kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface vti6 component. An unprivileged local user, particularly within a user namespace, could exploit a vulnerability related to incorrect network namespace handling during the movement of a vti6 tunnel. This issue can lead to a kerne...

kernel: net: qrtr: restrict socket creation to the initial network namespace

A flaw was found in the Linux kernel's QRTR Qualcomm IPC Router networking component. An unprivileged local attacker can create a QRTR socket in a separate network namespace. Due to improper handling of global state variables, this allows the attacker to send datagrams and control-plane messages ...

kernel: RDMA/rxe: Fix OOB in free_rd_atomic_resources()

A flaw was found in the Linux kernel's RDMA/rxe component. A local user could exploit a memory corruption vulnerability in the freerdatomicresources function by updating the maxdestrdatomic value before the old array is properly freed, leading to an out-of-bounds write. This issue can cause a...

kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events The DSP event handling code in hwdepread could write more bytes to the user buffer than requested, when a user provides a buffer smaller than the event header...

kernel: sctp: purge outqueue on stale COOKIE-ECHO handling

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. This vulnerability, a use-after-free, occurs when the system processes a Stale Cookie ERROR during the setup or reconfiguration of an SCTP association. A remote attacker could exploit this by sending...

kernel: RDMA/rxe: Fix a use-after-free problem in rxe_mmap

A flaw was found in the Linux kernel's RDMA/rxe component. A race condition in the rxemmap function, which manages memory for Remote Direct Memory Access RDMA operations, can lead to a use-after-free vulnerability. A local attacker could exploit this timing issue to cause a system crash, resultin...

kernel: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv

A flaw was found in the Linux kernel's RDMA/rxe component. The rxercv function does not adequately validate the BTH pad and ICRC fields of incoming packets before calculating the payload size. A remote attacker could exploit this by sending a specially crafted short packet or a packet with a forg...

kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing

A flaw was found in the Linux kernel's Soft RoCE RDMA/rxe driver. An unauthenticated remote attacker can send a specially crafted UDP packet with an unknown opcode to trigger an out-of-bounds read. This vulnerability can lead to a kernel panic, effectively causing a Denial of Service DoS on the...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...

kernel: smc: Fix use-after-free in tcp_write_timer_handler()

In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in tcpwritetimerhandler. With Eric's ref tracker, syzbot finally found a repro for use-after-free in tcpwritetimerhandler by kernel TCP sockets. 0 If SMC creates a kernel socket in smccreate, the kernel...

kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()

A flaw was found in the Linux kernel. A race condition exists in the xfrm policy handling, specifically within the xfrmpolicybyselctx function. This flaw allows for a use-after-free vulnerability, where memory is accessed after it has been released. This can lead to system instability or a denial...

kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment

A flaw was found in the Linux kernel's xfrm subsystem. This vulnerability arises when asynchronous cryptographic operations incorrectly handle network packet segments, leaving a pointer to memory that has already been released. An attacker could potentially exploit this use-after-free condition t...

CVE-2026-43284

🚨 CVE-2026-43284 — Грязный Фрагмент 🚨 Универсальное локальное повышение привилегий в ядре Linux 📋 Обзор Грязный Фрагмент также известный как Copy Fail 2 — это уязвимость локального повышения привилегий с высоким уровнем воздействия в ядре Linux. Она позволяет непривилегированному локальному...

LiME

LiME Извлечение памяти Linux Загружаемый модуль ядра LKM для получения энергозависимой памяти с Linux-устройств и устройств на базе Linux, таких как Android. LiME минимизирует своё взаимодействие с процессами пользовательского и ядерного пространства во время сбора данных, создавая образы памяти,...

used_sock

usedsock Эксплойт ядра для iOS 12-12.2 и 12.4. Это не предназначено для использования в джейлбрейке. Вы можете найти описание здесь...

CVE-2026-98357

A flaw was found in the Linux kernel's iSCSI Extensions for Remote Direct Memory Access iSER target driver. This vulnerability can lead to arbitrary code execution or a Denial of Service DoS due to memory corruption. During connection teardown, background tasks process deferred control messages...

CVE-2018-8897

CVE-2018-8897 Демонстрация эксплуатации уязвимости POP SS CVE-2018-8897, приводящая к выполнению неподписанного кода с привилегиями ядра. KVA Shadowing должен быть отключен, а соответствующее обновление безопасности удалено. Это может не работать с некоторыми гипервизорами например, VMWare, котор...

CVE-2026-29923

CVE-2026-29923 - Attaque d'élévation de privilèges locaux via pstrip64.sys Avertissement : Ce code est fourni à des fins éducatives et de recherche défensive uniquement. Il a été écrit pour approfondir la compréhension de l'exploitation du noyau et aider les défenseurs à se protéger contre des...

CVE-2020-27786-Kernel-Exploit

CVE-2020-27786 Exploitation de noyau Détails Vous pouvez trouver tous les détails et explications ici : https://1day.dev/notes/Linux-Kernel-n-day-exploit-development TL;DR La vulnérabilité est une condition de concurrence Race Condition qui provoque une utilisation après libération en écriture...

CVE-2023-41992

CVE-2023-41992 Ceci est une preuve de concept pour CVE-2023-41992. Et avant tout, cela n'a rien à voir avec jailbreak ! Et il est encore en développement. Merci à tous ceux qui m'ont aidé jusqu'à présent. Pour des raisons de confidentialité, je ne peux pas vous lister ici. Envoyez-moi un message...