linux-4.1.15_CVE-2018-5873

Linux 内核发布 4.x http://kernel.org/ 以下是 Linux 4.x 版本的发布说明。请仔细阅读,因为它们会告诉你这一切是怎么回事、如何安装内核,以及出现问题时的处理方法。 什么是 Linux? Linux 是 Unix 操作系统的一个克隆,由 Linus Torvalds 从零开始编写,并得到了来自网络上松散协作的黑客团队的帮助。它以符合 POSIX 和单一 UNIX 规范Single UNIX Specification为目标。 它拥有你期望在现代全功能 Unix...

kprotect

🛡️ kprotect 概要 kprotect は、サプライチェーン攻撃（悪意のある Python や Node.js ライブラリなど）から機密データを保護するために設計されたカーネルレベルのセキュリティエンジンです。最も機密性の高いファイルに対して独立したセキュリティレイヤーとして機能します。 eBPF-LSM による強制 ：パスパターンやワイルドカード（例：.env、home/user/.ssh/）に基づいて、ファイルアクセスをカーネルレベルでインターセプトします。 系統（Lineage）検証 ：単一のバイナリだけでなく、プロセスチェーン を検証します。 ✅ VS Code →...

CrowArmor

CrowArmor : Controlador Linux ¿Qué es CrowArmor? CrowArmor es un controlador para Linux orientado a la seguridad del sistema; utilizamos interfaces LSM para mejorar la seguridad del kernel, brindando soporte para MalDec-EDR. Documentación del código y cómo proceder con la instalación en...

CVE-2026-31431-Analysis

CVE-2026-31431-Analysis Informe de Análisis Técnico: Explotación de Fallo de Aislamiento en el Kernel Linux CVE-2026-31431...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2021-31166-Exploit

CVE-2021-31166-Exploit MS HTTPプロトコルスタックのRCE脆弱性（CVE-2021-31166）のエクスプロイト 特別に細工されたHTTPリクエストを脆弱なWindowsバージョンに送信すると、DoS攻撃が発生します。そして、サーバーはブルースクリーンエラーで再起動します。 Http.sysは、HTTPリクエストを処理し、それに対する応答を作成するWindowsカーネルドライバです。 この脆弱なhttp.sysドライバは、細工された「Accept-Encoding」ヘッダーを処理できず、クラッシュします。その結果、サーバーが再起動します。...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: dm raid: fixed the address sanitizer warning in raidstatus. This warning occurs when using a kernel with address sanitizer and running this testsuite: https://gitlab.com/cki-project/kernel-tests/-/tree/main/storage/swraid/scsirai...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Validates the mech token during session setup. If a client sends an invalid mech token in a session setup request, ksmbd validates it and reports an error if the token is invalid...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ext4: Fixed a double-free of blocks due to incorrect movedlen values during extent movements. In ext4moveextents, movedlen is updated only when all movements are successfully executed. It also discards preallocations for originod...

kernel security update

5.14.0-687.45.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset CVE-2025-68745 kernel: scsi: target: configfs: Bound snprintf return in...

CVE-2026-74580

creationtimestamp| type| source ---|---|--- 2026-09-08 20:46:01+00:00| seen| https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities20260902...

Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock bsc1269282. CVE-2026-46037: ipv4: icmp: validate reply type before using icmppointers...

CVE-2026-80907

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD dpb min size calculation for H264 This should use actual number of references from the decode message, instead of maximum derived from level. cherry picked from commit 64b525edb7e7bdfcdc77883c5e413804e2396856...

CVE-2026-80846

In the Linux kernel, the following vulnerability has been resolved: xfrm: drop ESP-in-TCP packets with no ingress device ESP-in-TCP receives records through the TCP strparser. handleesp restores skb-dev from the saved skbiif before passing the packet into the XFRM input path. Queued TCP data can ...

CVE-2026-80821

In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: put CQ ref on createcq mapping failure nvmetpciepfcreatecq calls nvmetcqcreate, which takes a reference on the controller and installs the completion queue. If the subsequent PCI address-space mapping fails or...

Unbreakable Enterprise kernel security update

6.12.0-206.104.3.3 - inet: frags: strip GSO state from fragments before reassembly Xinyang Ge Orabug: 39974840 CVE-2026-80590 6.12.0-206.104.3.2 - KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs Weiming Shi Orabug: 39931938 CVE-2026-74517 - tcp: challenge ACK for non-exact...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

SUSE-SU-2026:23376-1 Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie bsc1270023 - CVE-2026-53246: sctp: validate cached peer INIT chunk length in...

SUSE-SU-2026:23433-1 Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie bsc1270023 - CVE-2026-53246: sctp: validate cached peer INIT chunk length in...