ghostlock-x200-app

GhostLock X200 App Одношаговое root-приложение на устройстве для vivo X200 , основанное на уязвимости ядра GhostLock CVE-2026-43499: без прошивки, без разблокировки загрузчика, без очистки данных — после запуска получаете временный root , который сбрасывается после перезагрузки; повторное открыти...

CVE-2026-80652

A flaw was found in the Linux kernel's Cryptographic Co-processor CCP driver. A local attacker could trigger a kernel crash, leading to a denial of service DoS, by providing a zero-length certificate chain buffer during a Platform Dynamic Hardware PDH export operation. This issue specifically...

CVE-2026-80676

A flaw was found in the Linux kernel's Hyper-V hv VMBus driver. When a driver is being initialized, a specific callback function attempts to access a memory region driveroverride without proper synchronization. This oversight can lead to a Use-After-Free UAF vulnerability, where a local attacker...

CVE-2026-80672

A flaw was found in the Linux kernel's NTFS filesystem driver. This vulnerability arises from an integer truncation error when validating the size of the $LogFile restart area and its log client record array. An attacker can exploit this by mounting a specially crafted NTFS image, leading to an...

CVE-2026-80671

A flaw was found in the Linux kernel's perf sched subsystem. Multiple vulnerabilities exist within the registerpid function when processing untrusted performance data. These include an integer overflow that can lead to out-of-bounds memory writes and a heap buffer overflow due to improper string...

CVE-2026-80620

A flaw was found in the Linux kernel. During the error handling of Message Signaled Interrupts eXtended MSI-X region setup, the kernel attempts to unmap an already freed memory region. This double unmap operation on a null pointer can lead to a kernel warning or crash. A local attacker could...

CVE-2026-80597

A flaw was found in the Linux kernel's mtd: maps: vmu-flash component. During the initialization of the Memory Technology Device MTD, a NULL pointer dereference can occur if the mtdinfo structure, which contains a device structure, is not properly linked to its parent. This issue can lead to the...

android_kernel_oneplus_avicii

OnePlus Nord avicii — исходный код ядра NeverSettle OnePlus Nord кодовое имя: avicii — первый нефлагманский смартфон верхнего среднего сегмента от OnePlus Technology Co., Ltd., выпущенный в 2020 году. Телефон доступен в 2 вариантах в зависимости от региона: AC2001 Индия и AC2003 Европа и глобальн...

android_kernel_xiaomi_sunny

Ядро Linux Этот файл перемещён в Documentation/admin-guide/README.rst Обратите внимание, что существует несколько руководств для разработчиков и пользователей ядра. Эти руководства могут быть представлены в различных форматах, например HTML и PDF. Для сборки документации используйте make htmldocs...

CVE-2026-82670

A flaw has been found in IObit Uninstaller 15.5.0.11. This affects the function IRPMJDEVICECONTROL in the library IUForceDelete.sys of the component IOCTL Handler. Executing a manipulation can lead to improper privilege management. The attack requires local access. The vendor was contacted early...

RHSA-2026:61310 Red Hat Security Advisory: kernel security update

Bulletin has no description...

CVE-2026-80653

A flaw was found in the Linux kernel's hisisas driver. A local attacker or privileged user could trigger a kernel warning by simultaneously performing a link reset on a remote physical layer PHY device and removing the SAS driver. This race condition can lead to system instability or a denial of...

CVE_2026_40369

CVE202640369 Exploit poc и эксплойт для CVE202640369, связанные с моим анализом, используют cmake. Отладочный код, файлы poc и эксплойта для воспроизведения CVE202640369 написаны с использованием cmake. Для компиляции по-прежнему достаточно обычных команд cmake. Об аналитической статье: Аккаунт...

CVE-2026-80712

A flaw was found in the Linux kernel's spi-qpic-snand driver. This vulnerability arises from an incorrect timing issue where the SETFEATURE command for SPI-NAND flash devices is executed before the intended feature value is properly written. Consequently, the device is programmed with an outdated...

CVE-2026-80619

A flaw was found in the AppArmor security module of the Linux kernel. The aareplaceprofiles function was susceptible to a use-after-free UAF vulnerability. This occurred because the function accessed data after it had been deallocated, potentially allowing an attacker to cause a denial of service...

CVE-2026-80670

A flaw was found in the Linux kernel's perf tools. The machineresolve function, responsible for resolving machine addresses, does not properly validate CPU index values from untrusted perf.data samples. A local attacker could provide a specially crafted perf.data file with a large CPU index,...

CVE-2026-80654

A flaw was found in the Linux kernel. An incorrect condition check during the cleanup of a mailbox receive channel in the soc: xilinx component allows the channel to remain active and receive messages even after the device has been removed. This oversight leads to a use-after-free vulnerability,...

CVE-2026-80639

A flaw was found in the Linux kernel's cxl/test module. A buffer overflow vulnerability, a type of memory corruption, exists within the setupxormapping function. This flaw could allow a local user to trigger a runtime assertion failure, potentially leading to system instability or a denial of...

CVE-2026-80604

A flaw was found in the Linux kernel's Human Interface Device HID core. When processing numbered reports, the hidgetreport function can attempt to read data from an invalid memory location if a size of zero is provided. This out-of-bounds read can lead to a kernel panic, effectively causing a...

CVE-2026-80595

A flaw was found in the Linux kernel. The ims-pcu driver processes response data from device buffers without verifying the actual length of the data sent by the device. This oversight can lead to out-of-bounds reads, potentially allowing an attacker to access sensitive information or cause system...