Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

A race condition was detected in the Linux kernel’s watch queue due to a missing lock in the piperesizering function. The specific flaw lies in the handling of pipe buffers. The problem arises from the lack of proper locking when performing operations on an object. This flaw allows a local user t...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: “pipe: wakeup wrwait after setting maxusage” The commit c73be61cede5 “pipe: Add general notification queue support” introduced a regression that could cause pipes with resized sizes to become locked under certain conditions. See...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Tracing: A memory leak has been fixed in tracingreadpipe. kmemleak reports this issue as follows: Unreferenced object: 0xffff888105a18900 size 128 - Command: “testprogs”, PID: 18933; Jiffies: 4336275356 age: 22801.766 seconds - H...

Astra Linux – Vulnerability in Linux 5.10

A flaw was discovered in the way the “flags” member of the new pipe buffer structure lacked proper initialization in the copypagetoiterpipe and pushpipe functions of the Linux kernel. As a result, these members could contain stale values. An unprivileged local user could exploit this flaw to writ...

CVE-2026-80982

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix use-after-free in smcrxpipebufrelease smcrxsplice hands RMB pages to a pipe and takes a socket reference per entry so the smcsock stays alive until the reader finishes. The connection does not: a concurrent close run...

PT-2026-90463

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the tracing component when reading from trace pipe during a sub-buffer order change. Writing to buffer subbuf size kb triggers the ring buffer subbuf ord...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107279)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107279 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check pipe offset before setting vblank pipectx has a size of MAXPIPES so checki...

PT-2026-90112

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the smc rx pipe buf release function. A race condition occurs when smc rx splice provides RMB pages to a pipe while a concurrent close operation triggers...

Exploit for Improper Initialization in Linux Linux_Kernel

CVE-2022-0847 - Dirty Pipe Exploit A proof-of-concept exploit...

Linux Distros Unpatched Vulnerability : CVE-2026-80915

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe: Fix DPT allocation paths. Remove the fallback for VRAM to system memory, I tested it and that doesn't work at all, only a black screen with pipe fault...

CVE-2026-80915

CVE-2026-80915 affects the Linux kernel drm/xe driver (Intel Xe GPU). The vulnerability is in DPT (Display Plane Table) allocation paths , where an incorrect fallback from VRAM to system memory produces a black screen with pipe fault errors , and use of stolen memory on media GT systems introduce...

PT-2026-89085

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/xe component regarding DPT allocation paths. The system incorrectly allows a fallback from VRAM to system memory, which can lead to black screens and pipe faul...

CVE-2026-82536

Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability in the shell command parsing logic that allows attackers to execute denied shell commands by exploiting the omission of the bash pipe operator from the command parser's operator token set. Attackers can craft a command line wit...

EUVD-2026-74040

Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability in the shell command parsing logic that allows attackers to execute denied shell commands by exploiting the omission of the bash pipe operator from the command parser's operator token set. Attackers can craft a command line wit...

CVE-2026-82536 Roo-Code 3.54.0 Auto-Approve Bypass via Shell Command Pipe Operator

Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability in the shell command parsing logic that allows attackers to execute denied shell commands by exploiting the omission of the bash pipe operator from the command parser's operator token set. Attackers can craft a command line wit...

CVE-2026-82536

Roo-Code through version 3.54.0 contains an auto-approve bypass in its shell command parsing logic. The root cause is the omission of the bash pipe operator (specifically the stderr-redirecting pipe) from the parser's operator token set. An attacker can craft a command line combining an allowlist...

CVE-2026-82536 Roo-Code 3.54.0 Auto-Approve Bypass via Shell Command Pipe Operator

Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability in the shell command parsing logic that allows attackers to execute denied shell commands by exploiting the omission of the bash pipe operator from the command parser's operator token set. Attackers can craft a command line wit...

Exploit for Incorrect Permission Assignment for Critical Resource in Acer Nitrosense

From an Acer Named Pipe to NT AUTHORITY\SYSTEM: CVE-2026-8069...

CVE-2026-82536: Incomplete List of Disallowed Inputs

Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability in the shell command parsing logic that allows attackers to execute denied shell commands by exploiting the omission of the bash pipe operator from the command parser's operator token set. Attackers can craft a command line wit...

PT-2026-88277

Name of the Vulnerable Software and Affected Versions Roo-Code versions prior to 3.54.1 Description A flaw in the shell command parsing logic allows the bypass of auto-approve restrictions. The issue stems from the omission of the bash pipe operator from the command parser's operator token set. A...