CVE-2026-98557

A flaw was found in the Google Virtual Ethernet gve driver in the Linux kernel. This vulnerability may allow a local attacker to cause a Denial of Service DoS by transmitting network traffic that uses User Datagram Protocol UDP Generic Segmentation Offload GSO. Because the driver improperly...

CVE-2026-98558

A flaw was found in the Linux kernel's networking subsystem. When a central processing unit CPU is taken offline, pending network packet buffers held in deferred processing queues are not properly flushed. A privileged local user or administrative action offlining a CPU during network device...

CVE-2026-98553

A flaw was found in the Linux kernel's automount file system autofs. A local user can trigger this issue by initiating an autofs mount operation that fails during initialization, causing the kernel to fail to release associated pipe file references. Repeated exploitation can permanently leak syst...

CVE-2026-98552

A flaw was found in the Linux kernel's Performance Counters for Linux perf subsystem. A race condition during the attachment of performance monitoring context data can cause the kernel to fail to update tracking flags, resulting in a reference count leak. A local attacker could exploit this...

CVE-2026-98554

A flaw was found in the Linux kernel's virtual local area network VLAN driver. When processing network packets that lack sufficient reserved buffer space headroom before network headers are appended, the system triggers a panic condition. An attacker could exploit this vulnerability to cause a...

cve-2022-0847dirtypipe-exploit

cve-2022-0847dirtypipe-exploit...

CVE-2026-98551

A flaw was found in the Linux kernel's Performance Events perf subsystem on ARM64 architectures. This flaw allows a local user to cause an information disclosure of sensitive kernel memory. The issue occurs because certain branch tracking data structures are not properly cleared, allowing an...

SUSE-SU-2026:4748-1 Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.133 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

CVE-2026-98549

A flaw was found in the Linux kernel's TCP subsystem. When a TCP connection transitions to hardware-assisted encryption, data packets queued after the transition can be improperly merged with unencrypted packets in the retransmission queue. This issue may allow an attacker on the network to obtai...

CVE-2026-98550

A flaw was found in the TIPC Transparent Inter-Process Communication subsystem of the Linux kernel. This flaw allows an attacker to cause a Denial of Service DoS by sending unexpected or duplicate group acknowledgment messages. Due to improper validation of incoming protocol messages, an internal...

CVE-2026-98548

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A remote attacker or an unprivileged local user could trigger a Denial of Service DoS or memory corruption by sending specially crafted packets containing bundled error and data chunks. This issue...

Dirty-Pipe-CVE-2022-0847-POCs

Dirty-Pipe-CVE-2022-0847-POCs Author: Max Kellermann [email protected] Contributor: Bl4sty https://twitter.com/bl4sty A new Linux vulnerability known as 'Dirty Pipe' allows local users to gain root privileges through publicly available exploits. Today, security researcher Max Kellermann...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53256)

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: hold listener socket in rfcommconnectind rfcommgetsockbychannel scans rfcommsklist under the list lock, but returns the selected listener after dropping that lock without taking a reference. rfcommconnectind th...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46069)

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix use-after-free in mwifiexadaptercleanup The mwifiexadaptercleanup function uses timerdelete non-synchronous for the wakeuptimer before the adapter structure is freed. This is incorrect because timerdelete does...

Siemens SIMATIC S7-1500 TM MFP Heap-based Buffer Overflow (CVE-2026-53362)

In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In ip6appenddata, when the paged-allocation branch is taken MSGMORE / NETIFFSG / large fraglen, alloclen and pagedlen are computed as alloclen = fragheaderlen + transhdrlen;...

Siemens SIMATIC S7-1500 TM MFP Deadlock (CVE-2026-23357)

In the Linux kernel, the following vulnerability has been resolved: can: mcp251x: fix deadlock in error path of mcp251xopen The mcp251xopen function call freeirq in its error path with the mpclock mutex held. But if an interrupt already occurred the interrupt handler will be waiting for the mpclo...

Siemens SIMATIC S7-1500 TM MFP Signal Handler Race Condition (CVE-2026-23372)

In the Linux kernel, the following vulnerability has been resolved: nfc: rawsock: cancel txwork before socket teardown In rawsockrelease, cancel any pending txwork and purge the write queue before orphaning the socket. rawsocktxwork runs on the system workqueue and calls nfcdataexchange which...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-31407)

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: add missing netlink policy validations Hyunwoo Kim reports out-of-bounds access in sctp and ctnetlink. These attributes are used by the kernel without any validation. Extend the netlink policies accordingly...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-31676)

In the Linux kernel, the following vulnerability has been resolved: rxrpc: only handle RESPONSE during service challenge Only process RESPONSE packets while the service connection is still in RXRPCCONNSERVICECHALLENGING. Check that state under statelock before running response verification and...

Siemens SIMATIC S7-1500 TM MFP Use After Free (CVE-2025-21791)

In the Linux kernel, the following vulnerability has been resolved: vrf: use RCU protection in l3mdevl3out l3mdevl3out can be called without RCU being held: rawsendmsg ippushpendingframes ipsendskb iplocalout iplocalout l3mdevipout Add rcureadlock / rcureadunlock pair to avoid a potential UAF. Th...