8421 matches found
RWCTF21-VirtualBox-61-escape
RWCTF21-VirtualBox-61-escape 0day VirtualBox 6.1 Escape for RealWorld CTF 2020/2021 Demo What? This is our solution for RealWorld CTF's "Box Escape" challenge from the 2020/2021 quals. Currently a 0day but we'll add the CVE number once there is one. CVE-2021-2119 How does it work? We wrote a...
RLSA-2026:99031 Moderate: kernel-rt security, bug fix, and enhancement update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: drm/amdkfd: hold eventmutex while checkpointing CRIU events CVE-2026-74446 kernel: drm/amdkfd: fix SMI event cross-process...
vghost-watch
vghost-watch A perimeter-check and responsible-disclosure helper for CVE-2026-74580 "Vghost" — a real Linux kernel vhost metadata-cache bug CVE record, OSV entry that gives local-privesc / VM-escape on exposed vhost/hypervisor hosts. Primary use case: check your own perimeter. Feed in your own IP...
kernel: kernel: Denial of service via unvalidated task tag in iSCSI Reject PDU
A flaw was found in the Linux kernel's SCSI subsystem within the libiscsi module. A malicious or compromised iSCSI storage target can trigger a denial of service DoS or data integrity issues by sending a crafted Reject Protocol Data Unit PDU containing an unvalidated Initiator Task Tag ITT. Becau...
kernel: kernel: Denial of service via unvalidated task tag in iSCSI Reject PDU
A flaw was found in the Linux kernel's SCSI subsystem within the libiscsi module. A malicious or compromised iSCSI storage target can trigger a denial of service DoS or data integrity issues by sending a crafted Reject Protocol Data Unit PDU containing an unvalidated Initiator Task Tag ITT. Becau...
Medium: libstoragemgmt
Issue Overview: A flaw was found in libstoragemgmt. An attacker with control over a local or virtual storage device could provide specially crafted SCSI Small Computer System Interface Vital Product Data VPD page 0x80 data. This malformed data, specifically an untrusted page length field, can lea...
kernel: kernel: Denial of service via unvalidated task tag in iSCSI Reject PDU
A flaw was found in the Linux kernel's SCSI subsystem within the libiscsi module. A malicious or compromised iSCSI storage target can trigger a denial of service DoS or data integrity issues by sending a crafted Reject Protocol Data Unit PDU containing an unvalidated Initiator Task Tag ITT. Becau...
kernel: kernel: Denial of Service via use-after-free race condition in SCSI tape driver
A flaw was found in the SCSI tape driver in the Linux kernel. A local user can trigger a race condition between device removal and open operations, causing the kernel to access memory after it has been freed. This use-after-free vulnerability primarily results in a Denial of Service DoS by causin...
kernel: kernel: Denial of Service via use-after-free race condition in SCSI tape driver
A flaw was found in the SCSI tape driver in the Linux kernel. A local user can trigger a race condition between device removal and open operations, causing the kernel to access memory after it has been freed. This use-after-free vulnerability primarily results in a Denial of Service DoS by causin...
kernel: kernel: Denial of service via unvalidated task tag in iSCSI Reject PDU
A flaw was found in the Linux kernel's SCSI subsystem within the libiscsi module. A malicious or compromised iSCSI storage target can trigger a denial of service DoS or data integrity issues by sending a crafted Reject Protocol Data Unit PDU containing an unvalidated Initiator Task Tag ITT. Becau...
kernel: kernel: Denial of service via unvalidated task tag in iSCSI Reject PDU
A flaw was found in the Linux kernel's SCSI subsystem within the libiscsi module. A malicious or compromised iSCSI storage target can trigger a denial of service DoS or data integrity issues by sending a crafted Reject Protocol Data Unit PDU containing an unvalidated Initiator Task Tag ITT. Becau...
Moderate: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/amdkfd: hold eventmutex while checkpointing CRIU events CVE-2026-74446 kernel: drm/amdkfd: fix SMI event cross-process information leak CVE-2026-97422 kernel: drm/amd/pm: bound...
ALSA-2026:99015 Moderate: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/amdkfd: hold eventmutex while checkpointing CRIU events CVE-2026-74446 kernel: drm/amdkfd: fix SMI event cross-process information leak CVE-2026-97422 kernel: drm/amd/pm: bound...
CVE-2026-113821
Buffer over-read in Microsoft Windows SCSI Class System File allows an authorized attacker to disclose information locally...
CVE-2026-105586
Null pointer dereference in Microsoft Windows SCSI Class System File allows an authorized attacker to elevate privileges locally...
EUVD-2026-121946
Buffer over-read in Microsoft Windows SCSI Class System File allows an authorized attacker to disclose information locally...
CVE-2026-113821
A buffer over-read vulnerability exists in the Microsoft Windows SCSI Class System File , which could allow an authorized attacker to perform local information disclosure. While the documents confirm the vulnerability's existence and its classification as a buffer over-read, they do not provide s...
EUVD-2026-121716
Null pointer dereference in Microsoft Windows SCSI Class System File allows an authorized attacker to elevate privileges locally...
CVE-2026-105586
A null pointer dereference exists in the Microsoft Windows SCSI Class System File , which could allow an authorized attacker to elevate privileges locally . While the provided documents confirm the vulnerability's existence and describe the underlying cause, they do not provide specific version n...
