SUSE CVE-2026-80706

In the Linux kernel, the following vulnerability has been resolved: can: softing: fwparse: validate firmware record spans fwparse reads a fixed record header, a firmware-provided payload, and a trailing checksum without knowing the end of the firmware blob. A truncated record can therefore make...

SUSE CVE-2026-80707

In the Linux kernel, the following vulnerability has been resolved: can: j1939: transport: j1939sessionfreshnew: initialize receive buffer Zero the allocated buffer in j1939sessionfreshnew to ensure it contains no residual data. While there is a potential performance impact if users allocate...

SUSE CVE-2026-80708

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix missing mem scrub at clear key import in ccaclr2cipherkey The helper function ipcprbhelper uses internal buffer memory for building and processing CPRBs. After use this buffer was never scrubbed which could lead ...

SUSE CVE-2026-80709

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs There is a wrong upper limit check for the domain value when an EP11 CPRB is processed for sending to a crypto card. This check is only active on custom device node...

SUSE CVE-2026-80710

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix undersized format-check buffer fmtbuffersize in dasdeckdcheckdeviceformat is declared as int, even though one of the multiplicands, sizeofstruct eckdcount, is a sizet. The expression trkcount rptmax sizeofstruct...

cve-2021-3490-ebpf-analysis

cve-2021-3490-ebpf-analysis Implementação de pesquisa demonstrando interação com o subsistema eBPF do Linux relacionado ao CVE-2021-3490. Inclui criação de mapas BPF, wrappers de syscall, configuração de namespace e análise do verifier. Apenas para fins educacionais e de pesquisa em segurança...

copyfail-fix

CopyFail-Fix 🌐 Inglese | Portoghese | Spagnolo | Cinese | Islandese Mitigazione e patch con un comando per CVE-2026-31431 — la vulnerabilità di escalation dei privilegi locali "Copy Fail" del kernel Linux. Lo script disabilita il modulo algifaead interessato, aggiorna il kernel tramite apt e...

CVE-2026-46300

CVE-2026-46300 Linux-Kernel-Root-Exploit root@kitploit: git clone https://github.com/ExploitEoom/CVE-2026-46300.git chmod +x exploit ./exploit...

bedaisy-bypass

bedaisy-bypass Descrizione bedaisy-bypass è un driver kernel progettato per bypassare i report inviati da BEDaisy.sys a BEService.exe. Per gli utenti che non sono su un UEFI, il progetto utilizza Infinity Hook. Il driver intercetta i dati comunicati attraverso la named pipe tra i due servizi. All...

ghostlock-pfem10

GhostLock — PFEM10 Exploit per CVE-2026-43499 IonStack per OPPO Find X5 Pro PFEM10. Kernel 5.10.236-android12-9-o, UAF su futex CMPREQUEUEPI → primitiva di scrittura pi-tree. Usalo a tuo rischio. Aspettati panics / riavvii. Non aggiornare il firmware. Build root@kitploit: ./build.sh richiede...

CVE-2026-31431

CVE-2026-31431 "Copy Fail" - Strumento di Ricerca e Pentesting ⚠️ DICHIARAZIONE DI NON RESPONSABILITÀ Questo progetto è fornito esclusivamente per: Ricerca sulla sicurezza Scopi educativi Test di penetrazione autorizzati Ambienti CTF e di laboratorio Utilizzando questo strumento, dichiari che:...

RHSA-2026:60485 Red Hat Security Advisory: kernel security update

Bulletin has no description...

RHSA-2026:60486 Red Hat Security Advisory: kernel security update

Bulletin has no description...

RHSA-2026:60484 Red Hat Security Advisory: kernel security update

Bulletin has no description...

CVE-2026-80722

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate individual TWT params before driver setup ieee80211processrxtwtaction only partially validates a received S1G TWT setup frame before queueing it. An individual agreement can therefore reach...

AZL-98129 CVE-2026-80722 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate individual TWT params before driver setup ieee80211processrxtwtaction only partially validates a received S1G TWT setup frame before queueing it. An individual agreement can therefore reach...

CVE-2026-80724

In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: prevent read-only mappings from becoming writable vmclockmiscdevmmap rejects writable mappings of the shared vmclock ABI page with -EROFS, but leaves VMMAYWRITE set. Userspace can map the page read-only and then...

CVE-2026-80723

In the Linux kernel, the following vulnerability has been resolved: of: reservedmem: prevent OOB when too many dynamic regions are defined On boot, fdtscanreservedmem saves each dynamically-placed /reserved-memory subnode into a local array of size MAXRESERVEDREGIONS. If the device tree defines...

AZL-98190 CVE-2026-80717 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...

CVE-2026-80719

In the Linux kernel, the following vulnerability has been resolved: mm: mglru: fix stale batch updates after memcg reparenting The mglru page table walker batches per-generation size deltas in walk-nrpages while walking page tables without holding the lruvec lock. The resetbatchsize later folds...