Linux kernel clk-loongson2 driver structure Data Compromise

The vulnerability in determining the structure of loongson2clktype in the drivers/clk/clk-loongson2.c file of the Linux kernel synchronization driver relates to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...

Linux net/ipv6/addrconf.c Heap Buffer Overflow DoS

The vulnerability of the addrconfinitnet function in the net/ipv6/addrconf.c module of the Linux kernel is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux BPF Interpreter Use-After-Free

The vulnerability of the bpf function in the kernel/bpf/helpers.c file, which is part of the BPF interpreter support for Linux’s operating system, relates to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

BIT-CEPH-2021-20288

An authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles CEPHXGETAUTHSESSIONKEY requests, it doesn't sanitize otherkeys, allowing key reuse. An attacker who can request a globalid can exploit the ability of any user to request a globalid previously associated...

NILFS2 inode_dirty Heap Buffer Overflow DoS

The vulnerability of the nilfsmark inodedirty function in the fs/nilfs2/inode.c file of the NILFS2 file system in the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

ROS-20260313-73-0022

A vulnerability in the raid1reshape function of the Linux operating system kernel is related to incorrect resource clearing or freeing. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...

Intel-I2C Driver Buffer Overflow DoS

The vulnerability of the drivers/hid/intel-thc-hid/intel-quicki2c/quicki2c-dev.h module of the Linux operating system’s kernel relates to access to memory beyond the permissible buffer data size due to errors in interpreting data received from hardware components. Exploiting this vulnerability ca...

EUVD-2025-208552

Improper input validation in the UEFI firmware for some Intel Reference Platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable data manipulation. This result may potentially occur via local access when...

EUVD-2026-10465

Due to an uncontrolled resource consumption Denial of Service vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a remote-enabled function module with an excessively large loop-control parameter. This triggers prolonged loop execution th...

ttm_bo_validate Heap Buffer Overflow DoS

The vulnerability of the ttmbovalidate function in the drivers/gpu/drm/ttm/ttmbo.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux kernel mac_hid_toggle_emumouse Heap Buffer Overflow

The vulnerability of the machidtoggleemumouse function in the drivers/macintosh/machid.c file of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility o...

Linux kernel trace_pid_write buffer overflow DoS

The vulnerability of the tracepidwrite function in the kernel/trace/trace.c module, which supports Linux operating system tracing, is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

ath9k_wmi_ctrl_rx Heap Buffer Overflow DoS

The vulnerability of the ath9kwmictrlrx function in the drivers/net/wireless/ath/ath9k/wmi.c module of the Atheros/Qualcomm wireless communication adapter driver for the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an...

CVE-2026-23596

A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to trigger service restarts. Successful exploitation could allow an attacker to disrupt services and negatively impact system availability...

CVE-2026-23596

A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to trigger service restarts. Successful exploitation could allow an attacker to disrupt services and negatively impact system availability...

CVE-2026-23689

Due to an uncontrolled resource consumption Denial of Service vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a remote-enabled function module with an excessively large loop-control parameter. This triggers prolonged loop execution th...

Huawei EMUI and Huawei HarmonyOS Communication Module Address Reading Vulnerability

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. An address reading vulnerability exists in the Huawei EMUI and Huawei HarmonyOS communication module, which can b...

KLogic SCADA KASCAD Data Compromise

The vulnerability of the KLogic SCADA system “KASKAD”’s virtual controller is related to the use of a password hash instead of the actual password for authentication. Exploiting this vulnerability allows an intruder to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2026-23689

Due to an uncontrolled resource consumption Denial of Service vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a remote-enabled function module with an excessively large loop-control parameter. This triggers prolonged loop execution th...

kernel: vrf: use RCU protection in l3mdev_l3_out()

A use-after-free vulnerability was found in the Linux kernel. l3mdevl3out can be called without RCU being held, causing damage to the availability of the system...