The vulnerability of the iscsit_close_session() function in the drivers/target/iscsi/iscsi_target.c file of the Linux kernel’s TCM driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iscsitclosesession function in the drivers/target/iscsi/iscsitarget.c file of the Linux kernel’s TCM driver is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the mpi3mr_probe() function in the drivers/scsi/mpi3mr/mpi3mr_os.c file of the Linux operating system’s SCSI device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mpi3mrprobe function in the drivers/scsi/mpi3mr/mpi3mros.c file of the Linux SCSI device driver module is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

The vulnerability of the pci_endpoint_test_ioctl() function in the drivers/misc/pci_endpoint_test.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pciendpointtestioctl function in the drivers/misc/pciendpointtest.c module of the Linux kernel is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the idpf_idc_vport_dev_down() function in the drivers/net/ethernet/intel/idpf/idpf_idc.c module of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the idpfidcvportdevdown function in the drivers/net/ethernet/intel/idpf/idpfidc.c module of the Intel Ethernet network adapter driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the amdgpu_display_get_scanout_buffer() function in the drivers/gpu/drm/amd/amdgpu/amdgpuDisplay.c driver of the Direct Rendering Infrastructure (DRI) AMD GPU kernel for the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the amdgpudisplaygetscanoutbuffer function in the drivers/gpu/drm/amd/amdgpu/amdgpuDisplay.c driver of the Direct Rendering Infrastructure DRI module for AMD GPU cores in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow ...

The vulnerability of the dmemcg_limit_write() function in the kernel/cgroup/dmem.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dmemcglimitwrite function in the kernel/cgroup/dmem.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the swap_writeout() function in the mm/swap_state.c module of the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.

The vulnerability of the swapwriteout function in the mm/swapstate.c module of the Linux kernel’s memory management subsystem is related to improper release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the bareudp_fillmetadata dst() function in the drivers/net/bareudp.c module of the Linux kernel network device driver allows a attacker to cause a service failure.

The vulnerability of the bareudpfillmetadatadst function in the drivers/net/bareudp.c module of the Linux kernel network device driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cdns_resume() function in the drivers/usb/cdns3/core.c file of the Linux operating system’s device driver framework allows a hacker to induce a service failure.

The vulnerability of the cdnsresume function in the drivers/usb/cdns3/core.c file of the Linux device driver framework relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the insn_array_map_direct_value_addr() function in the kernel/bpf/bpf_insn_array.c module, which is part of the BPF interpreter support for the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the insnarraymapdirectvalueaddr function in the kernel/bpf/bpfinsnarray.c module, which is part of the BPF interpreter for Linux kernel, involves a pointer overflow that causes the pointer to go beyond the allocated memory range. Exploiting this vulnerability could allow an...

The vulnerability of the nested_sync_control_from_vmcb02() function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the nestedsynccontrolfromvmcb02 function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow ...

The vulnerability of the ctrlcmd_bye() function in the net/qrtr/ns.c module allows a hacker to trigger a service failure for Qualcomm IPC kernel-based Linux operating systems.

The vulnerability of the ctrlcmdbye function in the net/qrtr/ns.c module, which supports Qualcomm IPC cores in the Linux operating system, relates to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the `papr_hvpipe_dev_create_handle()` function in the `arch/powerpc/platforms/pseries/papr-hvpipe.c` module allows a malicious actor to cause a service failure in the Linux operating system’s PowerPC platform.

The vulnerability of the paprhvpipedevcreatehandle function in the arch/powerpc/platforms/pseries/papr-hvpipe.c module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the `cros_typec_register_thunderbolt()` function in the drivers/platform/chrome/cros_typec_altmode.c module of the Chrome OS hardware support module for Linux kernel allows a attacker to cause a service failure.

The vulnerability of the crostypecregisterthunderbolt function in the drivers/platform/chrome/crostypecaltmode.c module of the Chrome OS hardware support module for Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failur...

The vulnerability of the usblp_probe() function in the drivers/usb/class/usblp.c file of the Linux operating system’s USB device driver module allows a malicious actor to cause a service failure.

The vulnerability of the usblpprobe function in the drivers/usb/class/usblp.c file of the Linux device driver for USB devices is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the sock_recv_cmsgs() function in the include/net/sock.h module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sockrecvcmsgs function in the include/net/sock.h module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The Bug Report – August 2026 Edition

The Bug Report – August 2026 Edition By Jonathan Omakun · September 3, 2026 Why am I here? Sharpen your pencils and pull out those fresh notebooks; we're back with the bug report! Half the world is squeezing the last drops of joy out of their summer vacations, and the other half is on the...

PT-2026-85286

MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string decoders that trust attacker-controlled length fields without validation. Attackers can craft malicious encoded strings with mismatched declared and actual field lengths to overflow heap and stack...

PT-2026-85034

A security flaw has been discovered in ILIAS up to 9.21/10.9/11.2. This affects the function ilObjMediaObjectGUI::uploadMultipleSubtitleFileObject of the file Services/Repository/Service/Resources/ZipAdapter.php of the component MediaPool. The manipulation results in unrestricted upload. The atta...

The vulnerability of the virtio_vdpa_find_vqs() function in the drivers/virtio/virtio_vdpa.c module, which supports the virtio bus in Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the virtiovdpafindvqs function in the drivers/virtio/virtiovdpa.c module, which supports the virtio bus in Linux kernels, is related to the absence of memory release after the effective lifespan of the function. Exploiting this vulnerability could allow an attacker to cause a...