CVE-2026-80729

CVE-2026-80729 affects the Linux kernel in the mm/huge_memory subsystem. The root cause is that __folio_split() leaves the xa_state's xa_lru field unset, while xas_try_split() adds __GFP_ACCOUNT for page-cache xa_nodes. This allows a live, memcg-charged xa_node to exist without being linked into ...

CVE-2025-8671-vulnerability-POC-

CVE-2025-8671-vulnerability-POC- POC de la vulnerabilidad CVE-2025-8671 Escáner de vulnerabilidad CVE-2025-8671 Una herramienta profesional de investigación en seguridad para detectar la vulnerabilidad MadeYouReset CVE-2025-8671 en servidores HTTP/2. Este escáner utiliza múltiples heurísticas de...

lm-fingerprint

LM-Fingerprint Fingerprints the serving stack behind an OpenAI-compatible chat endpoint. It records tokenizer accounting, hidden template offset, validation prose, JSON/SSE shape, role acceptance, named limits, and gateway headers. It does not load weights, store API keys, or ask the model who it...

CVE-2026-80718

In the Linux kernel, the following vulnerability has been resolved: mm/percpu-km: fix bitmap overflow and accounting in pcpucreatechunk In pcpucreatechunk, nrpages is the total contiguous backing allocation, i.e., nrunits pcpuunitpages, but pcpuchunkpopulated uses it to set chunk-populated, whose...

CVE-2026-80686

In the Linux kernel, the following vulnerability has been resolved: mm: migratedevice: fix ptepfn/ptedirty called on non-present PTE ptepfn and ptedirty have undefined behaviour when called on a non-present PTE. In migratevmacollectpmd, these functions may be invoked on non-present entries e.g.,...

CVE-2026-80630

In the Linux kernel, the following vulnerability has been resolved: net/sched: schfqcodel: Do not call qdisctreereducebacklog during peek before restoring qlen Whenever fqcodel drops packets during peek, it calls qdisctreereducebacklog. An issue arises because it calls qdisctreereducebacklog befo...

UBUNTU-CVE-2026-80686

In the Linux kernel, the following vulnerability has been resolved: mm: migratedevice: fix ptepfn/ptedirty called on non-present PTE ptepfn and ptedirty have undefined behaviour when called on a non-present PTE. In migratevmacollectpmd, these functions may be invoked on non-present entries e.g.,...

CVE-2026-80718 mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk()

In the Linux kernel, the following vulnerability has been resolved: mm/percpu-km: fix bitmap overflow and accounting in pcpucreatechunk In pcpucreatechunk, nrpages is the total contiguous backing allocation, i.e., nrunits pcpuunitpages, but pcpuchunkpopulated uses it to set chunk-populated, whose...

CVE-2026-80718 mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk()

In the Linux kernel, the following vulnerability has been resolved: mm/percpu-km: fix bitmap overflow and accounting in pcpucreatechunk In pcpucreatechunk, nrpages is the total contiguous backing allocation, i.e., nrunits pcpuunitpages, but pcpuchunkpopulated uses it to set chunk-populated, whose...

CVE-2026-80718

In the Linux kernel, the following vulnerability has been resolved: mm/percpu-km: fix bitmap overflow and accounting in pcpucreatechunk In pcpucreatechunk, nrpages is the total contiguous backing allocation, i.e., nrunits pcpuunitpages, but pcpuchunkpopulated uses it to set chunk-populated, whose...

CVE-2026-80718

CVE-2026-80718 affects the Linux kernel in the mm/percpu-km subsystem. In pcpu_create_chunk(), the variable nr_pages (the total contiguous backing allocation, equal to nr_units * pcpu_unit_pages) is used to populate chunk->populated, whose bitmap is only sized to pcpu_unit_pages. When nr_units...

EUVD-2026-67562

In the Linux kernel, the following vulnerability has been resolved: mm: migratedevice: fix ptepfn/ptedirty called on non-present PTE ptepfn and ptedirty have undefined behaviour when called on a non-present PTE. In migratevmacollectpmd, these functions may be invoked on non-present entries e.g.,...

PT-2026-83018

In the Linux kernel, the following vulnerability has been resolved: mm/percpu-km: fix bitmap overflow and accounting in pcpu create chunk In pcpu create chunk, nr pages is the total contiguous backing allocation, i.e., nr units pcpu unit pages, but pcpu chunk populated uses it to set...

UBUNTU-CVE-2026-52681

Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid credentials can reset the accounting by repeatedly changing the active script. Compiled script files are also not removed when a script is deleted or renamed. The configured Sieve CPU limit can be bypassed,...

CVE-2026-52681

Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid credentials can reset the accounting by repeatedly changing the active script. Compiled script files are also not removed when a script is deleted or renamed. The configured Sieve CPU limit can be bypassed,...

Linux Distros Unpatched Vulnerability : CVE-2026-80718

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/percpu-km: fix bitmap overflow and accounting in pcpucreatechunk In pcpucreatechunk, nrpages is the total contiguous backing allocation, i.e., nrunits...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098871)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098871 advisory. In the Linux kernel, the following vulnerability has been resolved: schhfsc: Fix qlen accounting bug when using peek in hfscenqueue When enqueuing the first packet t...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098756)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098756 advisory. In the Linux kernel, the following vulnerability has been resolved: schhfsc: make hfscqlennotify idempotent hfscqlennotify is not idempotent either and not friendly ...

CVE-2026-74612

A flaw was found in the Linux kernel's veth component. A remote attacker could exploit incorrect packet buffer skb length accounting after an eXpress Data Path XDP fragment adjustment. This could lead to the disclosure of sensitive kernel memory information to userspace and corruption or truncati...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: UDP: Fixed memory accounting leak. Matt Dowling reported a strange UDP memory usage issue. Under normal operation, the UDP memory usage reported in /proc/net/sockstat remains close to zero. However, it occasionally spikes to...