Exploit for Use After Free in Linux Linux_Kernel

GhostLock-Galaxy 中文: READMEZH.md This is...

wifi: p54: validate RX frame length in p54_rx_eeprom_readback()

...

The vulnerability of the _ath10k_ce_free_pipe() and _ath10k_ce_free_pipe_64() functions in the drivers/net/wireless/ath/ath10k/ce.c driver file of the Atheros/Qualcomm wireless communication adapter driver for the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the ath10kcefreepipe and ath10kcefreepipe64 functions in the drivers/net/wireless/ath/ath10k/ce.c driver of the Atheros/Qualcomm wireless communication adapter driver for the Linux operating system is related to resource management errors. Exploiting this vulnerability could...

CVE-2026-64574

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: tear down new links on vif update error path When ieee80211vifupdatelinks adds new links it allocates a link container for each and calls ieee80211linkinit which registers the per-link debugfs files with...

CVE-2026-64571 wifi: p54: validate RX frame length in p54_rx_eeprom_readback()

In the Linux kernel, the following vulnerability has been resolved: wifi: p54: validate RX frame length in p54rxeepromreadback p54rxeepromreadback copies the requested EEPROM slice out of a device-supplied readback frame without checking that the skb actually holds that many bytes. Commit...

Linux Distros Unpatched Vulnerability : CVE-2026-64571

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: p54: validate RX frame length in p54rxeepromreadback p54rxeepromreadback copies the requested EEPROM slice out of a device-supplied readback frame without...

CVE-2026-24077

Information Disclosure when processing wireless network channel switch information with improperly formatted length fields...

CVE-2026-25288 Buffer Over-read in WLAN Firmware

Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size...

CVE-2026-24077

Information Disclosure when processing wireless network channel switch information with improperly formatted length fields...

EUVD-2026-52730

Information Disclosure when processing wireless network channel switch information with improperly formatted length fields...

CVE-2026-24077 Integer Underflow (Wrap or Wraparound) in WLAN Host

Information Disclosure when processing wireless network channel switch information with improperly formatted length fields...

ROS-20260804-73-0029

The vulnerability of the cfg80211checkandendcac function in the net/wireless/reg.c module, which supports wireless communication in Linux kernels, is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-24077: Integer Underflow (Wrap or Wraparound)

Information Disclosure when processing wireless network channel switch information with improperly formatted length fields...

CVE-2026-20482

In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00486814; Issue ID: MSV-6824...

CVE-2026-20465

In wlan AP driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00489200; Issue ID: MSV-783...

CVE-2026-20493

In wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: BORA00154903; Issue ID: MSV-7575...

CVE-2026-20493

A missing bounds check in the wifi component can lead to a possible out of bounds write . This vulnerability could result in a local denial of service if an attacker has already obtained System privileges . Exploitation does not require user interaction. Remediation is available via Patch ID: BOR...

CVE-2026-20482

In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00486814; Issue ID: MSV-6824...

EUVD-2026-52072

In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00486814; Issue ID: MSV-6824...

CVE-2026-20482

In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00486814; Issue ID: MSV-6824...