CVE-2022-0847

CVE-2022-0847 Dirty Pipe: анализ повышения привилегий в ядре Linux toc Статья впервые опубликована в официальном аккаунте Huawei Security; это блог-версия более полная. Ссылка на оригинал: https://mp.weixin.qq.com/s/6VhWBOzJ7uu80nzFxe5jpg Краткие сведения об уязвимости Идентификатор уязвимости:...

cve-2021-43226PoC

Воспроизведение CVE-2021-43226 Среда Операционная система: Win10 20H2 на Hyper-V, версия 19042.508. На сайте https://os.click/en найдены довольно полные образы Windows, и на данный момент бэкдоров не обнаружено. Поскольку найденный PoC скомпилирован с помощью Visual Studio 2013, я также использую...

EUVD-2026-82241

In the Linux kernel, the following vulnerability has been resolved: ACPI: RISC-V: Check acpigethandle status in riscvacpiaddprtdep In riscvacpiaddprtdep, the acpigethandle call can fail which would leave linkhandle uninitialized. Fix it by checking the acpigethandle return status and skip the ent...

CVE-2026-93133 ACPI: RISC-V: Check acpi_get_handle() status in riscv_acpi_add_prt_dep()

In the Linux kernel, the following vulnerability has been resolved: ACPI: RISC-V: Check acpigethandle status in riscvacpiaddprtdep In riscvacpiaddprtdep, the acpigethandle call can fail which would leave linkhandle uninitialized. Fix it by checking the acpigethandle return status and skip the ent...

EUVD-2026-81707

In the Linux kernel, the following vulnerability has been resolved: net: bridge: Reject descending VLAN tunnel ranges A pair of descending VLAN and tunnel IDs can pass the tunnel range span check. The VLAN subtraction produces a negative int, which is converted to unsigned when compared with the...

CVE-2026-90114 net: bridge: Reject descending VLAN tunnel ranges

In the Linux kernel, the following vulnerability has been resolved: net: bridge: Reject descending VLAN tunnel ranges A pair of descending VLAN and tunnel IDs can pass the tunnel range span check. The VLAN subtraction produces a negative int, which is converted to unsigned when compared with the...

CVE-2026-92914 AVideo LoginControl PGP Second Factor Authentication Bypass

AVideo LoginControl contains an authentication bypass vulnerability in the PGP second factor verification that compares challenge responses using loose equality against an uninitialized session variable. Attackers with a victim's password can bypass the second factor by sending a parameter-less G...

CVE-2026-89808

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix the case that vm range is hole at svmmigratecopytovram When migration vm range is hole at cpu sideMIGRATEPFNMIGRATE set + MIGRATEPFNVALID unset driver still allocates device pages. There is no dma map of src pages...

DEBIAN-CVE-2026-89808

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix the case that vm range is hole at svmmigratecopytovram When migration vm range is hole at cpu sideMIGRATEPFNMIGRATE set + MIGRATEPFNVALID unset driver still allocates device pages. There is no dma map of src pages...

CVE-2026-89910 LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc Variable vector is declared on stack in function dmsintcinjectirq and sometimes it is used without initialized. Here fix this issue...

EUVD-2026-80510

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc Variable vector is declared on stack in function dmsintcinjectirq and sometimes it is used without initialized. Here fix this issue...

CVE-2026-89808 drm/amdkfd: Fix the case that vm range is hole at svm_migrate_copy_to_vram

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix the case that vm range is hole at svmmigratecopytovram When migration vm range is hole at cpu sideMIGRATEPFNMIGRATE set + MIGRATEPFNVALID unset driver still allocates device pages. There is no dma map of src pages...

CVE-2019-14079

Фаззинг USB-устройств на Android CVE-2019-14079 Этот пост в блоге о простой ошибке, которую я нашёл в своём Android-устройстве MI A2 — работает на стоковом Android с помощью фаззинга USB-устройств, и Google пометил её как ошибку высокой степени серьёзности. Ошибка была в USB-драйвере Qualcomm,...

Astra Linux – Vulnerability in libstb

stbimage is a single-file library licensed under MIT, used for processing images. If stbiloadgifmain in stbiloadgiffrommemory fails, it returns a null pointer and may leave the z variable uninitialized. If the caller also sets the vertical flipping flag, the process continues by calling...

Astra Linux – Vulnerability in Linux 5.10

Ubuntu Linux 6.8 contains SAUCE patches that may involve the use of an uninitialized variable in the AppArmor AFINET/AFINET6 socket mediation code. This bug can be triggered by a non-privileged local user, and it could lead to incorrect, fine-grained mediation of network sockets...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mtd: nand: ecc-mxic: Fixed the use of an uninitialized variable ret. If ctx-steps is zero, the loop that processes ECC steps is skipped, and the variable ret remains uninitialized. This variable is later checked and returned, whi...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: fixed the issue of using an uninitialized rtpaddr in the processsdp function. The processsdp function declares a union named rtpaddr on the stack and passes it to the nfnatsip sdpsession hook after...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ipv6: Fixed an access bug involving an uninitialized variable in ip6makeskb. Syzbot reported the following bugs: ===================================================== BUG: KMSAN: uninit-value in archatomic64inc...

Linux Distros Unpatched Vulnerability : CVE-2026-89554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: fix uninitialized localid in syncookie MPJOIN reconstruction mptcptokenjoincookieinitstate restores remotenonce, localnonce, backup, joinid, token and ms...

DEBIAN-CVE-2026-89554

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix uninitialized localid in syncookie MPJOIN reconstruction mptcptokenjoincookieinitstate restores remotenonce, localnonce, backup, joinid, token and msk from the saved cookie entry when rebuilding the request socket for ...