350 matches found
CVE-2026-68128
In the Linux kernel, the following vulnerability has been resolved: ice: reject out-of-range ptype in iceparserprofileinit setbitrslt-ptype, prof-ptypes operates on a DECLAREBITMAP of ICEFLOWPTYPEMAX 1024 bits. Nothing prevents a malicious VF from providing ptype = 1024 through VIRTCHNL, resultin...
CVE-2026-68125
In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: reject frames shorter than the authentication tag llsecdodecryptauth computes the associated-data length for the AEAD request as assoclen += datalen - authlen; where datalen is the number of bytes after the MAC...
CVE-2026-68122
In the Linux kernel, the following vulnerability has been resolved: ovpn: fix peer refcount leak in TCP error paths When either the TCP RX or TX error path calls ovpnpeerhold followed by schedulework&peer-tcp.deferdelwork, and the work item is already pending from the other path, schedulework...
CVE-2026-68120
In the Linux kernel, the following vulnerability has been resolved: rtase: Workaround for TX hang caused by hardware packet parsing The hardware performs packet parsing before packet transmission. Parsing incomplete IPv4, IPv6, TCP, or UDP headers may trigger a TX hang because the hardware parser...
CVE-2026-68113
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx12: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit f952076f76d62f783e8ba4995a7c400d39354ccf...
CVE-2026-68106
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix division by zero with invalid uvd dimensions When width or height is less than 16, widthinmb or heightinmb becomes 0, leading to fsinmb being 0. This causes a division by zero when calculating numdpbbuffer in H264...
CVE-2026-68098
In the Linux kernel, the following vulnerability has been resolved: ksmbd: bound DACL dedup walk to copied ACEs setntacldacl can stop copying ACEs before consuming the full input DACL when size accounting overflows. When that happens, numaces reflects only the ACEs that were actually copied into...
CVE-2026-68088
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check to response query Add variable representations for BufLength and BufOffset in rndisqueryresponse, and perform a length check on them. This is identical to how rndissetresponse handle...
Photon OS 5.0: Linux PHSA-2026-5.0-91-0864
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0864. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2026-43499-pgp110 CVE-2026-43499 futex PI rtmutex...
share-poc-XRing-O1
CVE-2026-43499 GhostLock – XRing O1 Exploit Research Targ...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2026-43499 for OnePlus 15 Android 16 local privilege esca...
Exploit for Use After Free in Linux Linux_Kernel
OPPO Find X6 Pro GhostLock Adaptation Project Overview Th...
ghostlock-ace6t
GhostLock — OnePlus Ace 6T Jailbreak Kernel exploit for OnePl...
Exploit for CVE-2026-43503
CVE-2026-43503 — DirtyClone Linux local privilege escalation...
coruna-postexploit
Coruna Post-Exploitation Framework Overview This is a com...
Kernel-Dojo-Labs
Kernel-Dojo Lab An interactive practice environment for the...
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Linux Linux_Kernel
📺 chronomaly-webos - Gain root access on LG TVs !https://...