472788 matches found
CVE-2022-0847-DirtyPipe-Exploit
在 Linux Kernel 直至 5.10.101/5.15.24/5.16.10（操作系统）中发现了一个漏洞，且被归类为严重。该漏洞影响了组件 Pipe Handler 的某些未知处理过程。受影响的是机密性、完整性和可用性。 该漏洞于 2022 年 3 月 8 日披露。公告发布在 dirtypipe.cm4all.com。该漏洞的标识符为 CVE-2022-0847。已知易于利用。攻击可能远程发起。利用时需要简单的认证。技术细节未知，但已有公开的利用代码。 升级至版本 5.10.102、5.15.25 或 5.16.11 可消除此漏洞。应用补丁能够解决该问题。修复程序已可下载，地址为...
CVE-2022-26937
PoC de Caída del Sistema de Archivos de Red de Windows CVE-2022-26937 nt!KeBugCheckEx: fffff8038996efa0 48894c2408 mov qword ptr rsp+8,rcx ss:0018:ffffd000d589ae60=0000000000000139 1: kd !analyze -v Bugcheck Analysis KERNELSECURITYCHECKFAILURE 139 A kernel component has corrupted a critical data...
CVE-2026-31431-Copy-Fail-R-pertoire-de-Pr-vention
🔴 CVE-2026-31431 — Copy Fail Escalada de Privilegios Local en el Kernel de Linux LPE — Repositorio de Investigación Defensiva 📖 Presentación Copy Fail CVE-2026-31431 es una vulnerabilidad de tipo Escalada de Privilegios Local LPE que afecta al kernel de Linux mediante una corrupción controlada de...
Fragnesia-CVE-2026-46300
🔴 Fragnesia — CVE-2026-46300 Linux 内核中的权限提升 · CVSS 7.8 · 披露于 2026 年 5 月 14 日 仅用于意识提升的仓库。 本仓库不包含利用代码。其目的是向系统管理员、工程师和安全团队告知该漏洞的性质以及可用的修复措施。 📋 摘要 字段| 值 ---|--- CVE| CVE-2026-46300 名称| Fragnesia 严重性| High CVSS 7.8 类型| Local Privilege Escalation LPE 组件| Linux Kernel — XFRM ESP-in-TCP subsystem 发现者|...
CVE-2026-98182
A flaw was found in the Linux kernel's mac80211 wireless subsystem. A local user with network administration privileges can cause a Denial of Service DoS by configuring an inactive network interface to active monitor mode and then bringing the interface up. Because the required transmit queue is...
CVE-2026-98179
A flaw was found in the Linux kernel's AMD GPU amdgpu driver. This issue can lead to a Denial of Service DoS caused by resource exhaustion during device removal or driver unloading. Because the cleanup routine fails to release mapped input/output I/O register memory, a privileged local user could...
CVE-2026-98178
A flaw was found in the Linux kernel's AMD GPU driver. When compute subsystem initialization fails, uninitialized device structures remain attached to the graphics driver. A local user capable of triggering a GPU reset can cause the system to dereference an unallocated memory pointer, resulting i...
CVE-2026-98177
A flaw was found in the Linux kernel's AMD GPU driver amdkfd. A local user could trigger a Denial of Service DoS or system instability due to an integer underflow vulnerability during the calculation of the End of Pipe EOP ring buffer size. Under specific conditions, this improper calculation cou...
CVE-2026-98183
A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. An adjacent attacker can trigger an out-of-bounds read by transmitting specially crafted wireless mesh network frames containing empty Path Request PREQ elements. This issue occurs because the kernel reads header field...
cve-2024-1086-writeup
CVE-2024-1086 根本原因与利用 目标内核： Linux 6.8（netfilter nftables） 新颖角度： nftverdictinit 中的逻辑混淆导致引用计数 double-free，可通过堆喷射实现任意内存写入。 目录 1. 背景 — netfilter / nftables 概述 2. 根本原因分析 — nftverdictinit 逻辑混淆 3. 受影响的内核代码 — 带注释的源码节选 4. 概念验证 — 触发和利用代码 5. 利用策略 — 堆喷射实现任意写入 6. 参考资料...
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcpconnrequest bsc1235944 bsc1269731. CVE-2026-23451: bonding: prevent potential infinite loop in bondheaderparse...
SUSE-SU-2026:4595-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcpconnrequest bsc1235944 bsc1269731. - CVE-2026-23451: bonding: prevent potential infinite loop in bondheaderpars...
CVE-2026-98371
A flaw was found in the Linux kernel's IP Traffic Flow Security IP-TFS subsystem. Incomplete length validation when reassembling fragmented inner packets allows undersized packets to trigger an internal calculation underflow. A local user or remote attacker could exploit this vulnerability by...
CVE-2026-98370
A flaw was found in the Linux kernel's IPsec Internet Protocol Security subsystem. A local attacker can exploit this issue by submitting 32-bit compatibility requests, which triggers a race condition during message translation. This flaw leads to a use-after-free condition, potentially allowing a...
CVE-2026-98369
A flaw was found in the Linux kernel's IPsec xfrm subsystem. This flaw can lead to a Denial of Service DoS due to missing synchronization locks and device references when reinjecting transport-mode network packets through workqueues. A remote attacker could exploit this vulnerability by sending...
CVE-2026-98368
A flaw was found in the Linux kernel's IPsec Encapsulating Security Payload ESP subsystem. When transmitting network packets using zero-copy operations on out-of-place paths, the kernel modifies packet fragment structures without properly updating reference counts for managed memory pages. A loca...
CVE-2026-98181
A flaw was found in the Linux kernel's Generic USB Display GUD driver. An attacker connecting a specially crafted USB device advertising a maximum number of display properties can trigger an array indexing error during property validation. This flaw leads to an out-of-bounds memory write, which c...
CVE-2026-98367
A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA Soft-iWARP siw driver. A race condition occurs during connection handling if modifying a queue pair fails, releasing an internal lock before error cleanup completes. A local attacker could exploit this timing window through...
CVE-2026-98180
A flaw was found in the Linux kernel's Direct Rendering Manager DRM MSM driver. When ring buffer or virtual memory objects containing a GPU scheduler are freed, synchronization fences exported to user space continue to reference the deallocated scheduler memory. A local unprivileged attacker can...