CVE-2026-80961

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate kset keynum and intra-segment bounds Two more fields decoded from the cache device go unbounded. The kset keynum drives cacheksetcrc and the replay loop in cachereplay, the writeback worker and the GC worker,...

CVE-2026-80952

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix info leak and UAF in device unregister path i3cmasterunregisteri3cdevs clears i3cdev-dev-desc before calling deviceunregister. During deviceunregister, devicedel emits a KOBJREMOVE uevent and unbinds the driver...

CVE-2026-80948

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dvm: fix memory leak in iwlopmodedvmstart In iwlopmodedvmstart, jumping to outfreeeeprom currently bypasses the outfreeeepromblob label. Consequently, error paths triggered after successfully parsing the EEPROM fre...

CVE-2026-80949

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix memory leak in brcmfsdioreadcontrol The memory allocated for buf is not freed in some of the error paths in brcmfsdioreadcontrol. Fix that by adding vfree calls. arend: rework as suggested by Johannes...

CVE-2026-80941

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Fix potential memory leak in rtwtxqpushskb The skb passed to the rtwhcitxwrite is expected to be freed when the function fails, but the error path in rtwtxqpushskb does not free the skb before returning. This can lea...

CVE-2026-80942

In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: rtl8192du: Fix possible memory leak in rtl92duinitswvars The memory allocated inside rtl92duinitshareddata is not freed in any of the subsequent error paths in rtl92duinitswvars. Fix that by adding a call to...

CVE-2026-80940

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: pci: fix resource leak on failed NAPI setup rtwpciprobe allocates PCI resources through rtwpcisetupresource before it sets up NAPI. If rtwpcinapiinit fails, the error path jumps straight to errpcideclaim and skips...

CVE-2026-80934

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix TX DMA mapping leak for AddBA req frames mt7996/mt7992 hand the firmware a HW MAC-TXP for AddBA req action frames MTTXD7MACTXD, set in mt7996macwritetxwi80211, but are otherwise FW-TXP devices. On tx free...

CVE-2026-80927

In the Linux kernel, the following vulnerability has been resolved: timekeeping: Check the return value of tkgetauxts64 in doadjtimex If the auxiliary clock is disabled during tkgetauxts64 but is enabled before tks-clockvalid is checked, then uninitialized stackdata will be used in the calculatio...

CVE-2026-80930

In the Linux kernel, the following vulnerability has been resolved: tpm: tpmi2cnuvoton: disable IRQ on wait timeout i2cnuvotonwaitforstat enables the IRQ before waiting for the interrupt handler to report a status change. If the wait times out, or is interrupted before the handler runs, the...

lykan

lykan Lykan es un programa de análisis de fugas escrito en C que genera gráficos visuales de los datos analizados. Recibe como entradas volcados de texto de contraseñas sin procesar donde las contraseñas están separadas por '\n' y extrae información estadística sobre los volcados, incluyendo las...

x18-leak

x18-leak iOS 11.2 introduced a kernel information leak that could be used to determine the kASLR slide. The issue was the result of a newly added feature, ARMKERNELPROTECT, that inadvertently caused the address of the kernel function Lel0synchronousvector64long to appear in register x18 when...

heartbleedscanner

Heartbleed Scanner 针对 OpenSSL 内存泄漏（CVE-2014-0160）的网络扫描器 -t 参数用于优化超时时间（秒）。 -f 参数用于记录易受攻击系统的内存泄漏。 -n 参数用于扫描整个网络。 -i 参数用于从列表文件进行扫描。如果已有目标列表则很有用。 -r 参数用于随机化 IP 地址以避免线性扫描。 -s 参数用于利用需要明文命令启动 SSL/TLS 的服务（HTTPS/SMTP/POP3/IMAP） 示例用法： 扫描本地 192.168.1.0/24 网络以检测 HB 漏洞（https/443）并将泄漏保存到文件： python...

heartbleedscanner

Heartbleed Scanner Network Scanner for OpenSSL Memory Leak CVE-2014-0160 -t parameter to optimize the timeout in seconds. -f parameter to log the memleak of vulnerable systems. -n parameter to scan entire network. -i parameter to scan from a list file. Useful if you already have targets. -r...

EUVD-2026-76681

In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhpsetupstate error path When cpuhpsetupstate fails after pitclockeventpercpuinit has successfully called requestirq, the error handling jumps directly to outpitclocksourceunregister...

CVE-2026-89769 clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path

In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhpsetupstate error path When cpuhpsetupstate fails after pitclockeventpercpuinit has successfully called requestirq, the error handling jumps directly to outpitclocksourceunregister...

CVE-2026-89769

CVE-2026-89769 affects the NXP PIT clocksource driver in the Linux kernel. When cpuhp_setup_state fails after pit_clockevent_per_cpu_init has successfully registered an IRQ via request_irq , the error path skips releasing that IRQ and jumps directly to unregistering the clocksource. Since kfree(p...

CVE-2026-89765 timers/itimer: Zero-init old itimerval before copy to userspace

In the Linux kernel, the following vulnerability has been resolved: timers/itimer: Zero-init old itimerval before copy to userspace On native sparc64, struct kerneloldtimeval contains a four-byte hole after tvusec because tvsec is 64-bit while kernelsusecondst is 32-bit. putitimerval fills only t...

EUVD-2026-76677

In the Linux kernel, the following vulnerability has been resolved: timers/itimer: Zero-init old itimerval before copy to userspace On native sparc64, struct kerneloldtimeval contains a four-byte hole after tvusec because tvsec is 64-bit while kernelsusecondst is 32-bit. putitimerval fills only t...

CVE-2026-89765

CVE-2026-89765 is a Linux kernel information disclosure vulnerability in the timers/itimer subsystem. On native sparc64 , the __kernel_old_timeval struct contains a four-byte alignment hole after tv_usec (because tv_sec is 64-bit while __kernel_suseconds_t is 32-bit). The put_itimerval() function...