CVE-2026-98438

The Linux kernel contains a vulnerability in the mptcp options where an uninitialized value was used in mptcp_write_data_fin. Specifically, when sending a DATA_FIN without data, the system fails to properly initialize the csum field and other fields in the ext_copy structure, as these are no long...

EUVD-2026-103676

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: fix runtime PM reference leaks Use pmruntimeresumeandget in irisenablepowerdomains to avoid leaking a runtime PM usage count on failure. Also ensure pmruntimeputsync is always called in irisdisablepowerdomains,...

CVE-2026-98437

The Linux kernel contains a vulnerability in the media: qcom: iris driver where runtime PM reference leaks occur. The issue stems from a failure to balance runtime PM usage counts during specific operations. Specifically, the iris_enable_power_domains() function requires the use of pm_runtime_res...

CVE-2026-98437 media: qcom: iris: fix runtime PM reference leaks

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: fix runtime PM reference leaks Use pmruntimeresumeandget in irisenablepowerdomains to avoid leaking a runtime PM usage count on failure. Also ensure pmruntimeputsync is always called in irisdisablepowerdomains,...

CVE-2026-98436

The Linux kernel contains a vulnerability in the accel/amdxdna component where device buffers were being exported despite not being intended for such use. The fix involves explicitly disabling exporting support for these buffers. No specific exploit details or in-the-wild exploitation information...

CVE-2026-98436 accel/amdxdna: Disable device buffer exporting

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Disable device buffer exporting Device buffers are never intended to be exported. Disable exporting support explicitly...

EUVD-2026-103675

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Disable device buffer exporting Device buffers are never intended to be exported. Disable exporting support explicitly...

EUVD-2026-103674

In the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Use parent device for devres in altrportbsetup Anchor the devres group and the devm-managed IRQ requests in altrportbsetup to the actual parent device device-edac-dev instead of the embedded struct device inside the...

CVE-2026-98435 EDAC/altera: Use parent device for devres in altr_portb_setup()

In the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Use parent device for devres in altrportbsetup Anchor the devres group and the devm-managed IRQ requests in altrportbsetup to the actual parent device device-edac-dev instead of the embedded struct device inside the...

CVE-2026-98435

The Linux kernel contains a vulnerability in the EDAC/altera driver within the altr_portb_setup() function. The issue stems from anchoring the devres group and devm-managed IRQ requests to an embedded struct device inside a copied per-port altr_edac_device_dev instead of the actual parent device ...

EUVD-2026-103672

In the Linux kernel, the following vulnerability has been resolved: sysctl: Check range in procdointvecmsjiffiesminmax Add the range check to doprocintconvmsjiffiesminmax that commit d174174c6776 "sysctl: replace SYSCTLINTCONVCUSTOM macro with functions" incorrectly removed...

CVE-2026-98434 sysctl: Check range in proc_dointvec_ms_jiffies_minmax

In the Linux kernel, the following vulnerability has been resolved: sysctl: Check range in procdointvecmsjiffiesminmax Add the range check to doprocintconvmsjiffiesminmax that commit d174174c6776 "sysctl: replace SYSCTLINTCONVCUSTOM macro with functions" incorrectly removed...

CVE-2026-98434

The Linux kernel contains a vulnerability related to sysctl where a range check in the do_proc_int_conv_ms_jiffies_minmax function was incorrectly removed in a previous commit (d174174c6776). The issue involves the transition of the SYSCTL_INT_CONV_CUSTOM macro to functions. This vulnerability ha...

EUVD-2026-103671

In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: fix secure device page leak on uvpagein failure In kvmppcsvmpagein, if uvpagein fails after kvmppcuvmemgetpage has succeeded, the secure device page is never released. kvmppcuvmemgetpage sets a bit in...

Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284

Remote git clone https://github.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284.git && cd Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284 && gcc -O0 -Wall -o exp exp.c -lutil && ./exp git clone https://github.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284.git && cd...

ovswrap

OVSwrap — Linux kernel Open vSwitch datapath overflow tracking site Source for the OVSwrap patch-status tracker: a single-page site recording which distributions have shipped a fix for the Open vSwitch datapath overflow in the Linux kernel. Where the facts live Everything about the bug — CVE IDs,...

ved-ebpf

VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF VED Vault Exploit Defense-eBPF leverages eBPF extended Berkeley Packet Filter to implement runtime kernel security monitoring and exploit detection for Linux systems. Introduction eBPF is an in-kernel virtual machine that allows code...

CVE-2023-3338-DECPwn

DECPwn Practicing different Linux kernel exploitation techniques with my DECnet vulnerability and null page mapping enabled. Scenarios Everything disabled : qemu-system-x8664 -append "nosmap nosmep nopti nokaslr" Code execution is redirected to the output function in userland, which invokes...

CVE-2017-0541

poc and vulnerability analysis of CVE-2017-0541...

CVE-2017-11176

CVE-2017-11176 Proof of concept for CVE-2017-11176 for code execution. Vulnerability The mqnotify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a Netlink socket, it allows attackers to cause a denial...