CVE-2024-3094

CVE-2024-3094 POC básico para probar la vulnerabilidad CVE-2024-3094 dentro de un clúster K8s ❗ DESCARGO DE RESPONSABILIDAD ❗ USAR SOLO CON FINES EDUCATIVOS. EL AUTOR NO ES RESPONSABLE POR NINGÚN DAÑO CAUSADO POR EL USO DE ESTE SOFTWARE Descripción Desplegaremos un pod vulnerable y lo explotaremo...

CVE-2024-10511

CVE-2024-10511 CWE-287: Autenticación incorrecta Resumen El producto PowerChute Serial Shutdown de Schneider Electric es un software de gestión de UPS que permite un apagado ordenado del sistema y capacidades de gestión de energía para equipos de escritorio, servidores y estaciones de trabajo...

CVE-2021-43471

CVE-2021-43471 Vulnerabilidad de denegación de servicio causada por acceso no autorizado a impresoras Canon Producto afectado: LBP223 Fecha: 2021.11.3 El inicio de sesión en el Modo Administrador del Sistema no requiere contraseña de cuenta ni PIN. Un atacante puede apagar el dispositivo de forma...

CVE-2021-3166

Se descubrió un problema en Asus DSL-N14UB1 v.1.1.2.3805. Un atacante puede subir cualquier archivo al campo de Firmware siempre que se renombre como SettingsProductName.trx p. ej., SettingsDSL-N14U-B1.trx. Una vez que se carga el archivo, se activan medidas de apagado en una amplia gama de...

Linux Distros Unpatched Vulnerability : CVE-2026-89479

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: stop processing a packet once its association is deleted sctpendpointbhrcv looks the association up only when chunk-asoc is NULL, and caches the result in...

Linux Distros Unpatched Vulnerability : CVE-2026-89667

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache The shrinker, GC worker, and fsnotify/lease callbacks can unhash an nfsdfile from the...

Linux Distros Unpatched Vulnerability : CVE-2026-89534

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - svcrdma: Clear sccmid when ADDRCHANGE replacement fails When svcrdmalistenhandler handles RDMACMEVENTADDRCHANGE, it creates a replacement listener cmid and...

CVE-2026-80939

A flaw was found in the Linux kernel's rtw89 PCI driver. During a warm reboot on ARM64 platforms, the driver's missing shutdown callback fails to stop radio frequency kill rfkill polling. This leads to attempts to read from a non-responding device, causing a fatal asynchronous SError and resultin...

DEBIAN-CVE-2026-89667

In the Linux kernel, the following vulnerability has been resolved: nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache The shrinker, GC worker, and fsnotify/lease callbacks can unhash an nfsdfile from the rhashtable and then call nfsdfiledisposelistdelayed to move it to the...

CVE-2026-89667

In the Linux kernel, the following vulnerability has been resolved: nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache The shrinker, GC worker, and fsnotify/lease callbacks can unhash an nfsdfile from the rhashtable and then call nfsdfiledisposelistdelayed to move it to the...

CVE-2026-89661

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent post-shutdown use-after-free in unlockfilesystem Writing a filesystem path to /proc/fs/nfsd/unlockfilesystem runs nfsd4cancelcopybysb before nfsdmutex is held and before the handler confirms that nn-nfsdserv is set...

CVE-2026-80939

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: add .shutdown callback to stop rfkill polling on reboot Since the hardware rfkill polling was introduced, arm64 platforms can panic with an asynchronous SError during warm reboot: SError Interrupt on CPU8, code...

CVE-2026-89667

CVE-2026-89667 is a race condition in the Linux kernel's nfsd file cache subsystem. When the shrinker, GC worker, or fsnotify/lease callbacks unhash an nfsd_file and queue it for delayed disposal concurrently with nfsd_file_cache_shutdown_net(), the shutdown path can miss the file and drain the d...

CVE-2026-89667 nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache

In the Linux kernel, the following vulnerability has been resolved: nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache The shrinker, GC worker, and fsnotify/lease callbacks can unhash an nfsdfile from the rhashtable and then call nfsdfiledisposelistdelayed to move it to the...

CVE-2026-89667 nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache

In the Linux kernel, the following vulnerability has been resolved: nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache The shrinker, GC worker, and fsnotify/lease callbacks can unhash an nfsdfile from the rhashtable and then call nfsdfiledisposelistdelayed to move it to the...

EUVD-2026-76579

In the Linux kernel, the following vulnerability has been resolved: nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache The shrinker, GC worker, and fsnotify/lease callbacks can unhash an nfsdfile from the rhashtable and then call nfsdfiledisposelistdelayed to move it to the...

CVE-2026-89667

In the Linux kernel, the following vulnerability has been resolved: nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache The shrinker, GC worker, and fsnotify/lease callbacks can unhash an nfsdfile from the rhashtable and then call nfsdfiledisposelistdelayed to move it to the...

CVE-2026-89661

CVE-2026-89661 is a use-after-free in the Linux kernel's NFSD (NFS server daemon) subsystem. Writing a filesystem path to /proc/fs/nfsd/unlock_filesystem calls nfsd4_cancel_copy_by_sb() before the nfsd_mutex is held and before the handler confirms the server is still running. After shutdown, nfs4...

CVE-2026-89661 NFSD: Prevent post-shutdown use-after-free in unlock_filesystem

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent post-shutdown use-after-free in unlockfilesystem Writing a filesystem path to /proc/fs/nfsd/unlockfilesystem runs nfsd4cancelcopybysb before nfsdmutex is held and before the handler confirms that nn-nfsdserv is set...

CVE-2026-89661 NFSD: Prevent post-shutdown use-after-free in unlock_filesystem

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent post-shutdown use-after-free in unlockfilesystem Writing a filesystem path to /proc/fs/nfsd/unlockfilesystem runs nfsd4cancelcopybysb before nfsdmutex is held and before the handler confirms that nn-nfsdserv is set...