CVE-2018-9995-rs

Resumen Este repositorio contiene un exploit de prueba de concepto PoC implementado en Rust que apunta a CVE-2018-9995. El código es solo para fines de investigación y educativos. Detalles de CVE Identificador: CVE-2018-9995 Resumen: Exploit de prueba de concepto que demuestra la vulnerabilidad...

PT-2026-98845

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A tree connection leak exists in the smb2 tree connect function. The issue occurs when the ksmbd iov pin rsp function fails, resulting in the failure to disconnect the new tree connectio...

CVE-2026-89848

A use-after-free in the Linux kernel qla2xxx SCSI driver occurs during queue-pair teardown. qla2xxx_delete_qpair() frees the request queue before releasing the response-queue MSI-X interrupt; in that window a late response interrupt can fire and dereference the freed rsp->req pointer via qla24...

PT-2026-93483

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the qla2xxx SCSI driver where the qla nvme xmt ls rsp function fails to properly check if the firmware has started before calling qla nvme ls reject iocb. This leads t...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Handling of errors when calling otx2mboxgetrsp in cn10k.c has been improved. A check for an error pointer was added after calling otx2mboxgetrsp...

PT-2026-72992

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Bluetooth L2CAP implementation. The function l2cap le connect rsp retrieves a channel using l2cap get chan by ident but fails to hold a reference or...

PT-2026-72961

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue exists in the Bluetooth subsystem. The function hci find adv instance returns an adv info pointer that is only valid while hdev-lock is held. However,...

CVE-2026-43184: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: rnbd-srv: Zero the rsp buffer before using it Before using the data buffer to send back the response message, zero it completely. This prevents any stray bytes to be picked up by the client side when there the message is exchange...

CVE-2025-71220

In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbdsessionrpcclose on error path in createsmb2pipe When ksmbdiovpinrsp fails, we should call ksmbdsessionrpcclose...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-53156)

wifi: ath9k: add range check for connrspepid in htcconnectservice. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504632; scriptversion"1.3";...

EUVD-2023-37212

Malicious code in bioql PyPI...

CVE-2023-33023

Memory corruption while processing finishsign command to pass a rsp buffer...

octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c

...

UBUNTU-CVE-2024-56707

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2mboxgetrsp errors in otx2dmacflt.c Add error pointer checks after calling otx2mboxgetrsp...

CVE-2024-56679

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2mboxgetrsp errors in otx2common.c Add error pointer check after calling otx2mboxgetrsp...

PT-2024-36987

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the octeontx2-pf module. The issue involved handling errors for otx2 mbox get rsp in the otx2 common.c file. An err...

AZL-54951 CVE-2024-53156 affecting package kernel for versions less than 5.15.176.3-1

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: add range check for connrspepid in htcconnectservice I found the following bug in my fuzzer: UBSAN: array-index-out-of-bounds in drivers/net/wireless/ath/ath9k/htchst.c:26:51 index 255 is out of range for type...

UBUNTU-CVE-2024-53156

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: add range check for connrspepid in htcconnectservice I found the following bug in my fuzzer: UBSAN: array-index-out-of-bounds in drivers/net/wireless/ath/ath9k/htchst.c:26:51 index 255 is out of range for type...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the lack of a range check for connrspepid in the htcconnectservice function in the wifi driver ath9k...

CVE-2024-50083 tcp: fix mptcp DSS corruption due to large pmtu xmit

In the Linux kernel, the following vulnerability has been resolved: tcp: fix mptcp DSS corruption due to large pmtu xmit Syzkaller was able to trigger a DSS corruption: TCP: requestsocksubflowv4: Possible SYN flooding on port :::20002. Sending cookies. ------------ cut here ------------ WARNING:...