Exploit for Classic Buffer Overflow in Qualcomm Aqt1000_Firmware

BlackBerry KEY2 Research Reverse-engineering, unlock, and Lin...

Exploit for Classic Buffer Overflow in Qualcomm Aqt1000_Firmware

BlackBerry KEY2 Research Reverse-engineering, unlock, and Lin...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Remove the unreasonable unlock in ocfs2readblocks. Patch series “Misc fixes for ocfs2readblocks”, version 5. This series contains two fixes for ocfs2readblocks. The first patch addresses the issue reported by syzbot, which...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: nbd: The defer config unlock in nbdgenlconnect has been fixed. There is one use-after-free warning when running NBDCMDCONNECT and NBDCLEARSOCK: nbdgenlconnect: nbdallocandinitconfig // configrefs=1 nbdstartdevice // configrefs...

CVE-2026-105113

Nezha Dashboard from 1.8.0 before 2.3.13 contains an improper locking vulnerability where a non-deferred mutex unlock leaks on a nil-map panic path. Any authenticated non-admin member can issue four notification API calls to permanently deadlock the alerting subsystem, then exhaust memory with...

BIT-OPENBAO-2026-55776 OpenBao: Transit secrets engine crashes on key creation with `derived: true` for asymmetric key types

OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, an authenticated OpenBao caller with write access to transit/keys/ could terminate the server process by setting derived to true while the type parameter selected rsa-, ecdsa-, or ed25519. The Transit policy...

CVE-2026-98000 hwmon: Fix potential UAF in pec_store

In the Linux kernel, the following vulnerability has been resolved: hwmon: Fix potential UAF in pecstore Sashiko reports: In pecstore, a guardmutex&hwdev-lock is taken. If the chip write operation returns an error other than -EOPNOTSUPP, the code jumps to the put label, which calls putdevicehdev...

CVE-2026-98000

The Linux kernel contains a potential Use-After-Free (UAF) vulnerability in the hwmon subsystem specifically within the pec_store() function. The issue occurs because the code uses guard(mutex)(&hwdev->lock) to manage a mutex. If a chip write operation returns an error other than -EOPNOTSUPP, ...

EUVD-2026-86829

Insecure Direct Object Reference / missing object-level authorization in the Akia keyless entry cloud service. The unlock action is relying on a client-supplied room/door identifier that is not properly authorized server-side against the authenticated guest's booking. An authenticated guest could...

PT-2026-99006

OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, an authenticated OpenBao caller with write access to transit/keys/ could terminate the server process by setting derived to true while the type parameter selected rsa-, ecdsa-, or ed25519. The Transit policy...

CVE-2026-98000

In the Linux kernel, the following vulnerability has been resolved: hwmon: Fix potential UAF in pecstore Sashiko reports: In pecstore, a guardmutex&hwdev-lock is taken. If the chip write operation returns an error other than -EOPNOTSUPP, the code jumps to the put label, which calls putdevicehdev...

PT-2026-97971

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/pagemap component where drm pagemap migrate unmap pages relies on a pages array to identify pages requiring DMA unmapping. Because drm pagemap migration unlock...

SUSE CVE-2026-93171

In the Linux kernel, the following vulnerability has been resolved: leds: lp5860: Fix a potential double-unlock In lp5860deviceinit, if lp5860initdt fails, an already unlocked mutex is unlocked another time. Slightly rework how the lock is taken/released to avoid this potential double unlock...

PT-2026-97113

Name of the Vulnerable Software and Affected Versions OpenEye Apex Network Video Recorder NVR versions 2.2.3.4 through 3.2.9.376 Description The administrator password-reset unlock-code design lacks a per-device secret or server-side cryptographic material. An attacker with physical-console acces...

Linux Distros Unpatched Vulnerability : CVE-2026-93171

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: leds: lp5860: Fix a potential double- unlock In lp5860deviceinit, if lp5860initdt fails, an...

CVE-2026-93171

In the Linux kernel, the following vulnerability has been resolved: leds: lp5860: Fix a potential double-unlock In lp5860deviceinit, if lp5860initdt fails, an already unlocked mutex is unlocked another time. Slightly rework how the lock is taken/released to avoid this potential double unlock...

DEBIAN-CVE-2026-90317

In the Linux kernel, the following vulnerability has been resolved: bpf: Invalidate RCU pointers after final spin unlock In a sleepable BPF program, a spin lock can provide the only RCU protection for a kptr. The final bpfspinunlock ends that protection, but the verifier leaves the pointer valid...

CVE-2026-93171 leds: lp5860: Fix a potential double-unlock

In the Linux kernel, the following vulnerability has been resolved: leds: lp5860: Fix a potential double-unlock In lp5860deviceinit, if lp5860initdt fails, an already unlocked mutex is unlocked another time. Slightly rework how the lock is taken/released to avoid this potential double unlock...

CVE-2026-93171

CVE-2026-93171 affects the Linux kernel's lp5860 LED driver . The root cause is a potential double-unlock of a mutex in lp5860_device_init(): when lp5860_init_dt() fails, an already-unlocked mutex is unlocked a second time. The fix reworks how the lock is taken and released to avoid this. The fix...

CVE-2026-93171 leds: lp5860: Fix a potential double-unlock

In the Linux kernel, the following vulnerability has been resolved: leds: lp5860: Fix a potential double-unlock In lp5860deviceinit, if lp5860initdt fails, an already unlocked mutex is unlocked another time. Slightly rework how the lock is taken/released to avoid this potential double unlock...