SUSE CVE-2026-74344

In the Linux kernel, the following vulnerability has been resolved: bpf: Clear rb node linkage when freeing bpfrbroot bpfrbrootfree detaches the root by copying the current rbrootcached and then replacing the live root with RBROOTCACHED. It then walks the copied root and drops each object contain...

copy-fail

CopyFail Mitigation CVE-2026-31431 - Multi-Distribution Guide This repository contains detailed tutorials and scripts to mitigate the CopyFail vulnerability CVE-2026-31431. This flaw affects the Linux Kernel cryptography subsystem AFALG and allows local privilege escalation LPE from a regular use...

d-os-descriptor

d-os-descriptor सारांश USB गैजेट उपतंत्र में compositesetup फ़ंक्शन composite.c के OS डिस्क्रिप्टर हैंडलिंग अनुभाग में सुरक्षा समस्याएं शामिल हैं। उचित रूप से तैयार किए गए नियंत्रण स्थानांतरण अनुरोध संदेशों के प्रसंस्करण के परिणामस्वरूप नल पॉइंटर डीरेफरेंस या मेमोरी करप्शन के कारण डिवाइस क्रैश हो...

optee-qemu

CVE-2021-44733: Linux कर्नेल TEE सबसिस्टम में use-after-free की फ़ज़िंग और शोषण हाल ही में Linux कर्नेल TEE सबसिस्टम में, संस्करण 5.15.11 तक, एक use-after-free भेद्यता खोजी गई थी, और इसे CVE-2021-44733 1 निर्दिष्ट किया गया था। पहली नज़र में यह कई कारणों से शोषण योग्य नहीं लग रहा था, हालाँकि भेद्य...

libssh2: libssh2: Information disclosure and potential arbitrary code execution via heap out-of-bounds read

A missing bounds check in the libssh2 publickey subsystem allows malicious SSH servers to trigger a client-side out-of-bounds read, leaking heap pointers that could enable security bypasses, denial of service, or code execution...

CVE-2026-46242

CVE-2026-46242 — "Bad Epoll" This repo is a bad Epoll validator for aarch64 kernels based on exploit already exists for x86. Linux Kernel Local Privilege Escalation viaepoll Use-After-Free Race Condition Field| Detail ---|--- CVE| CVE-2026-46242 Nickname| Bad Epoll Type| Use-After-Free UAF via ra...

CVE-2026-80640

A flaw was found in the Linux kernel's CXL subsystem firmware control cxl/fwctl. A buffer overflow vulnerability exists in the cxlctlgetsupportedfeatures function due to improper initialization of an array size. This could lead to a system crash, resulting in a denial of service DoS...

CVE-2026-80593

A flaw was found in the Linux kernel, specifically within the hwmon hardware monitoring subsystem's asusatk0110 driver. This vulnerability occurs because the atkecpresent function does not properly check the size of a data package before attempting to read its contents. A local attacker could...

CVE-2026-80602

A flaw was found in the Linux kernel's perf subsystem. This vulnerability allows a local user to gain access to sensitive kernel memory addresses. This occurs because the system's branch stack, intended for user-only information, can inadvertently include kernel addresses, leading to an informati...

CVE-2013-6282

BUILDING: Download the android ndk, e.g: https://dl.google.com/android/repository/android-ndk-r10e-linux-x8664.zip I used android-ndk-10d Unzip it and install ensure ndk-build is in your PATH root@kitploit: $ make root ndk-build NDKPROJECTPATH=. APPBUILDSCRIPT=./Android.mk APPPLATFORM=android-16...

CVE-2026-80695

A flaw was found in the Linux kernel's hwmon hardware monitoring subsystem, specifically in the sht3x driver. This vulnerability occurs due to unaligned memory accesses when the driver processes 16-bit temperature and humidity values. A local attacker or a malicious device interacting with the...

CVE-2026-80642

A flaw was found in the Linux kernel's liveupdate subsystem. This vulnerability arises from improper reference counting of incoming File-Lifecycle-Bound FLB data. A subsystem might hold onto FLB data for an extended period, and without proper reference counting, the FLB structure could be...

CVE-2026-82677

A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/module.c of the component Module Timer Subsystem. This manipulation causes double free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be...

EUVD-2026-68457

A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/module.c of the component Module Timer Subsystem. This manipulation causes double free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be...

CVE-2026-82677

CVE-2026-82677 affects valkey-io valkey 9.1.0 , specifically the function moduleTimerHandler in the Module Timer Subsystem (src/module.c). The root cause is a double free that can be triggered remotely, though exploitation requires high privileges and user interaction . The impact is limited to l...

AZL-98439 CVE-2026-82631 affecting package valkey 8.0.10-1

A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function handleClientsBlockedOnKey of the file src/blocked.c of the component Blocked-on-keys Subsystem. The manipulation results in use after free. The attack may be performed from remote. A high complexit...

CVE-2026-82631

A use-after-free vulnerability exists in valkey-io valkey 9.1.0 , specifically in the handleClientsBlockedOnKey function within the Blocked-on-keys Subsystem (src/blocked.c). The flaw can be triggered remotely but requires high privileges and carries high attack complexity , limiting practical ex...

CVE-2026-80711

A flaw was found in the Linux kernel's power supply subsystem, specifically within the MAX17040 fuel gauge driver. When the MAX17040 fuel gauge operates without a registered charger status supplier, the driver fails to properly handle this missing information. This oversight can result in userspa...

CVE-2026-80662

A flaw was found in the Linux kernel's Compute Express Link CXL subsystem. An incorrect definition of the CXLHEADERLOGSIZE led to an out-of-bounds read when processing RAS capability structures. This vulnerability allows a local attacker to read sensitive kernel stack memory, potentially leading ...

CVE-2026-31635

🩸 CVE-2026-31635 – DirtyDecrypt تصعيد الامتيازات محليًا في نواة لينكس عبر إفساد ذاكرة التخزين المؤقت للصفحات في RXGK "DirtyDecrypt" — جزء من سلسلة استغلالات "Dirty" لعام 2026 📖 نظرة عامة DirtyDecrypt CVE-2026-31635 هو ثغرة تصعيد امتيازات محلي في نظام rxrpc الفرعي للنواة تحديدًا مكون rxgk. يستغل ع...