CVE-2026-80821

A flaw was found in the Linux kernel's nvmet PCI Express Endpoint Function PCI-EPF component. A remote attacker can exploit this vulnerability by sending specially crafted Create IO Completion Queue CQ commands. This leads to a resource leak, as the system fails to properly release references to...

CVE-2026-80784

A flaw was found in the Linux kernel's Multipath TCP MPTCP component. A race condition exists during socket teardown and concurrent userspace Multipath TCP MPTCP general announce operations. This can allow a local attacker to trigger a memory leak by causing an allocation to occur after a list ha...

CVE-2026-80797

A flaw was found in the Near Field Communication NFC PN533 driver in the Linux kernel. When a PN533 device is removed while data fragments are still queued, the driver's cleanup process fails to properly release these fragments, resulting in a memory leak. This can lead to system instability or...

cifswitch-check

cifswitch-check Uno script shell per verificare se un sistema Linux è esposto a CIFSwitch CVE-2026-46243 — una vulnerabilità di escalation locale dei privilegi nel client CIFS/SMB del kernel Linux, presente dal 2007. Viene eseguito su host bare-metal, VM e all'interno di container. Progettato per...

Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes various security issues: The following security issues were fixed: CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd bsc1272391. CVE-2026-63920: ipv6: validate extension header length...

SUSE-SU-2026:4570-1 Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes various security issues: The following security issues were fixed: - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd bsc1272391. - CVE-2026-63920: ipv6: validate extension header...

Detections-CVE-2026-31431

TRASFERIMENTO SU: https://github.com/insomnisec/publiccvedetections PER UNA MIGLIORE GESTIONE A LUNGO TERMINE DELLE PUBBLICAZIONI DI RILEVAMENTO QUESTO REPO SARÀ RIMOSSO A GIUGNO 2026 PER FAVORE USA L'ALTRO REPO D'ORA IN POI CVE-2026-31431 "Copy Fail" — Pacchetto di Rilevamento e Risposta...

CVE-2026-31431-Metasploit-exploit

CVE-2026-31431 - Kernel Linux AFALG "Copy Fail" Escalation Locale dei Privilegi Un modulo Metasploit Post-Exploitation automatizzato che sfrutta CVE-2026-31431 noto anche come "Copy Fail" per eseguire un'Escalation Locale dei Privilegi LPE su kernel Linux vulnerabili versioni da 4.14 a 6.19.12...

3 lessons from frontier AI vulnerability research

In this article 1. Shift 1. From frontier capability to scale 2. Shift 2. From token consumption to reasoning economics 3. Shift 3. Validation and remediation as a continuous learning loop 4. Transferring security research to help open source projects 5. Open-source vulnerability reporting snapsh...

CVE-2026-80902

A flaw was found in the Linux kernel's sun6i-dma component. When Direct Memory Access DMA transfers are terminated, active descriptors are not correctly reclaimed. This issue leads to a permanent memory leak and can also cause corruption of internal data structures within the kernel...

CVE-2026-80903

A flaw was found in the Linux kernel's Direct Rendering Manager DRM Xe output/audio OA module. When a specific configuration emission function fails, it does not properly release allocated memory for synchronization entries. This oversight leads to a memory leak, where system memory becomes...

CVE-2026-80885

A flaw was found in the Linux kernel's Andrew File System AFS component. The rxrpc Out-of-Band OOB message handler did not properly cancel its processing. This could lead to the handler continuing to process messages even when the network namespace is no longer active, or mishandling security...

Relapse-Exploit

PS5 Relapse Exploit Supported firmware: 7.00 through 13.60. Usage The default payloads are stored in payloads/ after a successful run, the ELF loader listens on port 9021. Stability notes Webkit may need several attempts, reload the page if the browser stalls. The kernel exploit may hang or panic...

CVE-2022-0847-Dirty-Pipe-

CVE-2022-0847-Dirty-Pipe- questa è una repository che affronta un problema di escalation in sistemi Linux e una notizia riguardante il problema della "Dirty pipeline" Max Kellermann, uno sviluppatore presso CM4all un'azienda tedesca di web hosting, lo ha scoperto all'inizio del 2022, ma non...

CVE-2019-14079

Fuzzing del dispositivo USB su Android CVE-2019-14079 Questo post riguarda un semplice bug che ho trovato nel mio dispositivo Android MI A2 - esegue Android stock usando il fuzzing del dispositivo USB ed è stato classificato come alta gravità da Google. Il bug era nel driver USB Qualcomm, che è...

XCP_ng_CVE-2026-43284_tester

XCP-ng — Diagnostica Dirty Frag — CVE-2026-43284 Uno strumento diagnostico della community per determinare se un host XCP-ng dom0 è esposto a CVE-2026-43284 "Dirty Frag", una vulnerabilità di escalation dei privilegi locali nel sottosistema xfrm-ESP del kernel Linux. TL;DR — Tutte le versioni...

GO-2026-6663 SiYuan: TLS Private Keys Readable via getFile (Incomplete Blocklist) in github.com/siyuan-note/siyuan/kernel

SiYuan: TLS Private Keys Readable via getFile Incomplete Blocklist in github.com/siyuan-note/siyuan/kernel...

GO-2026-6655 SiYuan MCP asset.upload Reads Arbitrary Absolute File Paths (Workspace Boundary Bypass) in github.com/siyuan-note/siyuan/kernel

SiYuan MCP asset.upload Reads Arbitrary Absolute File Paths Workspace Boundary Bypass in github.com/siyuan-note/siyuan/kernel...

GO-2026-6650 SiYuan: Cross-Site WebSocket Hijacking on the admin-only network proxy endpoint (`/ws/network/proxy`) via explicit `CheckOrigin: true` bypass in github.com/siyuan-note/siyuan/kernel

SiYuan: Cross-Site WebSocket Hijacking on the admin-only network proxy endpoint /ws/network/proxy via explicit CheckOrigin: true bypass in github.com/siyuan-note/siyuan/kernel...

GO-2026-6654 SiYuan: 17 block metadata/content endpoints in kernel/api/block.go have zero publish-access filtering, reachable by anonymous publish-mode readers in github.com/siyuan-note/siyuan/kernel

SiYuan: 17 block metadata/content endpoints in kernel/api/block.go have zero publish-access filtering, reachable by anonymous publish-mode readers in github.com/siyuan-note/siyuan/kernel...