Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the corsair-void driver incorrectly locking a mutex in an interrupt context...

Vulnerability of the corsair_void_remove() function in the drivers/hid/hid-corsair-void.c module – This driver of the user interface subsystem of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the corsairvoidremove function in the drivers/hid/hid-corsair-void.c module – the driver for the user interface devices in the Linux operating system – relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise...

The vulnerability of the void() function in the drivers/net/ethernet/pensando/ionic/ionic_dev.h module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the void function in the drivers/net/ethernet/pensando/ionic/ionicdev.h module of the Linux kernel lies in the execution of a loop without sufficient restrictions on its execution count. Exploiting this vulnerability could allow an attacker to cause a service failure...

DEBIAN-CVE-2025-21842

In the Linux kernel, the following vulnerability has been resolved: amdkfd: properly free gangctxbo when failed to init user queue The destructor of a gtt bo is declared as void amdgpuamdkfdfreegttmemstruct amdgpudevice adev, void memobj; Which takes void as the second parameter. GCC allows passi...

SUSE CVE-2025-21797

In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Add missing delayed work cancel for headset status The canceldelayedworksync call was missed, causing a use-after-free in corsairvoidremove...

UBUNTU-CVE-2025-21797

In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Add missing delayed work cancel for headset status The canceldelayedworksync call was missed, causing a use-after-free in corsairvoidremove...

CVE-2025-21797

The CVE-2025-21797 entry concerns the Linux kernel HID driver for Corsair void headsets. The vulnerability arises from a missed cancel_delayed_work_sync() in corsair_void_remove(), causing a use-after-free. The issue affects the kernel component handling headset status and is rated with CVSS v3.1...

CVE-2025-21797 HID: corsair-void: Add missing delayed work cancel for headset status

In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Add missing delayed work cancel for headset status The canceldelayedworksync call was missed, causing a use-after-free in corsairvoidremove...

CVE-2025-21797: Use After Free

In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Add missing delayed work cancel for headset status The canceldelayedworksync call was missed, causing a use-after-free in corsairvoidremove...

PT-2025-14333

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been resolved, related to the HID corsair-void component. The corsair void process receiver function can be called from an interrupt context, and locking...

CVE-2023-48750

Missing Authorization vulnerability in voidthemes Void Elementor Post Grid Addon for Elementor Page builder void-elementor-post-grid-addon-for-elementor-page-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Void Elementor Post Grid Addon for...

CVE-2023-48750

CVE-2023-48750 affects the Void Elementor Post Grid Addon for Elementor Page Builder (WordPress) up to version 2.1.10. Root cause is Missing Authorization / Incorrectly Configured Access Control Security Levels, enabling unauthenticated access in ways defined by the vulnerability description. Imp...

CVE-2023-48750 WordPress Void Elementor Post Grid Addon for Elementor Page builder plugin <= 2.1.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in voidthemes Void Elementor Post Grid Addon for Elementor Page builder void-elementor-post-grid-addon-for-elementor-page-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Void Elementor Post Grid Addon for...

PT-2024-13640 · Elementor +1 · Elementor Page Builder +1

Name of the Vulnerable Software and Affected Versions: Void Elementor Post Grid Addon for Elementor Page builder versions 2.1.10 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels...

CVE-2023-48750: Missing Authorization

Missing Authorization vulnerability in voidthemes Void Elementor Post Grid Addon for Elementor Page builder void-elementor-post-grid-addon-for-elementor-page-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Void Elementor Post Grid Addon for...

WordPress plugin Void Elementor Post Grid Addon for Elementor Page builder 安全漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-40952 · Pprof · Pprof

Name of the Vulnerable Software and Affected Versions: pprof versions prior to 0.14.0 Description: The issue arises from the unsafe usage of the std::slice::from raw parts API, specifically in the TempFdArrayIterator.next function and when validating addresses with type c void. This can lead to t...

What is known about the Spoofing – Windows MSHTML Platform (CVE-2024-43573) vulnerability from the October Microsoft Patch Tuesday?

What is known about the Spoofing - Windows MSHTML Platform CVE-2024-43573 vulnerability from the October Microsoft Patch Tuesday? In fact, just that it is being exploited in the wild. There are no write-ups or public exploits yet. The Acknowledgements section in the Microsoft bulletin is empty. I...

PT-2024-6158

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Description The issue is related to a Windows MSHTML platform spoofing vulnerability, which allows attackers to execute arbitrary code remotely. This vulnerability has been exploited by the...

How to root an Android device for analysis and vulnerability assessment

TL;DR Rooting is useful for Android assessments The process is relatively simple It will wipe all user data from the device and void any warranty Introduction For mobile testing, be it for apps or hardware, having complete control over the device is essential for analysis and vulnerability...