Detection-and-Mitigation-for-CVE-2022-1679

Detection-and-Mitigation-for-CVE-2022-1679 The ath9k is a Linux kernel driver supporting Atheros chips. A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages. This flaw...

CVE-2020-0423

CVE-2020-0423 An exploit to CVE-2020-0423, which is a Binder deffered work UAF. Currently WIP , as its an ongoing series of blogposts @ wired0ut.github.io...

ENV-CVE-2021-3975

ENV-CVE-2021-3975 — libvirt vulnerability reproduction environment This repository is a snapshot of the reproducible vulnerability environment for CVE-2021-3975 libvirt qemuProcessHandleMonitorEOF use-after-free, CWE-416, exported from the corresponding container image yan5ui/cve-2021-3975:tier1...

BIT-APACHE-2026-73637 Apache HTTP Server: mod_auth_digest DoS attack

Use after free in modauthdigest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via concurrent Digest authentication requests when AuthDigestNcCheck is enabled or AuthDigestNonceLifeti...

BIT-APACHE-2026-57941 Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancy

Use After Free vulnerability in Apache HTTP Server's modhttp2 via shared session-bbtmp re-entrancy This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

BIT-APACHE-2026-56154 Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...}

Use After Free vulnerability in Apache HTTP Server's modrewrite when using lookahead %LA-U:HTTP:... This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

-Detection-and-Mitigation-for-CVE-2022-1679

-Detection-and-Mitigation-for-CVE-2022-1679 Description The ath9k is a Linux kernel driver supporting Atheros chips. A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages...

CVE-2019-2215

CVE-2019-2215 Exploit for the Bad Binder vulnerability in Android written by @wired0ut. It abuses the UAF in order to leak taskstruct, then overwrites addrlimit and escalates privileges by overwriting the id block in cred. The full flow of the research and exploitation can be found here series of...

Security update for the Linux Kernel (Live Patch 78 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.296 fixes various security issues: The following security issues were fixed: CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free i...

Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.22 fixes various security issues: The following security issues were fixed: CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc1272283...

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.4.0 ESR MFSA 2026-100, bsc1282929: CVE-2026-96869: Information disclosure in the Networking component. CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component...

SUSE-SU-2026:4545-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.4.0 ESR MFSA 2026-100, bsc1282929: - CVE-2026-96869: Information disclosure in the Networking component. - CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback componen...

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.4.0 ESR MFSA 2026-100, bsc1282929: CVE-2026-96869: Information disclosure in the Networking component. CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component...

SUSE-SU-2026:4543-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.4.0 ESR MFSA 2026-100, bsc1282929: - CVE-2026-96869: Information disclosure in the Networking component. - CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback componen...

DEBIAN-CVE-2026-98370

In the Linux kernel, the following vulnerability has been resolved: xfrm: fix compat ALLOCSPI request use-after-free xfrmstatenetlink builds the ALLOCSPI response with dumponestate, which already calls alloccompat with the response skb and header. xfrmallocuserspi then calls alloccompat again, bu...

AZL-106310 CVE-2026-98368 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: esp: downgrade zerocopy managed frags before mutating skb frags On the out-of-place output path esp-inplace == false ESP rewrites the skb frag array: espoutputhead appends a trailer frag and espoutputtail replaces the frags with ...

AZL-106011 CVE-2026-98370 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: xfrm: fix compat ALLOCSPI request use-after-free xfrmstatenetlink builds the ALLOCSPI response with dumponestate, which already calls alloccompat with the response skb and header. xfrmallocuserspi then calls alloccompat again, bu...

DEBIAN-CVE-2026-98368

In the Linux kernel, the following vulnerability has been resolved: esp: downgrade zerocopy managed frags before mutating skb frags On the out-of-place output path esp-inplace == false ESP rewrites the skb frag array: espoutputhead appends a trailer frag and espoutputtail replaces the frags with ...

CVE-2026-98370

In the Linux kernel, the following vulnerability has been resolved: xfrm: fix compat ALLOCSPI request use-after-free xfrmstatenetlink builds the ALLOCSPI response with dumponestate, which already calls alloccompat with the response skb and header. xfrmallocuserspi then calls alloccompat again, bu...

CVE-2026-98368

In the Linux kernel, the following vulnerability has been resolved: esp: downgrade zerocopy managed frags before mutating skb frags On the out-of-place output path esp-inplace == false ESP rewrites the skb frag array: espoutputhead appends a trailer frag and espoutputtail replaces the frags with ...