CVE-2026-90244

A flaw was found in the Linux kernel. Specifically, within the iommu/dma component, a lack of proper locking in the VFIO type1 legacy container could allow concurrent access to the msipagelist. This concurrent access can lead to data corruption of the msipagelist, potentially causing system...

CVE-2026-90243

A flaw was found in the Linux kernel's IOMMU/VT-d subsystem. During the tear-down of copied context entries, the kernel zeroes out parts of an entry before clearing its "Present" bit and invalidating related caches. This timing issue allows hardware to fetch a partially cleared entry that is stil...

CVE-2026-90237

A flaw was found in the Linux kernel's netfilter connection tracking nfct component. This vulnerability arises from the incorrect handling of connection tracking expectations, where early insertion of expectations into the list can lead to stale entries. These stale entries point to incorrect...

CVE-2026-90241

A flaw was found in the Linux kernel's iommu/vt-d subsystem. During the setup of scalable-mode context entries for PCI devices, an error can occur that leaves behind invalid context entries. These entries may point to memory that has already been freed. An attacker could potentially exploit this ...

CVE-2026-90240

A flaw was found in the Linux kernel's IOMMU Input/Output Memory Management Unit / VT-d Virtualization Technology for Directed I/O component. When tearing down Direct Memory Access DMA aliases of a device, the system fails to flush the context cache with the correct Source ID SID. This oversight...

libmsm_vfe_read_exploit

Read kernel mermory with CVE-2014-4321...

CVE-2026-90235

A flaw was found in the xprtsock component of the Linux kernel's sunrpc implementation. This concurrency vulnerability arises from improper synchronization when updating and reading shared socket callback pointers. As a result, a processor might use an outdated reference to a callback function...

CVE-2026-90232

A flaw was found in the Linux kernel's Address Mapping Table AMT device handling. When an AMT device is configured across different network namespaces netns, unregistering the underlying network device can lead to a system hang. This occurs because the amtdeviceevent function does not correctly...

CVE-2026-90234

A flaw was found in the Linux kernel's Network File System NFS client. When an NFS server grants a delegation, the client may fail to record it and not send a DELEGRETURN message. This can lead to a situation where the server believes the client still holds the delegation. If the server then...

CVE-2026-90231

A flaw was found in AppArmor, a Linux kernel security module. This vulnerability allows a local attacker to bypass security confinement. The issue arises from an incorrect application of unprivileged transition restrictions on tasks already confined by a stack, enabling an escape if two transitio...

CVE-2026-90230

A flaw was found in the Linux kernel's nvmet subsystem. A remote attacker, by sending a specially crafted NVMe-oF NVMe over Fabrics in-band authentication negotiation message with an invalid transfer length or identifier lengths, could trigger a heap out-of-bounds read in the nvmetauthnegotiate...

CVE-2026-90229

A flaw was found in the Linux kernel's NVMe Apple driver. When an NVMe controller fails to initialize and is subsequently removed, the driver does not properly destroy the associated admin queue. This oversight can lead to a kernel panic, effectively causing a denial of service DoS on the affecte...

CVE-2026-90228

A flaw was found in the Linux kernel's nvmet subsystem. A remote attacker can trigger a NULL pointer dereference by issuing a specific Identify command CNS 05h, CSI 02h ZNS targeting a file-backed namespace. This vulnerability occurs because the system attempts to access a block device that does...

CVE-2026-90226

A flaw was found in the Linux kernel's Near Field Communication NFC Logical Link Control Protocol LLCP subsystem. A local user could trigger a buffer overflow in the nfcllcpgetsockopt function by supplying an invalid option length. This improper handling allows the kernel to write past the...

CVE-2026-90225

A flaw was found in the Near Field Communication NFC Logical Link Control Protocol LLCP subsystem of the Linux kernel. A race condition exists between the nfcllcpgetsockopt and llcpsockbind functions. This allows a local attacker to potentially cause a use-after-free vulnerability by racing a...

CVE-2026-90224

A flaw was found in the Near Field Communication NFC Controller Interface NCI subsystem of the Linux kernel. A double completion race condition can occur when nciclosedevice and ncirxwork concurrently call ncidataexchangecomplete. This can lead to a use-after-free vulnerability, where a network...

CVE-2026-90222

A flaw was found in the Linux kernel's Near Field Communication NFC PN533 driver. A race condition can occur during frame transmission where a memory buffer is prematurely released while the I2C transport is still attempting to use it. This use-after-free vulnerability can lead to system...

Pixel_GPU_Exploit

Mali GPU Kernel LPE This article provides an in-depth analysis of two kernel vulnerabilities within the Mali GPU, reachable from the default application sandbox, which I independently identified and reported to Google. It includes a kernel exploit that achieves arbitrary kernel r/w capabilities...

CVE-2022-34715-POC

CVE-2022-34715-POC CVE-2022-34715-POC pcap nfssvr.sys version 10.0.20348.825 0: kd r rax=0000000080000001 rbx=0000000000000000 rcx=ffffde87fe461150 rdx=0000000000000000 rsi=fffff8040811aa50 rdi=0000000000000008 rip=fffff80408067dbb rsp=ffffb400eb3e2630 rbp=ffffb400eb3e26b9 r8=0000001000000020...

CVE-2026-90322

A flaw was found in the Linux kernel's OCFS2 Oracle Cluster File System 2 cluster heartbeat mechanism. When a local node within the cluster is reset, an internal flag is not properly cleared, leading to an inconsistent state. This inconsistency can cause the system's heartbeat monitoring process ...