DEBIAN-CVE-2026-98374

In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free of retransmitskbhint in tcpsendsynack When tcpsendsynack replaces the cloned SYN skb at the head of the retransmit queue with a copy, it frees the original with tcprtxqueueunlinkandfree and only repairs...

CVE-2026-98374

In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free of retransmitskbhint in tcpsendsynack When tcpsendsynack replaces the cloned SYN skb at the head of the retransmit queue with a copy, it frees the original with tcprtxqueueunlinkandfree and only repairs...

CVE-2026-98374 tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack()

In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free of retransmitskbhint in tcpsendsynack When tcpsendsynack replaces the cloned SYN skb at the head of the retransmit queue with a copy, it frees the original with tcprtxqueueunlinkandfree and only repairs...

CVE-2026-98374

In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free of retransmitskbhint in tcpsendsynack When tcpsendsynack replaces the cloned SYN skb at the head of the retransmit queue with a copy, it frees the original with tcprtxqueueunlinkandfree and only repairs...

CVE-2026-98374 tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack()

In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free of retransmitskbhint in tcpsendsynack When tcpsendsynack replaces the cloned SYN skb at the head of the retransmit queue with a copy, it frees the original with tcprtxqueueunlinkandfree and only repairs...

CVE-2026-98374

The Linux kernel is vulnerable to a use-after-free flaw in the tcp_send_synack() function. The issue occurs because the function frees the original cloned SYN skb using tcp_rtx_queue_unlink_and_free() but fails to update tp->retransmit_skb_hint, which continues to point at the freed skbuff_fcl...

EUVD-2026-94323

In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free of retransmitskbhint in tcpsendsynack When tcpsendsynack replaces the cloned SYN skb at the head of the retransmit queue with a copy, it frees the original with tcprtxqueueunlinkandfree and only repairs...

kernel: vsock/vmci: fix UAF when peer resets connection during handshake

A flaw was found in the vsock/vmci component of the Linux kernel. A remote attacker could exploit a Use-After-Free UAF vulnerability when a peer resets a connection during the handshake process. This occurs because the system incorrectly handles reset packets, leading to a pending socket being le...

Exploit for Use After Free in Google Android

cve-2019-2215-oppo-a77t Utilizes CVE-2019-2215 Binder UAF...

cve-2026-23111-poc

CVE-2026-23111 자세한 내용은 notes.md를 참조하세요. 설명 NIST의 CVE 설명 nftmapcatchallactivate 내의 반전된 논리 검사로 인해 DELSET 작업이 중단될 때 nftchain-use 참조 카운트가 복원되지 않습니다. 이로 인해 UAF가 트리거될 수 있으며, 로컬 권한 상승 을 얻는 데 악용될 수 있습니다. 이 버그는 커밋 1444ff890b4653add12f734ffeffc173d42862dd에서 수정되었습니다. 사전 요구 사항 Linux 커널 버전 6.12.69 이하에는 이 반전된...

Update Chrome and ChromeOS to fix critical security issues

Google has released updates for the Chrome browser and the ChromeOS operating system. On October 6, Google released a Stable Channel Update for Desktop. This is the most important one for desktop users. It brings Chrome to version 155.0.8059.39 for Linux and versions 154.0.8037.39/.40 for Windows...

LSN-0122-1: Kernel Live Patch Security Notice

In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix use after free in midcomms commit While working on processing dlm message in softirq context I experienced the following KASAN use-after-free warning: . In the Linux kernel, the following vulnerability has been...

LSN-0122-1 Kernel Live Patch Security Notice

In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix use after free in midcomms commit While working on processing dlm message in softirq context I experienced the following KASAN use-after-free warning: . In the Linux kernel, the following vulnerability has been...

ghostlock-sabrina

GhostLock Sabrina Root exploit for Chromecast with Google TV sabrina via CVE-2026-43499 -- a use-after-free in the Linux kernel's futex PI priority inheritance subsystem. Achieves root on a locked bootloader device running Android 14 with kernel 5.15.170 PGO+BOLT+LTO, clang 17. The vulnerability...

CVE-2021-31166

CVE-2021-31166 0x00.설명 이것은 CVE-2021-31166"HTTP 프로토콜 스택 원격 코드 실행 취약점"에 대한 개념 증명PoC입니다. Microsoft가 2021년 5월에 패치한 http.sys의 use-after-free 역참조 취약점입니다. 알려진 바로는 프로그램을 충돌시키는 것만 가능하므로 주의해서 사용하십시오. 0x01.영향 Windows Server, 버전 20H2서버 코어 설치 Windows 10 버전 20H2ARM64 기반 시스템 Windows 10 버전 20H232비트 시스템 Windows 1...

cve-2018-8389

jscript.dll - ActiveXObject BSTR - 해제 후 사용 Use After Free 취약점 해제된 메모리를 참조하면 프로그램이 충돌하거나, 예상치 못한 값을 사용하거나, 코드를 실행할 수 있습니다. 취약점 설명 Internet Explorer에서 스크립팅 엔진이 메모리에서 개체를 처리하는 방식에 원격 코드 실행 취약점이 존재합니다. 이 취약점은 공격자가 현재 사용자의 컨텍스트에서 임의 코드를 실행할 수 있도록 메모리를 손상시킬 수 있습니다. 취약점을 성공적으로 악용한 공격자는 현재 사용자와 동일한 사용자 권...

CVE-2026-98360

A flaw was found in the Linux kernel's Remote Direct Memory Access over Converged Ethernet RDMA/rxe driver. A local user can trigger a Denial of Service DoS or system crash by attempting to attach to a multicast group when network device operations fail. In this scenario, improper error handling...

CVE-2021-30573

CVE-2021-30573-PoC-Google-Chrome Google Chrome의 Use After Free 취약점 보고됨 Total Bug Bounty Reward: $6.000 이것은 다음에 대한 개념 증명PoC입니다: Google SecuritySeverity CVE. HIGH CVE-2021-30573 https://vulners.com/cve/CVE-2021-30573 Google 블로그 포스트:...

kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()

A flaw was found in the Linux kernel. A race condition exists in the xfrm policy handling, specifically within the xfrmpolicybyselctx function. This flaw allows for a use-after-free vulnerability, where memory is accessed after it has been released. This can lead to system instability or a denial...

kernel: sctp: purge outqueue on stale COOKIE-ECHO handling

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. This vulnerability, a use-after-free, occurs when the system processes a Stale Cookie ERROR during the setup or reconfiguration of an SCTP association. A remote attacker could exploit this by sending...