dhcpoptinj

DHCP option injector Have you ever wanted to intercept DHCP requests and squeeze in a few extra DHCP options, unbeknownst to the sender? Probably not. However, should the need ever come, dhcpoptinj will hopefully help you. Why There can be many a reason to mangle DHCP requests, although chances a...

CVE-2023-2002

Linux Bluetooth: Unauthorized management command execution CVE-2023-2002 An insufficient permission check has been found in the Bluetooth subsystem of the Linux kernel when handling ioctl system calls of HCI sockets. This causes tasks without the proper CAPNETADMIN capability can easily mark HCI...

kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns

A flaw was found in the Linux kernel's rtnetlink component. An unprivileged local user, leveraging a user namespace, can exploit a missing CAPNETADMIN capability check in the rtnlnewlink function. This allows the user to create paired network devices in arbitrary network namespaces, including the...

ExploitGSM

ExploitGSM Exploit for 6.4 - 6.5 kernels and another exploit for 5.15 - 6.5 Telegram for contact - https://t.me/YuriiCrimson Telegram chat - https://t.me/itcrowdua In winter I found two vulnerabilities in the ngsm driver. After that Jammes wrote to me offering to buy them from me. As you...

Linux Distros Unpatched Vulnerability : CVE-2026-90074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: fqpie: clamp default quantum to avoid signed overflow fqpieinit sets q-quantum = pschedmtuqdiscdevsch without clamping. A device with a huge MTU e.g...

Linux Distros Unpatched Vulnerability : CVE-2026-90072

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: sfq: clamp quantum to avoid signed overflow soft lockup sfqinit sets q-quantum = pschedmtuqdiscdevsch unsigned. A device with a huge MTU e.g. dummy...

Linux Distros Unpatched Vulnerability : CVE-2026-90073

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: hhf: clamp quantum before hhfchange to avoid overflow hhfinit sets q-quantum = pschedmtuqdiscdevsch with no overflow check. A device with a huge MTU...

Linux Distros Unpatched Vulnerability : CVE-2026-90050

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/sched: fq: clamp quantum and initialquantum in change path The fq change path accepts...

AZL-102791 CVE-2026-90076 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: net/sched: fq: add overflow bounds to quantum and initial quantum fqinit computes quantum = 2 pschedmtu and initialquantum = 10 pschedmtu with no overflow check. A device with a huge MTU e.g. dummy with maxmtu == 0 accepting MTU...

AZL-102557 CVE-2026-90073 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: net/sched: hhf: clamp quantum before hhfchange to avoid overflow hhfinit sets q-quantum = pschedmtuqdiscdevsch with no overflow check. A device with a huge MTU e.g. dummy with maxmtu == 0 accepting MTU 2147483634 makes weight...

CVE-2026-90075 net/sched: fq_codel: clamp default quantum and mtu

In the Linux kernel, the following vulnerability has been resolved: net/sched: fqcodel: clamp default quantum and mtu fqcodelinit sets q-quantum = pschedmtuqdiscdevsch without clamping. A device with a huge MTU e.g. dummy with maxmtu == 0 accepting MTU 2147483634 makes pschedmtu return 0x80000000...

CVE-2026-90073

This Linux kernel vulnerability affects the net/sched hhf (Hierarchical Fair Queuing) scheduler. The root cause is that hhf_init() assigns the device MTU directly to the quantum without an overflow check; a device with a very large MTU (e.g., a dummy device with max_mtu == 0 accepting MTU 2147483...

CVE-2026-90050

CVE-2026-90050 affects the Linux kernel 's fq qdisc (Fair Queue) in net/sched. The root cause is that the fq change path accepts TCA_FQ_QUANTUM in [1, INT_MAX] and TCA_FQ_INITIAL_QUANTUM up to INT_MAX, while fq_init() already clamps to [1, 1<<20]. A user with CAP_NET_ADMIN can override the ...

CVE-2026-89700

A flaw was found in the Linux kernel's nfsd component. A local user with CAPNETADMIN capabilities can exploit this by sending a specially crafted network attribute with an incorrect address family length. This can lead to an out-of-bounds read, potentially disclosing sensitive information or...

CVE-2026-89700

In the Linux kernel, the following vulnerability has been resolved: nfsd: validate sockaddr length per family in listenerset nfsdsocknlpolicy declares NFSDASOCKADDR as a bare NLABINARY attribute with no minimum length. A CAPNETADMIN caller can send a 16-byte NFSDASOCKADDR with safamily=AFINET6,...

CVE-2026-89700

CVE-2026-89700 affects the Linux kernel 's nfsd (NFS daemon) subsystem. The NFSD_A_SOCK_ADDR attribute in nfsd_sock_nl_policy was declared as a bare NLA_BINARY with no minimum length, and the validation check (nla_len

CVE-2026-89700

In the Linux kernel, the following vulnerability has been resolved: nfsd: validate sockaddr length per family in listenerset nfsdsocknlpolicy declares NFSDASOCKADDR as a bare NLABINARY attribute with no minimum length. A CAPNETADMIN caller can send a 16-byte NFSDASOCKADDR with safamily=AFINET6,...

EUVD-2026-76612

In the Linux kernel, the following vulnerability has been resolved: nfsd: validate sockaddr length per family in listenerset nfsdsocknlpolicy declares NFSDASOCKADDR as a bare NLABINARY attribute with no minimum length. A CAPNETADMIN caller can send a 16-byte NFSDASOCKADDR with safamily=AFINET6,...

kernel: ppp: require CAP_NET_ADMIN in target netns for unattached ioctls

A flaw was found in the Linux kernel's Point-to-Point Protocol PPP subsystem. A local unprivileged user can exploit this vulnerability by creating a new user namespace and bypassing authorization checks for unattached administrative input/output controls ioctls. This allows the user to perform...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053196)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053196 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: require CAPNETADMIN to attach NGSM0710 ldisc Any unprivileged user can attach NGSM0710...