CVE-2026-15892

The mcumgr SMP settings-management group handlers settingsmgmtread, settingsmgmtwrite, and settingsmgmtdelete in subsys/mgmt/mcumgr/grp/settingsmgmt/src/settingsmgmt.c allocate a keyname buffer and, for read, a data buffer via kmalloc when CONFIGMCUMGRGRPSETTINGSBUFFERTYPEHEAP is enabled, relying...

CVE-2026-15892

CVE-2026-15892 is a heap memory leak in Zephyr Project RTOS 's mcumgr settings-management handlers (settings_mgmt_read(), settings_mgmt_write(), settings_mgmt_delete()). When CONFIG_MCUMGR_GRP_SETTINGS_BUFFER_TYPE_HEAP and CONFIG_MCUMGR_GRP_SETTINGS_ACCESS_HOOK are both enabled, an early return o...

writeup-cve-2019-19194

Writeup CVE-2019-19194 This is a writeup and theoretical Proof-of-Concept of CVE-2019-19194. ⚠️ This CVE was found by https://asset-group.github.io/disclosures/sweyntooth/ Table of Content Summary Vulnerable software and version Overview Protocol Stack and Architecture Pairing Procedure Proof of...

Whisper_Bully

Whisper Bully Extracción de BDADDR Bluetooth, Denegación de Servicio y Herramienta de Investigación de Secuestro © 2026 @Ymsniper — Solo para investigación de seguridad autorizada. Resumen Whisper Bully es una herramienta de investigación de seguridad Bluetooth de tres etapas que apunta a...

PT-2026-90984

The mcumgr SMP settings-management group handlers settings mgmt read, settings mgmt write, and settings mgmt delete in subsys/mgmt/mcumgr/grp/settings mgmt/src/settings mgmt.c allocate a key name buffer and, for read, a data buffer via k malloc when CONFIG MCUMGR GRP SETTINGS BUFFER TYPE HEAP is...

kernel: Bluetooth: SMP: force responder MITM requirements before building the pairing response

A flaw was found in the Linux kernel's Bluetooth Security Manager Protocol SMP. An attacker could exploit this vulnerability during the Bluetooth pairing process by manipulating authentication requirements. This could lead to the selection of a weaker pairing method than intended, potentially...

CVE-2026-80233

CAYIN Technology's CMS-WS, CMS-SE, and SMP series products are affected by an arbitrary file upload vulnerability. A privileged remote attacker can upload and execute web shells, enabling arbitrary code execution on the server. Per the CVSS 3.1 score of 7.2 (HIGH) from TWCERT, the attack requires...

CVE-2026-80233 CAYIN Technology｜CAYIN CMS-WS/CMS-SE/SMP - Arbitrary File Upload

CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Technology have an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shells backdoors, thereby enabling arbitrary code execution on the server...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: soc: fsl: qbman: Use raw spinlock for cgrlock The smpcallfunction always runs its callback in a hard IRQ context, even when PREEMPTRT is enabled, where spinlocks may be in a sleeping state. Therefore, we need to use a raw spinloc...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fixed a use-after-free bug in smpexecutetasksg When executing an SMP task fails, the smpexecutetasksg function calls deltimer to delete the “slowtask-timer” timer. However, if the timer handler sastaskinternaltimedo...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: MIPS: smp: fill in sibling and core maps earlier After enabling CONFIGSCHEDCORE landed during 5.14 cycle, 2-core 2-thread-per-core interAptiv CPS-driven started emitting the following messages: 0.025698 CPU1 revision is:...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: scsi: lpfc: Fixed the call trace observed during I/O operations with CMF enabled. The following issue was observed with CMF enabled: BUG: Use of smpprocessorid in preemptible code: systemd-udevd/31711 Kernel: Caller is...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Net: Bridge – Use DEVSTATSINC The syzbot/KCSAN reported a data race in the brhandleframefinish function 1. This function can be executed on multiple CPUs without mutual exclusion. It is recommended to use the SMP-safe DEVSTATSINC...

EUVD-2026-64416

In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: lpc-snoop: Fix usercopy overflow in snoopfileread putfifowithdiscard acts as both producer and consumer on the kfifo: it calls kfifoskip advances out and kfifoput advances in from the IRQ handler without synchronizin...

CVE-2026-72154

A flaw was found in the Linux kernel, specifically within the OpenRISC architecture's handling of jump label synchronization in Symmetric Multiprocessing SMP systems. The implementation did not correctly invalidate instruction caches icaches on remote processor cores after updates. This oversight...

Linux Distros Unpatched Vulnerability : CVE-2026-72154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openrisc: Fix jumplabel smp syncing The original commit 8c30b0018f9d openrisc: Add jump label support copies from arm64 and does not properly consider how icach...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099966)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099966 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: avoid leaking percpu counter pointers The native and compat get-entries paths...

CVE-2026-72154

In the Linux kernel, the following vulnerability has been resolved: openrisc: Fix jumplabel smp syncing The original commit 8c30b0018f9d "openrisc: Add jump label support" copies from arm64 and does not properly consider how icache invalidation on remote cores works in OpenRISC. On OpenRISC remot...

UBUNTU-CVE-2026-72154

In the Linux kernel, the following vulnerability has been resolved: openrisc: Fix jumplabel smp syncing The original commit 8c30b0018f9d "openrisc: Add jump label support" copies from arm64 and does not properly consider how icache invalidation on remote cores works in OpenRISC. On OpenRISC remot...

CVE-2026-72154

In the Linux kernel, the following vulnerability has been resolved: openrisc: Fix jumplabel smp syncing The original commit 8c30b0018f9d "openrisc: Add jump label support" copies from arm64 and does not properly consider how icache invalidation on remote cores works in OpenRISC. On OpenRISC remot...