kernel: exfat: fix potential use-after-free in exfat_find_dir_entry()

A flaw was found in the Linux kernel's exFAT filesystem driver. A local attacker could exploit a use-after-free vulnerability in the exfatfinddirentry function. This occurs because a buffer is prematurely released while still being referenced, which can be triggered by processing a specially...

kernel: pNFS: Fix use-after-free in pnfs_update_layout()

A flaw was found in the Linux kernel's parallel Network File System pNFS component. An issue in the pnfsupdatelayout function causes a use-after-free vulnerability due to incorrect ordering of memory management operations. This flaw can be triggered when the system attempts to update a pNFS layou...

kernel: smb/client: fix out-of-bounds read in symlink_data()

A flaw was found in the Linux kernel's Server Message Block SMB client. This vulnerability arises from insufficient length validation in the smb2checkmessage function when processing symlink error responses. A remote attacker could exploit this by sending a specially crafted symlink error respons...

kernel: Linux kernel: Denial of Service due to memory leak in tpm2_load_cmd

A flaw was found in the Linux kernel's trusted keys subsystem. A local user could exploit a memory leak in the tpm2loadcmd function, which fails to free a temporary memory allocation in certain error scenarios. This memory leak could lead to a system-wide Denial of Service DoS by exhausting...

kernel: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error

A flaw was found in the Linux kernel's Bluetooth Host Controller Interface HCI Universal Asynchronous Receiver/Transmitter UART driver. When the hciregisterdev function fails, a flag indicating protocol initialization is not properly cleared. This oversight allows incoming UART data to be process...

kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down

A flaw was found in the Linux kernel's bonding driver, specifically within the Active-Backup Load Balancing ALB receive path. A local attacker can trigger a Use-After-Free UAF vulnerability in the rlbarprecv function by rapidly bringing a bond interface up and down while receiving Address...

kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()

A flaw was found in the Linux kernel's IPv4 networking component. The ipv4sysctlexitnet function prematurely frees the net-ipv4.sysctllocalreservedports memory. This can lead to a use-after-free vulnerability, where other threads might attempt to access deallocated memory. Such an issue can resul...

kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf

A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target functionality. This vulnerability, a heap overrun, occurs because the iscsiencodetextoutput function does not properly check buffer capacity when processing login requests. A remote attacker could exploit...

kernel: KEYS: fix overflow in keyctl_pkey_params_get_2()

A flaw was found in the Linux kernel's keyctlpkeyparamsget2 function within the KEYS subsystem. The vulnerability arises from an incorrect calculation of the internal output buffer's length, which can lead to a buffer overflow when a user-provided buffer is too small. This flaw could allow a loca...

kernel: NFSv4/flexfiles: reject zero filehandle version count

A flaw was found in the Linux kernel's NFSv4 Network File System version 4 flexfiles component. This vulnerability occurs when the fflayoutalloclseg function processes a malformed flexfiles layout that specifies a zero filehandle version count. An attacker could exploit this by providing a...

kernel: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()

A flaw was found in the Linux kernel. The rtspinunlock function, and similar real-time RT locking mechanisms, incorrectly release Read-Copy-Update RCU protection before fully unlocking, leading to a Use-After-Free UAF vulnerability. This issue could allow a local attacker to potentially cause a...

kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr

A flaw was found in the Linux kernel's NFSv4/pNFS implementation. The nfs4decodempdsaddr function, responsible for decoding network address information, does not properly handle zero-length raddr opaque data. A malicious or compromised metadata server can exploit this by providing a zero-length...

kernel: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()

A flaw was found in the Linux kernel's crypto QAT QuickAssist Technology module. A race condition exists during the teardown of Virtual Function to Physical Function VF2PF work in the adfdisablesriov function. This allows a concurrently scheduled or already queued worker to attempt to access memo...

EUVD-2026-70867

A security flaw has been discovered in code-projects Hospital Information System 1.0. Affected by this vulnerability is the function getSinglePresp of the file includes/presp/PrespController.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated...

CVE-2026-85399

A SQL injection vulnerability exists in code-projects Hospital Information System 1.0 , specifically in the function getSinglePresp within the file includes/presp/PrespController.php . An unauthenticated remote attacker can manipulate the ID argument to inject SQL, potentially affecting confident...

CVE-2026-85399 code-projects Hospital Information System PrespController.php getSinglePresp sql injection

A security flaw has been discovered in code-projects Hospital Information System 1.0. Affected by this vulnerability is the function getSinglePresp of the file includes/presp/PrespController.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated...

kernel: KEYS: fix overflow in keyctl_pkey_params_get_2()

A flaw was found in the Linux kernel's keyctlpkeyparamsget2 function within the KEYS subsystem. The vulnerability arises from an incorrect calculation of the internal output buffer's length, which can lead to a buffer overflow when a user-provided buffer is too small. This flaw could allow a loca...

kernel: exfat: fix potential use-after-free in exfat_find_dir_entry()

A flaw was found in the Linux kernel's exFAT filesystem driver. A local attacker could exploit a use-after-free vulnerability in the exfatfinddirentry function. This occurs because a buffer is prematurely released while still being referenced, which can be triggered by processing a specially...

kernel: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error

A flaw was found in the Linux kernel's Bluetooth Host Controller Interface HCI Universal Asynchronous Receiver/Transmitter UART driver. When the hciregisterdev function fails, a flag indicating protocol initialization is not properly cleared. This oversight allows incoming UART data to be process...

CVE-2022-2333

CVE-2022-2333 Después de medio año de trabajo, les muestro algo bueno. ¿Les gusta sxf vpn? No me gusta mucho. Después de medio año, ya obtuve una shell. Después de obtenerla, descubrí que era firmware antiguo. En M7.6.8 ya no estaba. Olvídalo, olvídalo. No es que no confíe en ti, es que todos...