kernel: packet: use consistent hard_header_len in non-ring send paths

An out-of-bounds write problem was observed in packetsendmsgspkt in net/packet/afpacket.c in the Linux Kernel. In this flaw, AFPACKET hardheaderlen race may allow local privilege escalation...

kernel: fs/notify: call exportfs_encode_fid with s_umount

A flaw was found in the Linux kernel’s filesystem notification fs/notify code where calling inotifyshowfdinfo on a file descriptor watching an overlayfs inode during an unmount operation could lead to a NULL pointer dereference...

kernel: sctp: purge outqueue on stale COOKIE-ECHO handling

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. This vulnerability, a use-after-free, occurs when the system processes a Stale Cookie ERROR during the setup or reconfiguration of an SCTP association. A remote attacker could exploit this by sending...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

kernel: udp: fix potential use-after-free in tunnel segmentation

A flaw was found in the Linux kernel's UDP User Datagram Protocol tunnel segmentation. This vulnerability arises when the system attempts to process network packets, specifically in the skbudptunnelsegment function. An attacker could potentially exploit a use-after-free condition, where the syste...

kernel: af_unix: Unlink scc_entry in unix_del_edge()

A flaw was found in the Linux kernel's afunix component. A race condition during concurrent send and close operations can lead to the garbage collector GC partially freeing a Strongly Connected Component SCC. This inconsistent state may cause subsequent GC operations to iterate over a partially...

kernel: smb: client: fix double-free in SMB2_flush() replay

A flaw was found in the Linux kernel's Server Message Block SMB client. This vulnerability, a double-free error within the SMB2flush replay mechanism, occurs when the system attempts to free a memory buffer twice. A malicious SMB server could exploit this by sending a specially crafted flush...

kernel: ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data()

A flaw was found in the Linux kernel's IPv6 In-situ Operations, Administration, and Maintenance IOAM functionality. A remote attacker can send a specially crafted packet that manipulates the nodelen field while processing trace data. This manipulation leads to a heap buffer overflow, causing...

kernel: Kernel SMB client: Double-free vulnerability allows remote denial of service or privilege escalation

A flaw was found in the Linux kernel's Server Message Block SMB client. A double-free vulnerability exists in the SMB2ioctl replay path, where a response buffer can be freed twice under specific error conditions. A malicious or compromised SMB server could exploit this by sending crafted response...

kernel: udf: fix partition descriptor append bookkeeping

A flaw was found in the Linux kernel's Universal Disk Format UDF filesystem. A remote attacker could exploit this vulnerability by tricking a user into mounting a specially crafted UDF image containing repeated partition descriptors. This could lead to a heap out-of-bounds write, potentially...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Moderate: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

optee-qemu

CVE-2021-44733: Fuzzing e sfruttamento di una use-after-free nel sottosistema TEE del kernel Linux Recentemente è stata scoperta una vulnerabilità use-after-free nel sottosistema TEE del kernel Linux, fino alla versione 5.15.11 inclusa, alla quale è stato assegnato l'ID CVE-2021-44733 1. A prima...

CVE-2021-3490

Il tracciamento dei limiti ALU32 di eBPF per le operazioni bitwise AND, OR e XOR nel kernel Linux non aggiornava correttamente i limiti a 32 bit, il che poteva trasformarsi in letture e scritture fuori dai limiti nel kernel Linux e, quindi, nell'esecuzione arbitraria di codice. Compilazione: gcc ...

VortexCry-Ransomware-Release

VortexCry-Ransomware VortexCry è un ransomware avanzato che utilizza iniezione di processo multi-stadio come Process Hollowing e APC Injection e caricamento di driver kernel tramite la vulnerabilità CVE-2019-16098. È in grado di crittografare file, distruggere le funzionalità di ripristino del...

CVE-2026-87660

An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force system error conditions, reset...

d8-copy-fail-mitigation

Mitigazione CVE-2026-31431 per Deckhouse Kubernetes Platform Lingua: English | Русский | Italiano Informazioni sulla vulnerabilità CVE-2026-31431 è una vulnerabilità nel modulo algifaead del kernel Linux, che espone l'API crittografica del kernel allo spazio utente attraverso la famiglia di socke...

DirtyFrag-for-dummies

Dirty Frag / CVE-2026-43284 — Note di Ricerca Panoramica Questo repository contiene un diagramma tecnico ripulito e note di supporto per la vulnerabilità del kernel Linux comunemente nota come Dirty Frag e tracciata per il percorso xfrm-ESP come CVE-2026-43284. Il problema appartiene alla più amp...

CVE-2026-31431-Analysis

CVE-2026-31431-Analysis Rapporto di Analisi Tecnica: Sfruttamento della falla di isolamento nel kernel Linux CVE-2026-31431...

CVE-2026-87660

A vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS (versions before 9.2.2d and 10.0.0 through 10.0.0a1) due to improper file permissions and missing authorization . An unprivileged local user can exploit this to invoke privileged hardware tests , force system er...