1210 matches found
CVE-2022-0847
CVE-2022-0847 Dirty Pipe Linuxカーネル権限昇格分析 toc 本記事は華為セキュリティ公式アカウントに初出掲載されたものです。こちらはブログ版（より完全な内容）です。 初出リンク:https://mp.weixin.qq.com/s/6VhWBOzJ7uu80nzFxe5jpg 脆弱性概要 脆弱性ID: CVE-2022-0847 別名: ダーティパイプ dirty pipe 脆弱性対象: linux kernel - splice syscall 影響バージョン: linux 5.8 パッチ f6dd975583bd...
CVE-2026-89808
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix the case that vm range is hole at svmmigratecopytovram When migration vm range is hole at cpu sideMIGRATEPFNMIGRATE set + MIGRATEPFNVALID unset driver still allocates device pages. There is no dma map of src pages...
CVE-2026-89910 LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc
In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc Variable vector is declared on stack in function dmsintcinjectirq and sometimes it is used without initialized. Here fix this issue...
EUVD-2026-80510
In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc Variable vector is declared on stack in function dmsintcinjectirq and sometimes it is used without initialized. Here fix this issue...
CVE-2026-89808 drm/amdkfd: Fix the case that vm range is hole at svm_migrate_copy_to_vram
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix the case that vm range is hole at svmmigratecopytovram When migration vm range is hole at cpu sideMIGRATEPFNMIGRATE set + MIGRATEPFNVALID unset driver still allocates device pages. There is no dma map of src pages...
CVE-2019-14079
AndroidでのUSBデバイスファジング CVE-2019-14079 このブログ記事は、USBデバイスファジングを使用して私のAndroidデバイス（MI A2 - ストックAndroid搭載）で発見した単純なバグについてであり、Googleによって深刻度「高」と評価されました。このバグはQualcomm USBドライバに存在し、後に修正され、2020年3月のAndroidセキュリティ情報で開示されました。この脆弱性は、細工されたUSBリクエストをAndroidスマートフォンに送信すると、Androidカーネルがクラッシュし、スマートフォンが再起動するというものです。...
cve-2021-43226PoC
CVE-2021-43226の再現 環境 OS: Hyper-V上のWin10 20H2 バージョン19042.508。サイト https://os.click/en を見つけました。Windowsイメージが比較的充実しており、バックドアは今のところ発見されていません。 見つけたPoCはVisual Studio 2013でコンパイルされていたため、私もVisual Studio 2013で静的リンクを使用しました。 脆弱性 脆弱性はclfs.sys 内のCClfsLogFcbVirtual::QueryLogFileInfo 関数にあります。...
Linux Distros Unpatched Vulnerability : CVE-2026-89554
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: fix uninitialized localid in syncookie MPJOIN reconstruction mptcptokenjoincookieinitstate restores remotenonce, localnonce, backup, joinid, token and ms...
DEBIAN-CVE-2026-89554
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix uninitialized localid in syncookie MPJOIN reconstruction mptcptokenjoincookieinitstate restores remotenonce, localnonce, backup, joinid, token and msk from the saved cookie entry when rebuilding the request socket for ...
AZL-100725 CVE-2026-89554 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix uninitialized localid in syncookie MPJOIN reconstruction mptcptokenjoincookieinitstate restores remotenonce, localnonce, backup, joinid, token and msk from the saved cookie entry when rebuilding the request socket for ...
UBUNTU-CVE-2026-89554
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix uninitialized localid in syncookie MPJOIN reconstruction mptcptokenjoincookieinitstate restores remotenonce, localnonce, backup, joinid, token and msk from the saved cookie entry when rebuilding the request socket for ...
CVE-2026-89554
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix uninitialized localid in syncookie MPJOIN reconstruction mptcptokenjoincookieinitstate restores remotenonce, localnonce, backup, joinid, token and msk from the saved cookie entry when rebuilding the request socket for ...
CVE-2026-89554 mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix uninitialized localid in syncookie MPJOIN reconstruction mptcptokenjoincookieinitstate restores remotenonce, localnonce, backup, joinid, token and msk from the saved cookie entry when rebuilding the request socket for ...
EUVD-2026-76465
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix uninitialized localid in syncookie MPJOIN reconstruction mptcptokenjoincookieinitstate restores remotenonce, localnonce, backup, joinid, token and msk from the saved cookie entry when rebuilding the request socket for ...
CVE-2026-89554
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix uninitialized localid in syncookie MPJOIN reconstruction mptcptokenjoincookieinitstate restores remotenonce, localnonce, backup, joinid, token and msk from the saved cookie entry when rebuilding the request socket for ...
PT-2026-90270
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix uninitialized local id in syncookie MP JOIN reconstruction mptcp token join cookie init state restores remote nonce, local nonce, backup, join id, token and msk from the saved cookie entry when rebuilding the request...
CVE-2026-84391
A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via...
CVE-2026-84391
A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via...
CVE-2026-84391
A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer versions 7.6.3 through 7.6.6 may allow an attacker to cause denial of service . The CVSS 3.1 score is 6.5 (Medium) with the vector AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, indicating a network-accessible, low-complexity attack re...