cve-2019-6260

ASPEED BMC AHB 接口的测试与调试工具 警告 如果你尚未理解该工具在你目标机器环境中的行为，请勿使用此工具。 此工具会操作你机器的底层硬件和固件接口。特别是，探测行为意味着如果目标设备并非我们所期望的设备，则后果不确定。 使用此工具可能导致目标机器不稳定、崩溃或严重故障。 简介 ASPEED BMC 有几种隐式的操作模式： 1. 开发模式：BMC / 主机固件启动 2. IO扩展模式：BMC 不运行专用固件 3. 预配置模式：BMC 运行专用固件 为支持模式1和2，BMC 在其多个从接口上暴露了功能，允许主机访问 BMC 并在其物理地址空间中执行任意操作。 这些重要接口挂接在...

pciem

PCIem 一个 Linux 内核框架，支持合成用户空间 PCIe 设备模拟。 | 文档 PCIem 是什么？ PCIem 是一个框架，通过利用一些新颖技术，在 Linux 内核中创建虚拟 PCIe 设备，将合成卡作为合法的 PCI 设备呈现给主机操作系统。 简而言之，PCIem 是一个用于（但不限于）开发和测试 PCIe 设备驱动程序的框架，无需主机上的实际硬件。 与 libfvio-user 的比较 PCIem 和 libfvio-user 是两种针对不同需求的解决方案，比较两者时可能会产生混淆，因此此处说明差异（更多信息请参见图1）。 主要区别在于，libvfio-user...

pcileech

PCILeech 概述: PCILeech 使用 PCIe 硬件设备来读写目标系统内存。这是通过使用 PCIe 上的 DMA 实现的。目标系统上无需驱动程序。 PCILeech 在没有硬件的情况下也能与 LeechCore 库支持的多种软件内存获取方法配合使用——包括使用 DumpIt 或 WinPmem 捕获远程实时内存。PCILeech 还支持本地内存捕获以及多种内存转储文件格式。 PCILeech 支持多种内存获取设备，包括基于硬件和软件的。基于 USB3380 的硬件仅能原生读取 4GB 内存，但如果首先将内核模块（KMD）插入目标系统内核，则可以读取所有内存。基于 FPGA...

DMA-ProcessDumper

DMA-ProcessDumper Volca toda la memoria del proceso objetivo en modo usuario utilizando DMA con MemProcFS a través de un dispositivo FPGA PCIe Compilación Copia leechcore.h, vmmdll.h y vmm.lib desde MemProcFS al directorio DMA-ProcessDumper Compila usando Visual Studio Copia leechcore.dll, vmm.dl...

CVE-2026-97976

A flaw was found in the Linux kernel's Intel Bluetooth PCIe driver. The driver fails to validate the packet length received from the hardware buffer before copying data. A compromised or malicious Bluetooth device providing an oversized packet length can trigger an out-of-bounds memory read,...

CVE-2026-93822

A flaw was found in the Linux kernel's Broadcom iProc PCIe controller driver. The driver fails to acquire the appropriate lock when stopping and removing a root bus. A local user with administrative privileges could exploit this race condition by initiating simultaneous PCI rescan or hotplug...

CVE-2026-93821

A flaw was found in the Linux kernel's Altera PCI Express PCIe controller driver. A local user could exploit a race condition during root bus removal by triggering concurrent device rescan or hotplug operations through the sysfs interface. This lack of proper synchronization can lead to a...

CVE-2026-93820

A flaw was found in the Linux kernel's Rockchip PCIe host controller driver. Stopping and removing a PCIe root bus without proper synchronization creates a race condition with concurrent device rescanning or hotplug operations. A local attacker could exploit this flaw to cause a use-after-free...

CVE-2026-93818

A flaw was found in the Linux kernel's PLDA PCIe host controller driver. This vulnerability can result in a Denial of Service DoS caused by a race condition when removing a root bus without holding the required lock. A local user with administrative privileges can exploit this issue by triggering...

CVE-2026-93819

A flaw was found in the Linux kernel's MediaTek PCIe driver. The driver fails to acquire the proper lock while stopping and removing a root bus, allowing a race condition to occur alongside concurrent bus rescan or hotplug operations initiated via sysfs. A local user could exploit this race to...

Linux Distros Unpatched Vulnerability : CVE-2026-97948

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerpc/eeh: Fix recursive locking on devices without EEH sensitive driver The commit 1010b4c012b0 powerpc/eeh: Make EEH driver device hotplug safe refactored t...

SUSE CVE-2026-93796

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: null RX pointers after free When iwlpcietxinit fails after RX init, nic init unwinds via iwlpcierxfree. The freed RX members stayed non-NULL on the live transport object, so later teardown or retry could touc...

AZL-103742 CVE-2026-93796 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: null RX pointers after free When iwlpcietxinit fails after RX init, nic init unwinds via iwlpcierxfree. The freed RX members stayed non-NULL on the live transport object, so later teardown or retry could touc...

CVE-2026-93796

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: null RX pointers after free When iwlpcietxinit fails after RX init, nic init unwinds via iwlpcierxfree. The freed RX members stayed non-NULL on the live transport object, so later teardown or retry could touc...

DEBIAN-CVE-2026-93796

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: null RX pointers after free When iwlpcietxinit fails after RX init, nic init unwinds via iwlpcierxfree. The freed RX members stayed non-NULL on the live transport object, so later teardown or retry could touc...

UBUNTU-CVE-2026-93796

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: null RX pointers after free When iwlpcietxinit fails after RX init, nic init unwinds via iwlpcierxfree. The freed RX members stayed non-NULL on the live transport object, so later teardown or retry could touc...

CVE-2026-93796

The Linux kernel contains a vulnerability in the iwlwifi driver involving null RX pointers after free . When iwl_pcie_tx_init() fails after the RX initialization, the NIC initialization unwinds via iwl_pcie_rx_free(). However, the freed RX members remained non-NULL on the live transport object, p...

CVE-2026-93796 wifi: iwlwifi: pcie: null RX pointers after free

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: null RX pointers after free When iwlpcietxinit fails after RX init, nic init unwinds via iwlpcierxfree. The freed RX members stayed non-NULL on the live transport object, so later teardown or retry could touc...

CVE-2026-93796 wifi: iwlwifi: pcie: null RX pointers after free

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: null RX pointers after free When iwlpcietxinit fails after RX init, nic init unwinds via iwlpcierxfree. The freed RX members stayed non-NULL on the live transport object, so later teardown or retry could touc...

PT-2026-97996

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iwlwifi driver within the PCIe component where RX pointers remain non-NULL after being freed. When the iwl pcie tx init function fails following RX initialization,...