CVE-2026-98659 iio: pressure: rohm-bm1390: Return error when read fails

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: rohm-bm1390: Return error when read fails The data reading function ignores the cached error value, and unconditionally returns 0. Return cached 'ret' -value after stopping the measurement so user knows if read...

CVE-2026-98659

The Linux kernel contains a vulnerability in the iio: pressure: rohm-bm1390 driver where the data reading function ignores cached error values and unconditionally returns 0. This causes the system to potentially return garbage data to the user instead of indicating a read failure. The fix involve...

EUVD-2026-103913

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: rohm-bm1390: Return error when read fails The data reading function ignores the cached error value, and unconditionally returns 0. Return cached 'ret' -value after stopping the measurement so user knows if read...

CVE-2026-98658

The Linux kernel contains a vulnerability in the iio: proximity: aw96103 driver where the firmware parser fails to properly validate the length field from the binary header. A truncated firmware image can cause the parser to read beyond the buffer, while a value smaller than the four-byte count f...

EUVD-2026-103912

In the Linux kernel, the following vulnerability has been resolved: iio: proximity: aw96103: validate firmware data length The firmware parser reads a length from the binary header and then uses it to walk six-byte register/value entries. A truncated firmware image can make the parser read beyond...

CVE-2026-98658 iio: proximity: aw96103: validate firmware data length

In the Linux kernel, the following vulnerability has been resolved: iio: proximity: aw96103: validate firmware data length The firmware parser reads a length from the binary header and then uses it to walk six-byte register/value entries. A truncated firmware image can make the parser read beyond...

CVE-2026-98657

The Linux kernel contains a vulnerability in the iio: proximity: pulsedlight driver where a failure in pm_runtime_set_active() during the probe() function leads to an incomplete cleanup. Specifically, the code jumps to error_unreg_buffer, which calls iio_triggered_buffer_cleanup() but fails to un...

EUVD-2026-103911

In the Linux kernel, the following vulnerability has been resolved: iio: proximity: pulsedlight: fix iiodevice left registered on PM setup failure pmruntimesetactive failing in probe jumps to errorunregbuffer, which only calls iiotriggeredbuffercleanup -- it does not undo the iiodeviceregister th...

CVE-2026-98657 iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure

In the Linux kernel, the following vulnerability has been resolved: iio: proximity: pulsedlight: fix iiodevice left registered on PM setup failure pmruntimesetactive failing in probe jumps to errorunregbuffer, which only calls iiotriggeredbuffercleanup -- it does not undo the iiodeviceregister th...

CVE-2026-98656 iio: trigger: cancel reenable_work before freeing trigger

In the Linux kernel, the following vulnerability has been resolved: iio: trigger: cancel reenablework before freeing trigger iiotriggernotifydoneatomic defers -reenable into trig-reenablework on the system workqueue, and the worker dereferences the owning trigger through containerof. Nothing...

CVE-2026-98656

A vulnerability exists in the Linux kernel 's iio: trigger subsystem. The function iio_trigger_notify_done_atomic() defers reenable() into trig->reenable_work on the system workqueue, where a worker dereferences the owning trigger using container_of(). Because this work is not cancelled before...

EUVD-2026-103910

In the Linux kernel, the following vulnerability has been resolved: iio: trigger: cancel reenablework before freeing trigger iiotriggernotifydoneatomic defers -reenable into trig-reenablework on the system workqueue, and the worker dereferences the owning trigger through containerof. Nothing...

CVE-2026-98655 perf: Require kernel access for text poke events

In the Linux kernel, the following vulnerability has been resolved: perf: Require kernel access for text poke events Perf events with excludekernel=1 can be opened without kernel perf access. However, excludekernel does not suppress text-poke sideband records. Every PERFRECORDTEXTPOKE is marked...

CVE-2026-98655

The Linux kernel contains a vulnerability where unprivileged tasks can bypass security restrictions to leak the runtime kernel text base , effectively undermining KASLR . The issue stems from perf events with exclude_kernel=1 failing to suppress text-poke sideband records . Because every PERF_REC...

EUVD-2026-103909

In the Linux kernel, the following vulnerability has been resolved: perf: Require kernel access for text poke events Perf events with excludekernel=1 can be opened without kernel perf access. However, excludekernel does not suppress text-poke sideband records. Every PERFRECORDTEXTPOKE is marked...

CVE-2023-2598

CVE-2023-2598 Refer: https://anatomic.rip/cve-2023-2598/ https://github.com/ysanatomic/iouringLPE-CVE-2023-2598 https://bsauce.github.io/2024/07/30/CVE-2023-2598/ Build: apt install -y liburing-dev gcc CVE-2023-2598.c -o CVE-2023-2598 -luring PoC: user1@syzkaller:$ uname -a Linux syzkaller 6.3.1 ...

linux-4.1.15_CVE-2017-1000371

Linux kernel release 4.x http://kernel.org/ These are the release notes for Linux version 4. Read them carefully, as they tell you what this is all about, explain how to install the kernel, and what to do if something goes wrong. WHAT IS LINUX? Linux is a clone of the operating system Unix, writt...

CVE-2024-44946

Usage of the Enhanced PoC: Compile the PoC Code: bash Copy code gcc -o kcmuafpocadvanced kcmuafpocadvanced.c -pthread Run the PoC: bash Copy code sudo ./kcmuafpocadvanced The advanced PoC should simulate a highly complex race condition, potentially triggering the UAF vulnerability in the Linux...

CVE-2014-3153

Towelroot for Ubuntu x86 This exp has been tested on ubuntu 14.04 x86 and ubuntu 12.04.2 x86 successfully. Learning CVE2014-3153 and towelroot. Kernel through version 3.14, use rbtree to store rtwaiternot plistnode, more complex! IA have diffrent threadinfo with ARM!! Source from geekben/towelroo...

CVE-2017-16995

Linux Kernel Version 4.14 - 4.4 Ubuntu && Debian Description This vulnerability exists in the eBPF bpf2 system call in the Linux kernel. When a user provides a malicious BPF program that causes a calculation error in the eBPF verifier module, it leads to arbitrary memory read/write issues...