audit-kernel

리눅스 커널 감사 하위 시스템 https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit.git https://github.com/linux-audit/audit-kernel Linux Audit 하위 시스템은 보안 관련 이벤트를 캡처하고 기록하는 데 사용되는 안전한 로깅 프레임워크를 제공합니다. 이 하위 시스템은 시스템 활동을 기반으로 감사 레코드를 생성하는 커널 구성 요소, 이러한 레코드를 로컬 파일 또는 원격 집계 서버에 기록하는 사용자 공간 데몬, 그리고 감사 로그 검...

ROS-20260930-73-0023

The vulnerability of the ASoC kernel component of the operating system is related to an error in pointer arithmetic. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

ROS-20260930-73-0016

The vulnerability of the dmaengine kernel component of the operating system is related to memory release errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-31431

CVE-2026-31431 - 개념 증명PoC Linux algifaead 페이지 캐시 쓰기를 통한 루트 권한 상승 - 로컬 권한 상승 익스플로잇 라이트업Writeup https://websec.net/blog/cve-2026-31431-linux-algifaead-page-cache-write-to-root-69f38a4ccddd2db1f520f170 참고 사항 PoC는 공개된 참고 자료를 기반으로 작성되었으며, 아직 완전히 테스트되지 않았습니다. 문제가 발생할 경우 알려주시기 바랍니다: [email protected]...

UBUNTU-CVE-2026-80875

In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in TCP state lookup TCP state handling reparses the skb to find the TCP header. For IPv6 it uses sizeofstruct ipv6hdr, while the surrounding IPVS code already parsed the packet with ipvsfilliphsk...

UBUNTU-CVE-2026-80807

In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject invalid block index in GC ioctl Syzbot reported list corruption caused by a double listaddtail call on bh-bassocbuffers within nilfslookupdirtydatabuffers. Analysis revealed that the root cause was the insertion of...

CVE-2026-80532

In the Linux kernel, the following vulnerability has been resolved: xfs: fix another iunlink infinite loop bug in online fsck xrepiunlinkresolvebucket is supposed to reconstruct as much of the incore prev and next unlinked list pointers based on what it finds on disk and in memory before we move ...

CVE-2026-80533

In the Linux kernel, the following vulnerability has been resolved: xfs: don't walk off the end of a null sc-sa.agibp in AGI repair LOLLM noticed a longstanding bug where xrepiunlinkwalkondiskbucket tries to walk ragi-sc-sa.agibp to rebuild the unlinked inode lists. Unfortunately, it's possible f...

The vulnerability of the nfsd components in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nfsd component in Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260821-73-0069

The vulnerability of the cgroup kernel component in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

CVE-2026-72221

A flaw was found in the kernel. A race condition exists in the sunrpc component during the Transport Layer Security TLS handshake cancellation process. This can lead to the corruption of an internal data structure, potentially causing system instability or a denial of service. Additionally, it ma...

The vulnerability of the ksmbd component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the ksmbd component in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the bpf component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the bpf component in the Linux operating system’s kernel is related to improper synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-63909

A flaw was found in the ksmbd component of the Linux kernel. A transposed bounds check in the smbcheckpermdacl function can lead to a 2-byte heap out-of-bounds OOB read during Server Message Block SMB2 create operations. This vulnerability may allow a remote attacker to disclose sensitive...

The vulnerability of the Win32k.sys component of the Windows operating system, which allows a hacker to compromise protected information

The vulnerability of the Win32k.sys component of the Windows operating system is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Win32k.sys component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2026-50325 Win32k Elevation of Privilege Vulnerability

...

CVE-2026-49805 Win32k Elevation of Privilege Vulnerability

...

CVE-2026-33840

Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...

The vulnerability of the Win32K component – ICOMP in Windows operating systems, which allows attackers to exploit their privileges.

The vulnerability of the Win32K component – ICOMP in Windows operating systems is related to access to resources through incompatible types. Exploiting this vulnerability can allow attackers to increase their privileges...