CVE-2026-90362

A flaw was found in the Linux kernel's Display Serial Interface DSI driver for Qualcomm Snapdragon MSM devices. The devpmoppsetrate0 function incorrectly removes a power vote for a clock without parking it. This allows the clock to continue running without the necessary power backing, which could...

CVE-2026-90273

A flaw was found in the Coresight ETM4x component of the Linux kernel. This vulnerability occurs in the performance perf enable path due to missing calls to cscfgcsdevdisableactiveconfig when branch broadcast is unsupported or hardware enablement fails. This oversight can lead to a leak of...

CVE-2026-90079

A flaw was found in the Linux kernel's octeontx2-af component, responsible for managing mailbox operations in Marvell OCTEON TX2 network devices. This vulnerability arises from improper handling of memory allocation during repeated initialization calls, leading to memory leaks. An attacker could...

CVE-2026-90255

A flaw was found in the Linux kernel's Bluetooth subsystem. Specifically, a resource leak occurs in the handling of Synchronous Connection-Oriented SCO setup contexts. If a setup entry is cancelled, its associated context is not properly released, leading to a memory leak. This issue could also...

CVE-2026-98080

A flaw was found in the Linux kernel's Btrfs file system. This vulnerability allows a local user to cause a Denial of Service DoS by performing snapshot creation and data relocation on a file system with quotas enabled. Due to improper metadata handling during snapshot quota accounting, the kerne...

xalgorix

Xalgorix — Pentester de IA de código abierto que demuestra vulnerabilidades La mayoría de los escáneres detectan. Xalgorix demuestra. Un agente LLM autónomo aplica una metodología completa de pentesting, y luego un verificador independiente reexplotа cada hallazgo antes de que se reporte — así...

CVE-2026-23111

🐧 CVE-2026-23111 - Vulnerabilidad de Use-After-Free en nftables del Kernel de Linux ⚠️ Use-After-Free en nftables del Kernel de Linux 📖 Resumen CVE-2026-23111 es una vulnerabilidad de Use-After-Free UAF de alta gravedad que afecta el subsistema netfilter/nftables del kernel de Linux. La falla se...

ansible-CVE-2024-3094

ansible-CVE-2024-3094 Playbooks de Ansible diseñados para comprobar y remediar CVE-2024-3094 Backdoor XZ. Fueron desarrollados con la guía de https://jfrog.com/blog/xz-backdoor-attack-cve-2024-3094-all-you-need-to-know/. Contexto Ejecutar las comprobaciones para ver si su sistema Linux es...

CVE-2026-89970

A flaw was found in the nvmet-auth component of the Linux kernel. A timing issue during the cleanup of a Submission Queue SQ can lead to a use-after-free vulnerability. This occurs when a delayed authentication task attempts to access memory that has already been released or repurposed. An attack...

stop-bots

Stop Bots A TUI, a web console and a CLI that help you configure your server to stop bad bots without hiding behind a CDN. It works alongside NGINX and your existing firewall nftables or iptables: NGINX config. - It classifies known bots by category scanners, search engines, AI crawlers and block...

uboatdemo

uboatdemo Un servidor de demostración para CVE-2016-3955 UBOAT Realiza un desbordamiento de búfer del heap en Linux, cuando el cliente USB/IP comienza a enviar URBs de control. Compilación El servidor es un programa Go estándar y simple. Puedes compilarlo de la forma habitual asumiendo que tienes...

Important: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

CVE-2018-7273

include include include include include include include include include include static int driveselectorint head return head 2; void fdrecalibrateint fd struct floppyrawcmd rawcmd; int tmp; rawcmd.flags = FDRAWINTR; rawcmd.cmdcount = 2; // set up the command rawcmd.cmdrawcmd.cmdcount++ = 0x07;...

omigood

omigood ¿OM I GOOD? Este repositorio contiene un escáner gratuito para detectar máquinas virtuales vulnerables a una de las vulnerabilidades "OMIGOD" descubiertas por el equipo de investigación de amenazas de Wiz, concretamente CVE-2021-38647. Artículo original del blog de Wiz:...

meshdeck

meshdeck MeshDeck 在 Arch Linux ARM Wilson 上的移植版本 此项目最初移植到了 Arch Linux ARM 的 Wilson 仓库。由于存在重叠且目标相似，Wilson 仓库正在与 ArchAssault 项目 http://www.archassault.org 合并。 所有原始/上游工作由 Dr. Philip Polstra 完成。 摘自其 Sourceforge 页面：http://sourceforge.net/projects/thedeck/ 一个附加模块，允许通过 802.15.4...

CVE-2026-90404

A flaw was found in the Linux kernel. The crosecdebugfs component registers a panic notifier but does not unregister it when the component is removed. This oversight allows a subsequent system panic to attempt to call into the removed instance, leading to access of previously released memory. Suc...

CVE-2026-90364

A flaw was found in the Linux kernel's ACPI Advanced Configuration and Power Interface processor initialization. During the setup process, if certain driver registration or CPU hotplug state configurations fail, a cpufreq notifier may remain improperly registered. This improper resource cleanup c...

CVE-2026-90354

A flaw was found in the Linux kernel's mt76 Wi-Fi driver, specifically in the mt7915 component. The mt7915pciinithif2 function was called unconditionally twice during initialization on non-WED dual-hif hardware. This double initialization led to a leaked device reference, which is a pointer to a...

CVE-2026-90352

A flaw was found in the Linux kernel's wifi: mt76: mt7915 driver. During the probe interrupt IRQ setup, if the pciallocirqvectors or devmrequestirq functions fail, a hif2 reference is not properly released. This oversight results in a resource leak, which could potentially lead to system...

CVE-2026-90318

A flaw was found in the Linux kernel's FAT File Allocation Table filesystem, specifically within the Network File System NFS export path. The fatrebuildparent function fails to release a buffer head after successfully scanning a directory entry. This oversight can lead to a resource leak,...