CVE-2025-29338

CVE-2025-29338 — Aviso de Seguridad Desbordamiento de Búfer en la Pila en el Controlador Wi-Fi del Kernel NXP moal.ko woalsetupmoduleparam / parsecfggetline Campo| Valor ---|--- ID CVE| CVE-2025-29338 Gravedad| Alta Puntaje CVSS v3.1| 7.8 Vector CVSS v3.1|...

Amazon Linux 2 : kernel (ALASKERNEL-5.15-2026-116)

The version of kernel installed on the remote host is prior to 5.15.220-153.252. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2026-116 advisory. In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption...

FreeBSD -- Remote DoS via receive-side kernel TLS

Problem Description: TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding. The code which searches for the inner record type had an off-by-one bug which could be triggered by an invalid frame, leading to an underflow followe...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2026-132)

The version of kernel installed on the remote host is prior to 5.10.268-266.1092. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2026-132 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use uninterruptible res...

SUSE CVE-2026-97934

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory corruption from a "STACKTRACE" histogram key "cpu", "CPU", "stacktrace" and "STACKTRACE" are generic fields, defined with an offset and a size of zero so that the filter code can match them by name. parsefield...

SUSE CVE-2026-98146

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Remove countedby from struct amdxdnacmdchain struct amdxdnacmdchain contains a flexible array annotated with countedbycommandcount. Since the structure is stored in shared AMDXDNABOSHARE memory, userspace can modif...

kernel: RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem, specifically within the rxe component. This vulnerability arises from an incorrect conversion of I/O Virtual Addresses iova to Virtual Addresses va when Memory Regions MRs have page sizes that differ from the...

CVE-2026-98007

A flaw was found in the Linux kernel. A privileged local user can cause a Denial of Service DoS by loading a specially crafted BPF Berkeley Packet Filter program that passes a pointer value instead of a scalar number as the loop iteration count to the bpfloop function. Because the kernel's BPF...

CVE-2026-97526

A flaw was found in the Linux kernel's s390 Processor Activity Instrumentation PAI performance monitoring unit. This vulnerability allows a local user to cause a Denial of Service DoS by crashing the operating system. When a CPU is dynamically added hotplugged during an active performance...

kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets

A flaw was found in the vmxnet3 virtual network device driver within the Linux kernel. When processing Geneve-encapsulated packets, the vmxnet3gethdrlen function can incorrectly interpret header information, leading to a mismatch between expected and actual packet protocols or IP versions. This c...

CVE-2026-43499

CVE-2026-43499 — Uso después de liberar en Futex PI del kernel de Linux Fallo removewaiter en kernel/locking/rtmutex.c es utilizado por las rutas de slowlock, pero también para el rollback de proxy-lock en rtmutexstartproxylock cuando se invoca desde futexrequeue. En el caso de proxy-lock,...

CVE-2026-98146

A flaw was found in the Linux kernel's AMD XDNA driver, which can result in a Denial of Service DoS. The driver processes command chains located in shared memory that can be concurrently modified by userspace. By altering the command counter during execution, a local attacker can cause a bounds...

CVE-2019-8852

CVE-2019-8852 Un bug de tfp0 para macOS 10.15.1 y anteriores. Garantía Úsalo bajo tu propio riesgo. Esto hará que macOS entre en pánico. Lo construí solo para investigadores de seguridad. Estado actual Solo un PoC, convierte la vulnerabilidad en una UAF útil. Probado en macOS 10.14.6 18G103 ,...

CVE-2026-93274

A flaw was found in the Linux kernel's Broadcom BCM2835 pin control driver. During device initialization, if pin controller registration fails, the driver attempts to remove an unregistered General Purpose Input/Output GPIO chip. This improper error handling leads to a null pointer dereference,...

CVE-2022-25636

CVE-2022-25636 This is my exploit for CVE-2022-25636. I tested it against Ubuntu 21.10 with kernel 5.13.0-30. Works about 40% of the time, in the other cases you likely get a kernel panic. The exploit might corrupt important data on heap, after an unsuccessful attempt it's best to reboot...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup CVE-2026-52977 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free in offloaded map/prog info fill...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use uninterruptible resv lock for plane updates CVE-2026-64098 In the Linux kernel, the following vulnerability has been resolved: bpf: Reject BPFMAPTYPEINODESTORAGE creation if BPF LSM is uninitialize...

CVE-2022-42864

CVE-2022-42864: Cookies Diabólicas ¿Qué es este repositorio? Esta es mi prueba de concepto incompleta del exploit para CVE-2022-42864, una vulnerabilidad de tiempo-de-verificación a tiempo-de-uso en IOHIDFamily que fue corregida en iOS 16.2 / macOS Ventura 13.1. ¿Cuál es el estado de la prueba de...

xattr-oob-swap

xattr-oob-swap CVE-2020-27904: un bug de tfp0 para macOS 10.15.x y anteriores. Código de exploit de demostración para mi charla en BlackHat ASIA 2021. La vulnerabilidad se ha corregido en macOS Big Sur 11.0 y en la última actualización de seguridad de 10.15 y 10.14. Garantía Úsalo bajo tu propio...

IOHIDFamily-PoC-Research

CVE-2026-28992 — PoC de FastPathUserClient de IOHIDFamily Repositorio de investigación de seguridad. Dos aplicaciones PoC que demuestran las condiciones de carrera en IOHIDFamily's FastPathUserClient en iOS 18.7.1 y anteriores. ⚠️ Ambos PoCs provocarán un kernel panic y reiniciarán tu dispositivo...