpcierequestirq registers each MSI-X vector with a per-index devid &card-msixctxi. On a requestirq failure the cleanup loop "for j = 0; j msixctxi as the...
CVE-2026-98426: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path mwifiexpcierequestirq registers each MSI-X vector with a per-index devid &card-msixctxi. On a requestirq failure the cleanup loop "for j = 0; j msixctxi as the...