SUSE CVE-2026-80909

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with invalid number of h265 refs Same change as for h264, avoids overflow later when calculating min dpb size. cherry picked from commit a4b0720e4f1601f97f59a2be9c1b4b94fa6527d5...

SUSE CVE-2026-80910

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses EAR SPKR PA Gain" and the four "WSA RX Mux" controls are enumerated, but their get and put callbacks access the value through ucontrol-value.integer.value0 a long instead ...

SUSE CVE-2026-80911

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: sof-audio: Fix error path in sofwidgetsetupunlocked If either tplgops-daiconfig or widgetkcontrolsetup fail during widget setup we would double decrement the usecount of the widget because the sofwidgetfreeunlocked wou...

SUSE CVE-2026-80912

In the Linux kernel, the following vulnerability has been resolved: selinux: reject an unclaimed class value in securitygetclasses securitygetclasses sizes an array by pclasses.nprim and fills it at value - 1, so a class value the policy never defines leaves a NULL. selmakeclasses passes every...

SUSE CVE-2026-80913

In the Linux kernel, the following vulnerability has been resolved: selinux: require every boolean value to be defined pbools.nprim comes from the policy image independently of how many booleans follow it, and condindexbool fills boolvaltostruct at value - 1, so a count larger than the values...

RockyLinux 10 : kernel (RLSA-2026:63128)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:63128 advisory. kernel: Bluetooth: hcildisc: Clear HCIUARTPROTOINIT on error CVE-2026-53073 kernel: exfat: fix potential use-after-free in exfatfinddirentry...

Linux Distros Unpatched Vulnerability : CVE-2026-80735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ovpn: ensure socket is owned by ovpn before deref skuserdata Some subsystems, like BPF SOCKMAP, set skuserdata without actually setting the encaptype. For this...

Linux Distros Unpatched Vulnerability : CVE-2026-80746

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: clk: qcom: dispcc-eliza: Fix dispccmdssmdpclksrc RCG stall on Eliza EVK Eliza EVK...

Linux Distros Unpatched Vulnerability : CVE-2026-80745

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - regulator: fp9931: Fix VPOS/VNEG voltage selector table The VPOSNEGtable mapping does not match the FP9931 datasheet. The datasheet defines the VPOS/VNEG voltag...

Linux Distros Unpatched Vulnerability : CVE-2026-80736

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: Fix bandwidth group reservation indexing Valid bandwidth group IDs range from 1 through MAXGROUPS, while Group ID 0 is reserved...

Linux Distros Unpatched Vulnerability : CVE-2026-80753

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ovpn: run deferred work on a module-owned workqueue ovpn queues several work items whose callbacks execute module text. These works currently run on the global...

Linux Distros Unpatched Vulnerability : CVE-2026-80740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/log: Fix infinite loop when scale is too large for display When scale is large enough that scaledfont exceeds the display dimensions, rows or columns become...

Linux Distros Unpatched Vulnerability : CVE-2026-80727

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/mce: Set up the polling timer before CMCI discovery I hit the following on one of my machines: mce: CPU0 BANK15 CMCI inherited storm ------------ cut here...

Linux Distros Unpatched Vulnerability : CVE-2026-80751

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pmdomain: mediatek: mfg: initialize prevo in mtkmfgattachdev mtkmfgattachdev reads prevo on the first iteration of its loop, in if prevo && prevo-freq == o-freq...

Linux Distros Unpatched Vulnerability : CVE-2026-80734

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: initialize inode mapping flags for cached inodes BUG When running generic/795 with 8K block size, 4K page size, the test always fails, triggering some...

VulnCheck KEV: CVE-2026-67277

RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the sender transmits an uninitialized tail from a kernel packet buffer. A separate...

Linux Distros Unpatched Vulnerability : CVE-2026-80729

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/hugememory: initialise workingset state before folio split xastrysplit adds GFPACCOUNT for page-cache xanodes, but foliosplit leaves the xastate's xalru unse...

Linux Distros Unpatched Vulnerability : CVE-2026-80750

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pmdomain: mediatek: fix remaining %pOF after ofnodeput scpsysgetbusprotectionlegacy looks up several legacy bus protection regmaps from device-tree nodes. Two...

amd-ryzen-master-driver-v17-exploit

使用 AMD 的 Ryzen Master 驱动程序（版本 17）进行内核漏洞利用的 Cobalt Strike Beacon 对象文件。 由 Tijme 构建。感谢 Alex 的教导！由 Northwave Security 提供支持 描述 这是一个利用 AMD 的 Ryzen Master 驱动程序（版本 17）的 Cobalt Strike CS Beacon 对象文件 BOF 和可执行文件。它仅将 beacon 进程令牌覆盖为系统进程令牌。但是，就像 KernelMii 一样，这个 BOF 主要只是通过 CS 进行进一步内核漏洞利用的良好基础。你可以利用它来禁用 EDR、禁用 E...

CVE-2026-46300_Fragnesia

🧨 Fragnesia — CVE-2026-46300 Linux 内核 LPE 审计与 Exploit 工具包 · Page-Cache / XFRM ESP-in-TCP（espintcp）回归 交互式审计 → 检测 LPE 前置条件 → 自动执行 exploit（经确认后） ⚠️ 道德与法律警告 本工具仅用于合法且经授权的安全测试 ——合约渗透测试、实验/CTF，或自有资产。未经系统所有者许可使用即属犯罪行为（UU ITE、Computer Fraud and Abuse Act 等）。使用者承担全部责任。 📖 漏洞概述 CVE-2026-46300 是 Linux 内核中的一个...