CVE-2026-80974

A flaw was found in the mfd: sm501 component of the Linux kernel. This vulnerability arises from a failure to properly free allocated memory for struct sm501devdata during the device removal process. A local attacker could potentially exploit this memory leak, which may lead to a denial of servic...

hive

From WikiLeaks: Today, 9 November 2017, WikiLeaks publishes the source code and development logs to Hive, a major component of the CIA infrastructure to control its malware. Hive solves a critical problem for the malware operators at the CIA. Even the most sophisticated malware implant on a targe...

CVE-2026-81018

A flaw was found in the Linux kernel's think-lmi driver. When the driver is removed, the system authentication object fails to free stored certificate signatures, leading to a memory leak. This can result in system instability or denial of service over time due to resource exhaustion...

CVE-2026-89715

A flaw was found in the Linux kernel's NFS/localio component. A race condition during file handling can lead to a reference leak, where system resources are not properly released. This continuous accumulation of unreleased references can exhaust available resources, preventing network namespace...

CVE-2026-89707

A flaw was found in the Linux kernel's nfsd component. An authenticated Network File System NFS client can exploit this vulnerability by triggering a failed cross-mount operation through nfsdlookupdentry or the NFSv4 READDIR encode path. This leads to a reference count leak, which inflates mntcou...

CVE-2026-89637

A flaw was found in the Linux kernel's Server Message Block SMB client. When processing a malformed secondary TRANSACT2 response, a use-after-free UAF vulnerability and a buffer leak can occur in the cifschecktrans2 function. This can lead to a dangling buffer being reused by the demux thread,...

CVE-2026-80942

A flaw was found in the Linux kernel's rtlwifi driver for rtl8192du. Specifically, a memory allocation made during the initialization of shared data was not consistently freed in error handling paths. This could result in a memory leak, potentially leading to system instability or a Denial of...

CVE-2026-80949

A flaw was found in the Linux kernel's brcmfmac Wi-Fi driver. The memory allocated for a buffer is not properly released in certain error handling paths within the brcmfsdioreadcontrol function. This improper memory management can lead to a memory leak, potentially causing system instability or a...

CVE-2026-89735

A flaw was found in the Linux kernel's USB gadget MIDI2 driver. The driver fails to properly remove default configuration file system configfs groups during teardown, leading to a resource leak. A local attacker could exploit this vulnerability to cause memory exhaustion, potentially resulting in...

CVE-2026-89681

A flaw was found in the Linux kernel's nfsd component. A race condition in the layout fence worker can cause a double-reference to a layout stateid. This occurs because the workqueue core clears a pending flag prematurely, allowing a new worker to be scheduled while another is still active. The...

CVE-2026-89531

A flaw was found in the Linux kernel's svcrdma module. A remote attacker can exploit this vulnerability by repeatedly attempting connections when the system is under memory pressure. This can lead to a resource leak of rdmacmid objects, which, if amplified, could result in a Denial of Service DoS...

CVE-2026-89691

A flaw was found in the Linux kernel's Network File System Daemon nfsd component. The nfsd4releasecompoundargs function does not properly clear an internal counter opcnt when releasing a buffer. This oversight can lead to an out-of-bounds read, allowing an attacker to access adjacent memory and...

CVE-2026-89437

A flaw was found in the Linux kernel. The sarprobe function, specifically in its error handling paths, fails to free memory allocated for devicemodeinfo by the parsepackage function, which is called by sargetdata. This oversight leads to a memory leak. Repeated occurrences of this flaw could...

CVE-2026-80940

A flaw was found in the Linux kernel's rtw88 PCI driver. During the probe process, if the NAPI Networked Attached Peripheral Interface setup fails, allocated PCI resources are not properly released. This resource leak could potentially lead to a Denial of Service DoS due to resource exhaustion,...

iOS26.6-CVE-2026-65343

CVE-2026-65343 — AppleKeyStore OOB Read KASLR Defeat Component: AppleKeyStore kernel extension — LibSerSEPControlDeserialize Affected: iOS / iPadOS 26.6 23G71 and earlier Fixed in: iOS / iPadOS 26.6.1 23G83 Type: Out-of-Bounds read in SEP control message deserialization Impact: Kernel pointer lea...

Project-Field-Analysis-and-Memory-Leak-Demonstration

Objective The objective of this project was to assess a remote host for the Heartbleed vulnerability CVE-2014-0160, verify its presence, and exploit it to extract potentially sensitive information from server memory over the TLS protocol. Execution 1. Identifying Open Services Nmap nmap -sC -sV...

CVE-2026-89673

A flaw was found in the Linux kernel's NFS daemon nfsd. A remote attacker could exploit an error in the XDR External Data Representation padding calculation within the ffencodegetdeviceinfo function. This mismatch between reserved and actual data size leads to the leakage of stale reply-page...

CVE-2026-89683

A flaw was found in the Linux kernel's nfsd NFS daemon. A remote attacker could exploit this vulnerability by sending a specially crafted NFSv3 filehandle targeting a V4ROOT export's file system identifier fsid. This action triggers a dentry reference leak, which can lead to resource exhaustion a...

CVE-2026-89680

A flaw was found in the Linux kernel's nfsd component. This vulnerability occurs when an inter-server COPY operation fails during its setup phase, leading to improper resource cleanup. Consequently, each failed operation results in a memory leak, consuming system resources. A remote attacker coul...

CVE-2026-89714

A flaw was found in the Linux kernel's Network File System NFS component. When an NFSv4 mount attempt fails, the nfs4servercommonsetup function does not properly free a memory allocation for the delegation hash table. A client that persistently retries a failed mount can exploit this to cause an...