CVE-2026-99255

A flaw was found in the Linux kernel's iouring subsystem. This flaw allows a local user to cause a Denial of Service DoS by executing chained asynchronous operations before terminating a task. Due to a race condition in the asynchronous work queue cleanup handler, an exiting process can overlook ...

CVE-2026-99254

A flaw was found in the Linux kernel's iouring subsystem. An unprivileged local user could cause a Denial of Service DoS by creating multiple interdependent asynchronous I/O rings and initiating task termination or cancellation. During cleanup, the kernel repeatedly floods the cancelling process...

CVE-2026-99253

A flaw was found in the Linux kernel's iouring subsystem. This flaw allows a local user to cause a Denial of Service DoS due to a race condition in the request cancellation mechanism. When a process terminates or executes a new program, a wake-up notification can be missed before the task enters ...

CVE-2026-99252

A flaw was found in the Linux kernel's iouring subsystem. A local user can trigger a Denial of Service DoS condition due to missing preemption protection during internal queue updates. When a lower-priority task updating a queue is interrupted by a higher-priority task on the same processor core,...

CVE-2026-99245

A flaw was found in the Linux kernel. A local user could bypass keyring link restrictions due to a race condition in the kernel's key management subsystem. This issue occurs when the kernel checks link restrictions before acquiring the necessary lock during key linking operations, racing against...

CVE-2026-99244

A flaw was found in the Linux kernel's process ID PID namespace subsystem. This vulnerability allows a local user to cause a Denial of Service DoS through excessive CPU consumption. During namespace cleanup, repeated internal signal notifications can prevent the process reaper from entering a sle...

CVE-2026-99243

A flaw was found in the Linux kernel's iouring subsystem, which can lead to a Denial of Service DoS. Due to a missing memory barrier during asynchronous workqueue io-wq shutdown, a race condition can occur on systems with weakly ordered processor architectures. A local user can exploit this flaw...

pciem

PCIem A Linux kernel framework enabling synthetic userspace PCIe device emulation. | Documentation What is PCIem? PCIem is a framework that creates virtual PCIe devices in the Linux kernel by leveraging a few novel techniques to populate synthetic cards as legitimate PCI devices to the host OS. T...

CVE-2026-99242

A flaw was found in the Linux kernel's NTFS file system implementation. A race condition between file space preallocation and memory-mapped file operations allows newly allocated storage blocks to be accessed before they are cleared. A local user can exploit this vulnerability by reading...

CVE-2026-99241

A flaw was found in the Linux kernel's NTFS file system driver. A local user can cause a Denial of Service DoS or file system corruption by exploiting a race condition between concurrent memory-mapped write operations and file truncation or allocation. Because the driver omits proper...

CVE-2026-99238

A flaw was found in the Linux kernel's tracing subsystem. A local attacker could exploit this vulnerability to achieve privilege escalation or cause a Denial of Service DoS by crashing the system. The issue is caused by a race condition where module records are updated without acquiring the prope...

sgx-step

A Practical Attack Framework for Precise Enclave Execution Control SGX-Step is an open-source framework to facilitate side-channel attack research on Intel x86 processors in general and Intel SGX platforms in particular. SGX-Step consists of an adversarial Linux kernel driver and a small user-spa...

Linux kernel Bluetooth DoS

The vulnerability in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

aiptekirq Heap Buffer Overflow DoS

The vulnerability of the aiptekirq function in the drivers/input/tablet/aiptek.c module of the Linux kernel is related to the lack of data validation for data received in interrupt packets from potentially compromised USB devices. Exploiting this vulnerability could allow an attacker to cause...

CVE-2026-99236

A flaw was found in the Linux kernel. A local user can trigger out-of-bounds memory access to achieve privilege escalation or arbitrary code execution by submitting an incomplete event filter expression containing trailing logical operators. Alternatively, exploiting this flaw can expose sensitiv...

cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

CVE-2026-99228

A flaw was found in the Linux kernel's iouring subsystem. When an application thread exits while running asynchronous operations via internal worker queues, the signal intended to interrupt and terminate worker tasks can be lost. A local user could exploit this vulnerability by submitting...

CVE-2026-99234

A flaw was found in the Linux kernel's tracing subsystem. When configuring event triggers, a failure during command parsing does not unregister the trigger before releasing its internal tracking memory. A local user with access to the kernel tracing interface could exploit this flaw by submitting...

CVE-2026-99232

A flaw was found in the Linux kernel. A local attacker can trigger this issue by invoking faultable system calls with non-user memory addresses while tracing is active. Because the kernel fails to verify that the source address resides in user space before copying data into trace buffers, this fl...

CVE-2026-99230

A flaw was found in the Linux kernel's iouring subsystem. When cancelable commands are removed, recycled request objects can retain stale list pointers instead of being cleanly reinitialized. A local attacker can trigger this issue by submitting specific asynchronous I/O requests, causing the...