oppo-ghostlock

oppo-ghostlock GhostLock CVE-2026-43499 — OPPO Find N2 Linux 内核提权研究 项目概述 GhostLock CVE-2026-43499 是一个影响 Linux 2.6.39 至 7.1-rc1 的内核栈 UAF 漏洞，通过 FUTEXCMPREQUEUEPI 竞态条件触发。本项目将 NebuSec/CyberMeowfia 的 x8664 exploit 适配到 OPPO Find N2 ARM64, kernel 5.10.236。 项目状态 迭代中 — 多个利用阶段已验证通过，但核心阻塞点（CFI bypass /...

oppo-pgem10-ghostlock

OPPO Find X6 Pro GhostLock 适配项目 概述 本项目针对 CVE-2026-43499 GhostLock 漏洞在 OPPO Find X6 Pro PGEM10 上进行适配研究。 基于 NebuSec CyberMeowfia 原始 exploit 架构，参考 oppo-ghostlock 适配思路。 设备信息 项目| 值 ---|--- 设备| OPPO Find X6 Pro PGEM10 芯片| Snapdragon 8 Gen 2 SM8550 内核| Linux 5.15.149-android13 1 SMP PREEMPT 编译日期| Thu Fe...

AZL-101435 CVE-2026-90003 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: futex: Prevent rcuwait use-after-free during requeue PI On PREEMPTRT, FUTEXCMPREQUEUEPI can trigger a KASAN report slab-out-of-bounds in futexrequeuepicomplete invocation of rcuwaitwakeup. The futexq used by futexwaitrequeuepi is...

CVE-2026-90003 futex: Prevent rcuwait use-after-free during requeue PI

In the Linux kernel, the following vulnerability has been resolved: futex: Prevent rcuwait use-after-free during requeue PI On PREEMPTRT, FUTEXCMPREQUEUEPI can trigger a KASAN report slab-out-of-bounds in futexrequeuepicomplete invocation of rcuwaitwakeup. The futexq used by futexwaitrequeuepi is...

Linux Distros Unpatched Vulnerability : CVE-2026-90003

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - futex: Prevent rcuwait use-after-free during requeue PI On PREEMPTRT, FUTEXCMPREQUEUEPI can trigger a KASAN report slab-out-of-bounds in futexrequeuepicomplete...

CVE-2026-90003: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: futex: Prevent rcuwait use-after-free during requeue PI On PREEMPTRT, FUTEXCMPREQUEUEPI can trigger a KASAN report slab-out-of-bounds in futexrequeuepicomplete invocation of rcuwaitwakeup. The futexq used by futexwaitrequeuepi is...

AZL-90620 CVE-2026-53163 affecting package kernel for versions less than 6.6.144.1-1

In the Linux kernel, the following vulnerability has been resolved: locking/rtmutex: Skip removewaiter when waiter is not enqueued syzbot triggered the following splat in removewaiter via FUTEXCMPREQUEUEPI: KASAN: null-ptr-deref in range 0x0000000000000a88-0x0000000000000a8f...

CVE-2026-53163: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: locking/rtmutex: Skip removewaiter when waiter is not enqueued syzbot triggered the following splat in removewaiter via FUTEXCMPREQUEUEPI: KASAN: null-ptr-deref in range 0x0000000000000a88-0x0000000000000a8f...