Linux Distros Unpatched Vulnerability : CVE-2026-80690

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: ufs: core: Initialize hba-rpmbs list in ufshcd Initialize the hba-rpmbs list in ufshcdallochost to prevent NULL pointer dereference in the device teardown...

Linux Distros Unpatched Vulnerability : CVE-2026-80667

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5: LAG, MPESW, Fix missing complete on devcom error mlx5mpeswwork returned without calling complete when mlx5laggetdevcomcomp returned NULL. A caller tha...

Linux Distros Unpatched Vulnerability : CVE-2026-80702

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vmwgfx: fix guestmemorydirty bitfield clobbered as size Two sites in vmwgfxresource.c assign boolean literals to res-guestmemorysize, which is an unsigned...

Linux Distros Unpatched Vulnerability : CVE-2026-80723

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - of: reservedmem: prevent OOB when too many dynamic regions are defined On boot, fdtscanreservedmem saves each dynamically-placed /reserved-memory subnode into a...

Linux Distros Unpatched Vulnerability : CVE-2026-80691

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE In the iblockexecuteprout function, PROPREEMPT, PROPREEMPTANDABORT, and PRORELEASE all...

Linux Distros Unpatched Vulnerability : CVE-2026-80646

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: guard against possible NULL deref in in6devstatsget devgetbyindexrcu could return NULL if the original physical device is unregistered. Found by Sashiko...

Linux Distros Unpatched Vulnerability : CVE-2026-80592

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - samples/damon/mtier: fail early if address range parameters are invalid The comment on top of struct damonregion clearly says that For any use case, @ar should ...

Linux Distros Unpatched Vulnerability : CVE-2026-80624

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mfd: cs42l43: Sanity check firmware size Currently the code checks if a firmware was received, however it does not verify that the firmware size is larger than...

Linux Distros Unpatched Vulnerability : CVE-2026-80685

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/util: don't read page2 for order-1 folios in snapshotpage snapshotpage currently reads page2 after checking nrpages 1, but it should only do so when nrpages ...

Linux Distros Unpatched Vulnerability : CVE-2026-80617

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: airoha: fix foechecktime allocation size foechecktime is declared as u16 pointer but was allocated with only ppenumentries bytes instead of ppenumentries...

Linux Distros Unpatched Vulnerability : CVE-2026-80719

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm: mglru: fix stale batch updates after memcg reparenting The mglru page table walker...

The vulnerability of the nat_keepalive_send() function in the xfrm component of the Linux operating system allows a hacker to execute arbitrary code.

The vulnerability of the natkeepalivesend function in the xfrm component of the Linux operating system’s kernel is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-2110)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2110 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftcounter: serialize reset with spinlock CVE-2026-45897 In the Linux kernel, the following vulnerability has bee...

SUSE SLES15 Security Update : kernel (Live Patch 57 for SUSE Linux Enterprise 15 SP4) (SUSE-SU-2026:3829-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3829-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.228 fixes various security issues: The following security issues were fixed:...

CVE-2026-50416-writeup-and-poc

CVE-2026-50416: Одно QWORD слишком много в desktop heap В Windows 11 Insider сборке 10.0.28020.2149 пользовательское отображение Win32k desktop heap раскрывало необработанный указатель на пул ядра сессии по смещению 0x100. Само чтение почти оскорбительно мало: root@kitploit: ULONG64 leaked =...

Copy-Fail-CVE-2026-31431-Lab

Copy Fail CVE-2026-31431 — Exploit Reproduction & Detection Lab This repository documents the end-to-end reproduction, detection engineering, and incident response for CVE-2026-31431 "Copy Fail" , a critical Linux kernel local privilege escalation vulnerability affecting kernels 4.14 through...

android_kernel_xiaomi_sm8150

В этом репозитории нет README...

CVE-2026-43499

CVE-2026-43499 — Использование после освобождения в Futex PI ядра Linux Ошибка removewaiter в kernel/locking/rtmutex.c используется путями медленной блокировки, а также для отката прокси-блокировки в rtmutexstartproxylock, вызываемой из futexrequeue. В случае прокси-блокировки waiter::task не...

packet_edit_meme

PACKETEDITMEME — также известный как CVE-2026-46331 net/sched actpedit — частичное повреждение page-cache из-за COW коммит-виновник 899ee91156e5, присутствует с v5.18 .. исправлено в v7.1-rc7. packeteditmeme.c превращает уязвимость в непривилегированный локальный root: дочерний процесс с...

CVE-2026-43499-popsicle

CVE-2026-43499 для popsicle Этот репозиторий содержит реализацию локального повышения привилегий CVE-2026-43499 на Xiaomi 17 Pro Max popsicle под управлением Android 16. Проверенное ядро: root@kitploit: 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k Все устройства Xiaomi 17, Pro и Ultra,...