CyberMeowfia

网站：nebusec.ai · Twitter @nebusecurity · 漏洞列表 885+ IonStack 后续，关注 https://github.com/NebuSec/CyberMeowfia/issues/44 最新研究 IonStack 第二部分 ：GhostLock，一个已在所有 Linux 发行版中存在 15 年的 stack-UAF Linux 内核 📖 分析报告 · 🐦 Twitter Longinus ：一个漏洞中的两个边界，用单个漏洞穿透 Chrome 的 Renderer 和 V8 沙箱，CVE-2026-6307 Chrome V8 📖 分析报告 · ...

NotCVE-2026-0010

Resumen Vulnerabilidad: Escalada de privilegios local sin autenticación a SYSTEM a través del puerto TCP 24801 del daemon de Barrier Vendedor: debauchee proyecto Barrier Producto: Barrier 2.4.0 versión final, 2021-11-01 CWE: CWE-306: Falta de autenticación para funciones críticas Descripción El...

CVE-2025-43529

CVE-2025-43529 TL; DR Apple 最近发布了 iOS 26.2 和 iPadOS 26.2，以及一份安全公告，其中包含对 WebKit 漏洞的修复。DFG JIT 编译器中的一个 bug（CVE-2025-43529）引起了我的注意，所以我决定深入研究它。 JIT 编译器正确地识别出 Phi 节点（多个控制流路径合并处）已经逃逸，但未能注意到 Phi 的 Upsilon 节点也已逃逸。因此，DFG 编译的 StoreBarrierInsertionPhase 跳过了插入 Store Barrier，而 Store Barrier 是一种关键的内存安全机制。结果，并发...

CVE-2026-80859

In the Linux kernel, the following vulnerability has been resolved: fuse: fix missing barrier when checking io-uring readiness fuseblockalloc reads fch-initialized and then fch-iouring. fch-iouring is set before fch-initialized, ordered by the smpwmb in fusechansetintialized, but fuseblockalloc h...

CVE-2026-80859

In the Linux kernel, the following vulnerability has been resolved: fuse: fix missing barrier when checking io-uring readiness fuseblockalloc reads fch-initialized and then fch-iouring. fch-iouring is set before fch-initialized, ordered by the smpwmb in fusechansetintialized, but fuseblockalloc h...

CVE-2026-80859 fuse: fix missing barrier when checking io-uring readiness

In the Linux kernel, the following vulnerability has been resolved: fuse: fix missing barrier when checking io-uring readiness fuseblockalloc reads fch-initialized and then fch-iouring. fch-iouring is set before fch-initialized, ordered by the smpwmb in fusechansetintialized, but fuseblockalloc h...

CVE-2026-80859 fuse: fix missing barrier when checking io-uring readiness

In the Linux kernel, the following vulnerability has been resolved: fuse: fix missing barrier when checking io-uring readiness fuseblockalloc reads fch-initialized and then fch-iouring. fch-iouring is set before fch-initialized, ordered by the smpwmb in fusechansetintialized, but fuseblockalloc h...

EUVD-2026-71309

In the Linux kernel, the following vulnerability has been resolved: fuse: fix missing barrier when checking io-uring readiness fuseblockalloc reads fch-initialized and then fch-iouring. fch-iouring is set before fch-initialized, ordered by the smpwmb in fusechansetintialized, but fuseblockalloc h...

CVE-2026-80859

CVE-2026-80859 affects the Linux kernel FUSE (Filesystem in Userspace) subsystem. The root cause is a missing read memory barrier (smp_rmb()) in fuse_block_alloc(). The function reads fch->initialized followed by fch->io_uring, but lacks the barrier needed to pair with the smp_wmb() in fuse...

Linux Distros Unpatched Vulnerability : CVE-2026-80859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: fix missing barrier when checking io-uring readiness fuseblockalloc reads fch-initialized and then fch-iouring. fch-iouring is set before fch-initialized,...

CVE-2026-55624

MintyItanium Lost-Auction is an auction plugin for Minecraft. Prior to commit 88c920b05042929db334ba06d57f052b42d6b3f8, players can take items like barrier blocks or duplicate items from the GUI. Commit 88c920b05042929db334ba06d57f052b42d6b3f8 fixes the issue...

EUVD-2026-65513

MintyItanium Lost-Auction is an auction plugin for Minecraft. Prior to commit 88c920b05042929db334ba06d57f052b42d6b3f8, players can take items like barrier blocks or duplicate items from the GUI. Commit 88c920b05042929db334ba06d57f052b42d6b3f8 fixes the issue...

CVE-2026-55624 MintyItanium Lost-Auction takes items like barrier blocks out from search GUI

MintyItanium Lost-Auction is an auction plugin for Minecraft. Prior to commit 88c920b05042929db334ba06d57f052b42d6b3f8, players can take items like barrier blocks or duplicate items from the GUI. Commit 88c920b05042929db334ba06d57f052b42d6b3f8 fixes the issue...

CVE-2026-55624

MintyItanium Lost-Auction is an auction plugin for Minecraft servers. Prior to commit 88c920b05042929db334ba06d57f052b42d6b3f8 , players could take items such as barrier blocks or duplicate items from the search GUI, representing an integrity issue with a CVSS 4.0 base score of 5.3 (Medium) . The...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: tls: fixed the missing memory barrier in tlsinit In tlsinit, a write memory barrier is missing, and store-store reordering may cause NULL dereferencing in tlssetsockopt,getsockopt. CPU0 CPU1 ----- ----- // In tlsinit // In...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/i915/active: Fixed the misuse of non-idle barriers as fence trackers. Users reported errors related to list corruption when using i915 perf with a number of concurrently running graphics applications. Root cause analysis...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: LoongArch: The ioaw hook was defined as mmiowb. The commit fb24ea52f78e0d595852e states that “drivers: Explicit invocations of mmiowb were removed.” All occurrences of mmiowb in drivers were removed. However, it is noted that:...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Added conditional IBPB mitigation VMSCAPE is a vulnerability that exploits insufficient branch predictor isolation between a guest and a userspace hypervisor such as QEMU. Existing mitigations already protect the...

Astra Linux – Vulnerability in Linux

A issue was discovered in the Linux kernel before version 5.11.11. The netfilter subsystem allows attackers to cause a denial of service panic because net/netfilter/xtables.c and include/linux/netfilter/xtables.h lack a proper memory barrier when assigning a new table value, known as...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: scsi: core: There is a race condition where the error handler is only awakened when the last running command completes or times out. This race condition can cause the SCSI layer to fail to awaken the error handler, resulting i...