CVE-2026-89616

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix info-leak on partial LZNT decompress in nireadframe nireadframe decompresses an LZNT $DATA frame into the vmapped target pages and then trusts decompresslznt's return value: uncsize = decompresslzntframeondisk,...

CVE-2026-89616 fs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame()

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix info-leak on partial LZNT decompress in nireadframe nireadframe decompresses an LZNT $DATA frame into the vmapped target pages and then trusts decompresslznt's return value: uncsize = decompresslzntframeondisk,...

CVE-2026-89616

CVE-2026-89616 is an information disclosure vulnerability in the Linux kernel's NTFS3 filesystem driver. When ni_read_frame() decompresses an LZNT $DATA frame, decompress_lznt() may return fewer bytes than frame_size if the compressed stream is exhausted early. The unwritten tail region retains r...

EUVD-2026-76528

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix info-leak on partial LZNT decompress in nireadframe nireadframe decompresses an LZNT $DATA frame into the vmapped target pages and then trusts decompresslznt's return value: uncsize = decompresslzntframeondisk,...

CVE-2026-89616 fs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame()

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix info-leak on partial LZNT decompress in nireadframe nireadframe decompresses an LZNT $DATA frame into the vmapped target pages and then trusts decompresslznt's return value: uncsize = decompresslzntframeondisk,...

PT-2026-96518

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix info-leak on partial LZNT decompress in ni read frame ni read frame decompresses an LZNT $DATA frame into the vmapped target pages and then trusts decompress lznt's return value: unc size = decompress lzntframe...

PT-2026-90332

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An information leak exists in the ni read frame function within the NTFS3 file system. The issue occurs when the decompress lznt function stops processing a compressed stream before...

CVE-2026-89616: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix info-leak on partial LZNT decompress in nireadframe nireadframe decompresses an LZNT $DATA frame into the vmapped target pages and then trusts decompresslznt's return value: uncsize = decompresslzntframeondisk,...

Exploit for Use After Free in Linux Linux_Kernel

Galaxy A37 Root — CVE-2026-43499 Native payload for the Sam...

GhostUnlock-SM-S918U

GhostUnlock — Samsung Galaxy S23 Ultra SM-S918U1, dm3q Temp...

CVE-2026-80118

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an unauthenticated physical memory disclosure in DirectIo64.sys, reachable by unprivileged local users through a single IOCTL with no caller-identity check. The handl...

CVE-2026-80118 PassMark PerformanceTest, BurnInTest, and OSForensics Kernel Null Pointer Dereference via DirectIo64.sys IOCTL

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an unauthenticated physical memory disclosure in DirectIo64.sys, reachable by unprivileged local users through a single IOCTL with no caller-identity check. The handl...

CVE-2026-80118 PassMark PerformanceTest, BurnInTest, and OSForensics Kernel Null Pointer Dereference via DirectIo64.sys IOCTL

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an unauthenticated physical memory disclosure in DirectIo64.sys, reachable by unprivileged local users through a single IOCTL with no caller-identity check. The handl...

CVE-2026-80118

PassMark PerformanceTest (before 11.1 build 1012), BurnInTest (before 11.1 build 1000), and OSForensics (before 11.1 build 1016) contain an unauthenticated physical memory disclosure in DirectIo64.sys . A single IOCTL with no caller-identity check allows unprivileged local users to write a crash-...

EUVD-2026-71689

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an unauthenticated physical memory disclosure in DirectIo64.sys, reachable by unprivileged local users through a single IOCTL with no caller-identity check. The handl...

PT-2026-86231

Name of the Vulnerable Software and Affected Versions PassMark PerformanceTest versions prior to 11.1 build 1012 BurnInTest versions prior to 11.1 build 1000 OSForensics versions prior to 11.1 build 1016 Description An unauthenticated physical memory disclosure exists in the DirectIo64.sys driver...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-001010)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001010 advisory. In the Linux kernel, the following vulnerability has been resolved: x86, relocs: Ignore relocations in .notes section When building with CONFIGXENPV=y, .text symbols...

CVE-2026-43499-NAM-AL00

CVE-2026-43499 — GhostLock auf Huawei Nova 9 NAM-AL00 Sicherheitsforschung: Bestätigung auf dem Gerät und Exploit-Analyse von CVE-2026-43499 GhostLock auf Huawei Nova 9 NAM-AL00, Snapdragon 778G/SM7325, HarmonyOS 4.2.0.185, Kernel 5.4.86-qgki. Zusammenfassung CVE-2026-43499 ist ein...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 — GhostLock on Huawei Nova 9 NAM-AL00 Securi...

UBUNTU-CVE-2026-72013

In the Linux kernel, the following vulnerability has been resolved: riscv: Prevent NULL pointer dereference in machinekexecprepare A NULL pointer dereference issue is noticed in riscv's machinekexecprepare, where image-segmenti.buf might be NULL and copied unchecked. The NULL buf comes from...