CVE-2026-90384

CVE-2026-90384 affects the Linux kernel iomap subsystem. The folio batch mechanism used for iomap zero-range operations fails to release the batch when either ->iomap_end() or ->iomap_begin() callbacks fail, as the direct return paths bypass batch cleanup. The ->iomap_end() case is not p...

CVE-2026-90368

CVE-2026-90368 affects the Linux kernel 's mt76/mt7915 WiFi driver. When mt76_wcid_alloc() fails inside mt7915_add_interface() , the function returned without clearing the vif_mask/omac_mask bits it had already set, without removing the firmware dev info added earlier, and without clearing the mo...

EUVD-2026-82025

In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Unregister cpufreq notifier on init failure acpiprocessordriverinit registers the cpufreq policy notifier before registering the ACPI processor driver and setting up CPU hotplug state. If driverregister or...

CVE-2026-90330

CVE-2026-90330 is a resource leak in the Linux kernel's Logitech HID++ force-feedback driver. In hidpp_ff_init(), if any of the subsequent allocations (HID++ FF private data, effect ID array, or workqueue) fail after input_ff_create() succeeds, the function returns an error without calling input_...

EUVD-2026-81891

In the Linux kernel, the following vulnerability has been resolved: drm/sun4i: tcon: Drop TCON TOP device reference offinddevicebynode takes a device reference. Drop it after mux configuration succeeds...

EUVD-2026-81880

In the Linux kernel, the following vulnerability has been resolved: phy: sunplus: fix error handling in spuphyinit Fix the error paths of spuphyinit to undo exactly what each stage did: return directly if clkprepareenable fails, release only the clock if resetcontroldeassert fails, and jump to...

CVE-2026-90287

This Linux kernel vulnerability affects the sunplus PHY driver in the function sp_uphy_init() . The error handling paths did not correctly unwind each initialization stage: if clk_prepare_enable() failed, the function should return directly; if reset_control_deassert() failed, only the clock shou...

EUVD-2026-81876

In the Linux kernel, the following vulnerability has been resolved: hugetlbfs: release subpool on fillsuper failure hugetlbfsfillsuper allocates a hugepage subpool when size or minsize mount options are specified. hugepagenewsubpool may also reserve huge pages for minsize. If root dentry creation...

CVE-2026-90283

CVE-2026-90283 is a resource management flaw in the Linux kernel's hugetlbfs filesystem. In hugetlbfs_fill_super(), when a hugepage subpool is allocated via hugepage_new_subpool() (triggered by size or min_size mount options) and subsequent root dentry creation fails, the error path releases the ...

CVE-2026-90273

CVE-2026-90273 affects the Linux kernel in the coresight etm4x driver. In the perf enable path, cscfg_csdev_disable_active_config() is not called in two error cases: when branch broadcast is selected but not supported by hardware, and when etm4_enable_hw() fails. This results in a leak of config_...

EUVD-2026-81787

In the Linux kernel, the following vulnerability has been resolved: ACPI: scan: fix bus ID cleanup on deviceadd failures When deviceadd fails after acpidevicesetname has allocated an instance ID and a new acpidevicebusid has been linked into acpibusidlist, the rollback path only removes wakeuplis...

CVE-2026-90194

CVE-2026-90194 affects the Linux kernel ACPI subsystem , specifically the device scan path. When device_add() fails after acpi_device_set_name() has allocated an instance ID and linked a new acpi_device_bus_id into acpi_bus_id_list, the original rollback path only removed the wakeup list entry an...

CVE-2026-90163

This CVE affects the Linux kernel ksmbd (SMB server) module. When a later initializer during ksmbd module initialization fails, the unwind path releases resources created after the procfs setup but jumps directly to class_unregister() , leaving the proc tree and its per-CPU counters allocated wit...

EUVD-2026-81756

In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbdproccleanup on module init failure When a later initializer fails, the unwind chain releases resources created after procfs and then jumps directly to classunregister. Returning an error from moduleinit leav...

EUVD-2026-81712

In the Linux kernel, the following vulnerability has been resolved: ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup sndice1712probe performs multiple initialization steps after sndcardnew, but directly returns on failures from later steps without releasing the ALSA card,...

CVE-2026-90119

CVE-2026-90119 affects the Linux kernel 's ALSA ice1712 driver. In snd_ice1712_probe(), multiple initialization steps run after snd_card_new(); if any later step fails, the function returns without releasing the ALSA card, causing a resource leak . The fix replaces snd_card_new() with snd_devm_ca...

CVE-2026-90077

CVE-2026-90077 is a resource leak in the Linux kernel 's network namespace handling, specifically in the copy_net_ns() error handling path. When preinit_net() fails (due to ns_common_init() returning an error), the code jumps to the dec_ucounts label without releasing resources allocated by net_a...

EUVD-2026-81938

In the Linux kernel, the following vulnerability has been resolved: net: fix a resource leak in copynetns error handling path Currently, preinitnet does two things: 1 call nscommoninit which might fail 2 initialize resources which does not fail However, preinitnet is returning early when 1 fails,...

Awesome-Hacking

Awesome Hacking ハッカー、ペネトレーションテスター、セキュリティ研究者のための素晴らしいリスト集です。 contributions はいつでも歓迎します！ Awesome リポジトリ一覧 Repository| Description ---|--- Android Security| Androidセキュリティ関連リソースのコレクション AppSec| アプリケーションセキュリティ学習のためのリソース Asset Discovery| セキュリティ評価エンゲージメントの資産発見フェーズで役立つリソース一覧 Bug Bounty|...

pagesource

pagesource 一个 Python CLI 工具，可捕获网页加载的所有资源（类似浏览器 DevTools 的 Sources 标签页），并按照原始目录结构保存。 安装 root@kitploit: pip install pagesource IMPORTANT: Install Playwright browser after package installation playwright install chromium 用法 基础用法 root@kitploit: Capture all resources from a webpage pagesource...