pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

challack

Proof-of-concept code for CVE-2016-5696 This code currently allows reseting connections or injecting into sessions. The attack is implemented against both clients and servers. For detailed information, consult the original publication: Off-Path TCP Exploits: Global Rate Limit Considered Dangerous...

SUSE CVE-2026-98901

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix lease break and ack state handling Do not skip valid lease states containing WRITECACHING when breaking level-II/read leases for writes and truncates. Handle lease break acknowledgments according to the SMB2 rule that...

CVE-2026-98901 ksmbd: fix lease break and ack state handling

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix lease break and ack state handling Do not skip valid lease states containing WRITECACHING when breaking level-II/read leases for writes and truncates. Handle lease break acknowledgments according to the SMB2 rule that...

CVE-2026-98901

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix lease break and ack state handling Do not skip valid lease states containing WRITECACHING when breaking level-II/read leases for writes and truncates. Handle lease break acknowledgments according to the SMB2 rule that...

CVE-2026-98901

The Linux kernel 's ksmbd component contained a flaw in lease break and ack state handling . Specifically, the system failed to preserve valid lease states containing WRITE_CACHING when breaking level-II/read leases for writes and truncates. Additionally, lease break acknowledgments did not consi...

CVE-2026-98901 ksmbd: fix lease break and ack state handling

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix lease break and ack state handling Do not skip valid lease states containing WRITECACHING when breaking level-II/read leases for writes and truncates. Handle lease break acknowledgments according to the SMB2 rule that...

CVE-2026-98897

The Linux kernel (ksmbd) contains a concurrency issue where the system holds the ci->m_lock for read while waiting for a lease break acknowledgment in wait_for_break_ack() for up to 35 seconds. This creates a deadlock scenario with cifs.ko clients: when a client closes a deferred handle, it at...

CVE-2026-98897

In the Linux kernel, the following vulnerability has been resolved: ksmbd: don't hold ci-mlock while waiting for a lease break ack When a cifs.ko client caches a read-handle RH lease via deferred close and a conflicting open arrives, ksmbd breaks the lease and waits for the acknowledgment in...

CVE-2026-98897 ksmbd: don't hold ci->m_lock while waiting for a lease break ack

In the Linux kernel, the following vulnerability has been resolved: ksmbd: don't hold ci-mlock while waiting for a lease break ack When a cifs.ko client caches a read-handle RH lease via deferred close and a conflicting open arrives, ksmbd breaks the lease and waits for the acknowledgment in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142532)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142532 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: schcake: drop WARNON1 for malformed packets in ACK filter The schcake ACK filter parse...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142544)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142544 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: challenge ACK for non-exact RST in SYN-RECEIVED The SYN-RECEIVED request-socket path in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143062)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143062 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: schcake: drop WARNON1 for malformed packets in ACK filter The schcake ACK filter parse...

CVE-2026-112000: Missing Authorization

Vanus 0.8.0 through 0.9.0 contains a missing authorization vulnerability in the gateway that allows any authenticated user to call Subscribe, Ack, and unregistered methods without permission checks. Attackers can supply another tenant's subscription ID to Subscribe to hijack it, read and...

PT-2026-116604

Vanus 0.8.0 through 0.9.0 contains a missing authorization vulnerability in the gateway that allows any authenticated user to call Subscribe, Ack, and unregistered methods without permission checks. Attackers can supply another tenant's subscription ID to Subscribe to hijack it, read and...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/sched: schcake: The WARNON1 message for malformed packets in the ACK filter has been removed. The schcake ACK filter parses packets to identify duplicate ACK messages if the flow is backlogged. The parsing code includes a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: SCTP: The order of operations for SCTPCMDASSOCSHKEY should be changed to right after SCTPCMDPEERINIT. A null-ptr-deref issue was reported in the SCTP transmission path when the initialization of the SCTP-AUTH key fails:...

SUSE CVE-2026-98192

In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown wcn36xxdxedeinit tears down the TX ack timer with timerdelete, which only dequeues the timer and does not wait for a callback that is already executing; the...

SUSE CVE-2026-98255

In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to the slow path, where tcpack performs the appropriate validation and...

AZL-106353 CVE-2026-98255 affecting package kernel for versions less than 6.6.158.1-1

In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to the slow path, where tcpack performs the appropriate validation and...