CVE-2026-89681

A flaw was found in the Linux kernel's nfsd component. A race condition in the layout fence worker can cause a double-reference to a layout stateid. This occurs because the workqueue core clears a pending flag prematurely, allowing a new worker to be scheduled while another is still active. The...

CVE-2026-89531

A flaw was found in the Linux kernel's svcrdma module. A remote attacker can exploit this vulnerability by repeatedly attempting connections when the system is under memory pressure. This can lead to a resource leak of rdmacmid objects, which, if amplified, could result in a Denial of Service DoS...

CVE-2026-89691

A flaw was found in the Linux kernel's Network File System Daemon nfsd component. The nfsd4releasecompoundargs function does not properly clear an internal counter opcnt when releasing a buffer. This oversight can lead to an out-of-bounds read, allowing an attacker to access adjacent memory and...

CVE-2026-89437

A flaw was found in the Linux kernel. The sarprobe function, specifically in its error handling paths, fails to free memory allocated for devicemodeinfo by the parsepackage function, which is called by sargetdata. This oversight leads to a memory leak. Repeated occurrences of this flaw could...

CVE-2026-80940

A flaw was found in the Linux kernel's rtw88 PCI driver. During the probe process, if the NAPI Networked Attached Peripheral Interface setup fails, allocated PCI resources are not properly released. This resource leak could potentially lead to a Denial of Service DoS due to resource exhaustion,...

iOS26.6-CVE-2026-65343

CVE-2026-65343 — AppleKeyStore 領域外読み取り（KASLR 無効化） コンポーネント: AppleKeyStore カーネル拡張 — LibSerSEPControlDeserialize 影響を受けるバージョン: iOS / iPadOS 26.6 23G71 以前 修正バージョン: iOS / iPadOS 26.6.1 23G83 種別: SEP 制御メッセージ逆シリアル化における領域外読み取り 影響: カーネルポインタ漏洩 → サンドボックス化された権限不要プロセスからの KASLR 無効化（DYLDINTERPOSE ACM ハンドル取得経由）...

Project-Field-Analysis-and-Memory-Leak-Demonstration

目的 このプロジェクトの目的は、リモートホストのHeartbleed脆弱性（CVE-2014-0160）を評価し、その存在を確認し、TLSプロトコルを介してサーバーメモリから潜在的に機密性の高い情報を抽出するために悪用することでした。 実行 1. オープンサービスの特定（Nmap） root@kitploit: nmap -sC -sV 52.215.184.158 結果: root@kitploit: PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 7.4 111/tcp open rpcbind 2-4 443/tcp open...

CVE-2026-89673

A flaw was found in the Linux kernel's NFS daemon nfsd. A remote attacker could exploit an error in the XDR External Data Representation padding calculation within the ffencodegetdeviceinfo function. This mismatch between reserved and actual data size leads to the leakage of stale reply-page...

CVE-2026-89683

A flaw was found in the Linux kernel's nfsd NFS daemon. A remote attacker could exploit this vulnerability by sending a specially crafted NFSv3 filehandle targeting a V4ROOT export's file system identifier fsid. This action triggers a dentry reference leak, which can lead to resource exhaustion a...

CVE-2026-89680

A flaw was found in the Linux kernel's nfsd component. This vulnerability occurs when an inter-server COPY operation fails during its setup phase, leading to improper resource cleanup. Consequently, each failed operation results in a memory leak, consuming system resources. A remote attacker coul...

CVE-2026-89714

A flaw was found in the Linux kernel's Network File System NFS component. When an NFSv4 mount attempt fails, the nfs4servercommonsetup function does not properly free a memory allocation for the delegation hash table. A client that persistently retries a failed mount can exploit this to cause an...

CVE-2026-89576

A flaw was found in the Linux kernel's device-mapper era dm-era component. When a snapshot operation fails, a block of metadata is allocated but not properly freed. This leads to a permanent leak of system resources with each failed attempt. Over time, this resource exhaustion can result in a...

CVE-2026-89597

A flaw was found in the uvesafb component of the Linux kernel. During the initialization process, if the platform driver fails to register, a connector callback is not properly unregistered. This oversight can lead to a resource leak, which may result in system instability or a denial of service...

CVE-2026-89520

A flaw was found in the Linux kernel's core scheduling component. A race condition can occur when core scheduling flips complete during task selection, leading to incorrect lock handling. This can result in a resource leak and system instability, potentially causing a denial of service...

CVE-2026-89454

A flaw was found in the Linux kernel's PCI PLDA driver. This vulnerability occurs in the pldainitinterrupts function, where Interrupt Request IRQ domains are not properly deinitialized if certain initialization steps fail. A local attacker could potentially exploit this resource leak, leading to...

CVE-2026-89449

A flaw was found in the Linux kernel's Input-Output Memory Management Unit IOMMU subsystem. When a device addition fails during the iommumockdeviceadd operation, the allocated device IOMMU structure is not properly deallocated. This oversight leads to a memory leak, which over time could be...

CVE-2026-89473

A flaw was found in the Linux kernel's bq25890 power supply driver. The bq25890fwprobe function acquires a reference to a secondary charger but fails to release it on subsequent probe failures or driver detach. This reference leak can lead to resource exhaustion over time, potentially allowing a...

CVE-2026-80988

A flaw was found in the Linux kernel's Non-Transparent Bridge NTB transport module. When the NTB transport attempts to transmit packets while the Queue Pair QP link is down, the system incorrectly reports a successful transmission without properly consuming the packet. This oversight leads to a...

CVE-2026-80948

A flaw was found in the Linux kernel's iwlwifi driver. An error handling issue within the iwlopmodedvmstart function can cause a memory leak. This occurs when certain error paths bypass a memory deallocation step, leading to unreleased memory. This vulnerability could potentially lead to system...

CVE-2026-81015

A flaw was found in the Linux kernel's AMD PMC Power Management Controller driver. When the amdstbs2dinit function fails during the driver's initialization process, it can lead to unreleased resources, specifically the LPS0 s2idle handler and debugfs directory. This resource leak can corrupt...