DEBIAN-CVE-2026-80910

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses EAR SPKR PA Gain" and the four "WSA RX Mux" controls are enumerated, but their get and put callbacks access the value through ucontrol-value.integer.value0 a long instead ...

DEBIAN-CVE-2026-80909

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with invalid number of h265 refs Same change as for h264, avoids overflow later when calculating min dpb size. cherry picked from commit a4b0720e4f1601f97f59a2be9c1b4b94fa6527d5...

DEBIAN-CVE-2026-80903

In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix sync entry leak on OA config emit failure xeoaemitoaconfig releases the sync entries and the syncs array only on its success path. When it fails before the point of no return fence allocation, config buffer...

DEBIAN-CVE-2026-80891

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Validate AIBV and AISB before pinning guest pages The AIBV holds one bit per MSI-X vector for a given function. The size of the bit vector is derived from the NOI and the AIBVO. If the size of the AIBV exceeds a...

DEBIAN-CVE-2026-80890

In the Linux kernel, the following vulnerability has been resolved: sctp: reject stale cookies with mismatched verification tags sctpunpackcookie skips cookie expiration checks whenever an association already exists. This is broader than the exception in RFC 9260 Section 5.2.4. For an existing...

DEBIAN-CVE-2026-80888

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: drop dmabuf reference on foreign-fd prime import ttmprimefdtohandle returns -ENOSYS when the imported fd's dmabuf-ops do not match the ttmobjectdevice's ops, but does so without releasing the reference acquired by...

grafana-pcp security update

An update is available for grafana-pcp. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Grafana plugin for Performance Co-Pilot includes datasources for...

[SECURITY] [DSA 6483-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6483-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 04, 2026 https://www.debian.org/security/faq -...

CVE-2014-5139

creationtimestamp| type| source ---|---|--- 2026-09-04 18:00:03+00:00| seen| Telegram/lpcaxohlevWOQxYAX9XUMgFve84tVn0viR4d8tnkij6ww 2026-09-05 01:00:21+00:00| published-proof-of-concept| Telegram/lpcaxohlevWOQxYAX9XUMgFve84tVn0viR4d8tnkij6ww...

CVE-2025-45512

U-Boot 1.1.3 Exploit PoC 使用ガイド はじめに この概念実証 PoC は、2019年8月27日にコンパイルされたU-Bootブートローダーバージョン1.1.3の脆弱性を検証するために作成されました。このコードは、OWASP IoTセキュリティテストガイド ISTG カテゴリに関連する5つの異なる脆弱性を実装しています。 警告: このPoCは、テストの許可を得たデバイスでのみ使用してください。許可なくシステムで使用すると、適用法令に違反する可能性があります。 必要条件 1. Python 3.6+ 2. シリアルインターフェース UART...

usbkill

« usbkill » is an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer. To run: root@kitploit: sudo python usbkill.py or root@kitploit: sudo python3 usbkill.py Related project; same idea, but implemented as a Linux driver:...

hawkopsec

HawkOpsec 一键式 Linux OPSEC 加固与匿名工具包 -0b0d10 HawkOpsec 将一堆手动隐私命令转变为一键即可应用的安全模式 。 选择一个模式——工具会启动 Tor、配置 DNS、随机化你的身份并为你加固内核。 点击 RESET ，所有更改都会从快照回滚到你的原始状态。 GUI 从不以 root 身份运行；特权操作通过一个小型辅助程序经由 polkit/pkexec 执行。 每项更改在应用前都会被快照，因此没有任何操作是不可逆的。 安全模式 每个模式都会先重置到基线，然后应用完整配置——切换始终是干净的。 模式| 功能说明 ---|--- BASELINE|...

DEBIAN-CVE-2026-80885

In the Linux kernel, the following vulnerability has been resolved: afs: Fix uncancelled rxrpc OOB message handler Fix AFS to cancel its OOB message processing typically to respond to security challenges. Also move OOB message processing to afswq so that it's also waited for and make the OOB...

DEBIAN-CVE-2026-80882

In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm Ensure the ENOMEM error value is set when the input buffer allocation fails in tegraccmdoonereq...

DEBIAN-CVE-2026-80879

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2dioendiowrite A circular locking dependency involves INODEALLOCSYSTEMINODE, EXTENTALLOCSYSTEMINODE, and ORPHANDIRSYSTEMINODE. 1. ocfs2mknod acquires INODEALLOC then EXTENTALLOC. 2...

DEBIAN-CVE-2026-80872

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/tas2781: Cancel async firmware request at unbind TAS2781 HDA I2C and SPI queue RCA firmware loading from component bind with requestfirmwarenowait. The firmware loader keeps the callback module pinned and holds a device...

DEBIAN-CVE-2026-80876

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix event length with forced 8-byte alignment When RBFORCE8BYTEALIGNMENT is true, rbcalculateeventlength reserves the space of event-array0 for placing the data length and rbupdateevent stores the data length in...

DEBIAN-CVE-2026-80871

In the Linux kernel, the following vulnerability has been resolved: crypto: xilinx-trng - Remove cryptorng interface Implementing the cryptorng interface has no purpose, as it isn't used in practice. It's being removed from other drivers too. Just remove it. This leaves hwrng, which is actually...

DEBIAN-CVE-2026-80874

In the Linux kernel, the following vulnerability has been resolved: arm64: dts: renesas: ironhide: Describe inline ECC carveouts The DBSC5 DRAM controller protects DRAM content using inline ECC. The inline ECC utilizes areas of DRAM for its operation, which are in the DRAM address range, but must...

DEBIAN-CVE-2026-80873

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Write ESREL2 for injected nested SError exceptions kvminjectel2exception writes ESREL2 for synchronous exceptions but not for SError. enterexception64 does not write ESRELx for any exception type, so the construct...