CVE-2026-74750

A flaw was found in the Linux kernel's ovpn module. This vulnerability arises from an incorrect handling of cryptographic resource freeing, where a function that requires the ability to pause sleep is executed in a context that does not allow it. This improper resource management could lead to...

Hunt-Sleeping-Beacons

Hunt-Sleeping-Beacons Questo progetto è principalmente uno scanner di callstack che cerca di identificare IOC che indicano un agente C2 spacchettato o iniettato. Tutti i controlli si basano sull'osservazione che gli agenti C2 attendono tra le loro callback, causando l'idle del thread del beacon, ...

AZL-97731 CVE-2026-80562 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: gpio: ml-ioh: use rawspinlockt for the register lock iohirqtype is registered as the irqchip .irqsettype callback and takes chip-spinlock with spinlockirqsave. This callback is reached from setupirq - irqsettrigger -...

CVE-2026-80562 gpio: ml-ioh: use raw_spinlock_t for the register lock

In the Linux kernel, the following vulnerability has been resolved: gpio: ml-ioh: use rawspinlockt for the register lock iohirqtype is registered as the irqchip .irqsettype callback and takes chip-spinlock with spinlockirqsave. This callback is reached from setupirq - irqsettrigger -...

Linux Distros Unpatched Vulnerability : CVE-2026-74750

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ovpn: defer key slot crypto freeing to workqueue Key slots are released through a kref and the existing release path frees the AEAD transforms from an RCU...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: can: dev: cansettermination, which allows for GPIO devices that are in a sleeping state to be managed. In commit 6e86a1543c37 “can: dev: provide optional GPIO-based termination support”, GPIO-based termination support was added...

SleepyCrypt

SleepyCrypt Una funzione shellcode per cifrare l'immagine di un processo in esecuzione in memoria durante la fase di sleep. Questo è il codice complementare al mio post sul blog qui. Build È sufficiente eseguire build.sh per compilare il codice C, estrarre la sezione .text come shellcode e...

CVE-2026-74468

In the Linux kernel, the following vulnerability has been resolved: gpio: pch: use rawspinlockt for the register lock pchirqtype is registered as the irqchip .irqsettype callback and takes chip-spinlock with spinlockirqsave. This callback is reached from setupirq - irqsettrigger - chip-irqsettype...

EUVD-2026-59661

In the Linux kernel, the following vulnerability has been resolved: gpio: pch: use rawspinlockt for the register lock pchirqtype is registered as the irqchip .irqsettype callback and takes chip-spinlock with spinlockirqsave. This callback is reached from setupirq - irqsettrigger - chip-irqsettype...

Linux Distros Unpatched Vulnerability : CVE-2026-74468

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpio: pch: use rawspinlockt for the register lock pchirqtype is registered as the irqchip .irqsettype callback and takes chip-spinlock with spinlockirqsave. Th...

CVE-2026-64454

A flaw was found in the Linux kernel's USB dwc3 driver. A local attacker could trigger a condition where a sleeping function is called from an invalid context during a USB gadget suspend operation. This can lead to system instability or a kernel panic, resulting in a Denial of Service DoS...

SUSE CVE-2026-64429

In the Linux kernel, the following vulnerability has been resolved: gpio: eic-sprd: use rawspinlockt in the irq startup path sprdeicirqunmask enables the GPIO IRQ and then updates controller state through sprdeicupdate, which takes sprdeic-lock with spinlockirqsave. The callback can be reached fr...

CVE-2026-64429

In the Linux kernel, the following vulnerability has been resolved: gpio: eic-sprd: use rawspinlockt in the irq startup path sprdeicirqunmask enables the GPIO IRQ and then updates controller state through sprdeicupdate, which takes sprdeic-lock with spinlockirqsave. The callback can be reached fr...

UBUNTU-CVE-2026-64429

In the Linux kernel, the following vulnerability has been resolved: gpio: eic-sprd: use rawspinlockt in the irq startup path sprdeicirqunmask enables the GPIO IRQ and then updates controller state through sprdeicupdate, which takes sprdeic-lock with spinlockirqsave. The callback can be reached fr...

CVE-2026-64429

CVE-2026-64429 : In the Linux kernel, the gpio eic-sprd driver used a sleeping lock during irq startup (spin_lock_irqsave) which could be invoked from an irq_startup path, leading to a sleeping function in an invalid context on PREEMPT_RT. The fix converts the Spreadtrum EIC controller lock to a ...

CVE-2026-64429 gpio: eic-sprd: use raw_spinlock_t in the irq startup path

In the Linux kernel, the following vulnerability has been resolved: gpio: eic-sprd: use rawspinlockt in the irq startup path sprdeicirqunmask enables the GPIO IRQ and then updates controller state through sprdeicupdate, which takes sprdeic-lock with spinlockirqsave. The callback can be reached fr...

CVE-2026-64428

In CVE-2026-64428, a Linux kernel vulnerability was fixed in the GPIO SCH irq path. The issue arose because sch_irq_unmask() enables the GPIO IRQ and then updates controller state via sch_irq_mask_unmask(), which uses sch->lock with spin_lock_irqsave(). The callback could reach irq_startup() w...

PT-2026-64649

In the Linux kernel, the following vulnerability has been resolved: gpio: sch: use raw spinlock t in the irq startup path sch irq unmask enables the GPIO IRQ and then updates the controller state through sch irq mask unmask, which takes sch-lock with spin lock irqsave. The callback can be reached...

PT-2026-64686

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the USB xHCI driver where the xhci free streams function is called to free stream resources when a USB device with active stream endpoints is disconnected. The functio...

PT-2026-64650

In the Linux kernel, the following vulnerability has been resolved: gpio: eic-sprd: use raw spinlock t in the irq startup path sprd eic irq unmask enables the GPIO IRQ and then updates controller state through sprd eic update, which takes sprd eic-lock with spin lock irqsave. The callback can be...