CVE-2026-74736 net/sched: cls_bpf: reject dev-bound programs bound to a different device

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsbpf: reject dev-bound programs bound to a different device clsbpfprogfromefd obtained a SCHEDCLS program via bpfproggettypedev but never verified that a device-bound offloaded program's bound netdev matches the TC...

CVE-2026-74735

CVE-2026-74735 affects the Linux kernel's L2TP (Layer 2 Tunneling Protocol) implementation. In pppol2tp_proc_open() and l2tp_dfs_seq_open(), iteration state (pd->tunnel and pd->session) is stored in seq_file private data to support multi-read() iteration. If a local user closes /proc/net/pp...

CVE-2026-74736 net/sched: cls_bpf: reject dev-bound programs bound to a different device

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsbpf: reject dev-bound programs bound to a different device clsbpfprogfromefd obtained a SCHEDCLS program via bpfproggettypedev but never verified that a device-bound offloaded program's bound netdev matches the TC...

CVE-2026-74736

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsbpf: reject dev-bound programs bound to a different device clsbpfprogfromefd obtained a SCHEDCLS program via bpfproggettypedev but never verified that a device-bound offloaded program's bound netdev matches the TC...

CVE-2026-74735

In the Linux kernel, the following vulnerability has been resolved: l2tp: fix tunnel and session refcount leak on seqfile release In pppol2tpprocopen and l2tpdfsseqopen, iteration state pd-tunnel and pd-session is kept in seqfile private data to allow iteration across multiple read system calls...

CVE-2026-74734 firewire: ohci: fix NULL pointer dereference in ar_context_release

In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: fix NULL pointer dereference in arcontextrelease During the error handling path of the driver's probe function, a NULL pointer dereference can occur in arcontextrelease. When pciprobe fails early e.g., if...

CVE-2026-74734

In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: fix NULL pointer dereference in arcontextrelease During the error handling path of the driver's probe function, a NULL pointer dereference can occur in arcontextrelease. When pciprobe fails early e.g., if...

CVE-2026-74734

A NULL pointer dereference in the Linux kernel's firewire/ohci driver can crash the kernel. During early probe failure (e.g., pcim_enable_device() or MMIO mapping failure), the devres cleanup calls ar_context_release(), which dereferences ctx->ohci before verifying the context was ever initial...

EUVD-2026-66557

The IEEE 1588 PTP management-message parser in subsys/net/lib/ptp/tlv.c mishandles the PTPMGMTTIME management id. In tlvmgmtpostrecv, the PTPMGMTTIME case casts mgmttlv-data to a 10-byte struct ptptimestamp and reads it then byte-swaps and writes it back without first checking that the TLV data...

nmap-farewell

nmap-farewell Dieses Tool soll die Fähigkeiten der nfnetlinkqueue-Funktion des Linux-Kernels demonstrieren. Für detailliertere Informationen kannst du diesen Artikel lesen. Bevor Pakete vom Kernel verworfen werden, werden sie zur weiteren Verarbeitung an dieses Tool gesendet. Wenn ein entfernter...

CVE-2022-0847-dirty-pipe-kernel-checker

CVE-2022-0847-dirty-pipe-kernel-checker Script Python para verificar se seu kernel é vulnerável ao Dirty pipe CVE-2022-0847 Você pode executar o script diretamente em seu sistema e ele encontrará sua versão do kernel Mas você pode executar o script com um argumento de versão do kernel para...

Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1255616. CVE-2026-23204: net: add skbheaderpointercareful helper bsc1258340. CVE-2026-52986: netfilter:...

Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes various security issues: The following security issues were fixed: CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length...

CVE-2017-16995

CVE-2017-16995 CVE-ID: CVE-2017-16995 Veröffentlichungsdatum: 2017-12-27T17:08:17.670 Basis-Score CVSS 3.0/3.1: 7.8 Beschreibung: Die Funktion checkaluop in kernel/bpf/verifier.c im Linux-Kernel bis Version 4.4 ermöglicht es lokalen Benutzern, einen Denial-of-Service Speicherkorruption zu...

CVE-2026-31431-Metasploit-exploit

CVE-2026-31431 - Kernel Linux AFALG "Copy Fail" Escalation Locale dei Privilegi Un modulo Metasploit Post-Exploitation automatizzato che sfrutta CVE-2026-31431 noto anche come "Copy Fail" per eseguire un'Escalation Locale dei Privilegi LPE su kernel Linux vulnerabili versioni da 4.14 a 6.19.12...

CVE-2026-23111

🐧 CVE-2026-23111 - Linux-Kernel nftables Use-After-Free-Schwachstelle ⚠️ Use-After-Free im Linux-Kernel nftables 📖 Übersicht CVE-2026-23111 ist eine hochkritische Use-After-Free UAF -Schwachstelle, die das netfilter/nftables -Subsystem des Linux-Kernels betrifft. Der Fehler entsteht durch eine...

CVE-2017-0541

PoC e analisi della vulnerabilità CVE-2017-0541...

linux

.. include:: ../disclaimer-ita.rst :Original: :ref:Documentation/admin-guide/README.rst .. itreadme: Rilascio del kernel Linux 6.x http://kernel.org/ .. warning:: root@kitploit: TODO ancora da tradurre...

CVE-2016-5195

CVE-2016-5195 DirtyCOW PoC Modificado de dirtycow.github.ioc include include include include include include include include void map; int f; struct stat st; char name; void madviseThreadvoid arg char str; str = chararg; int i, c = 0; fori = 0; i flag.txt chmod 0404 flag.txt...

CVE-2025-38001

CVE-2025-38001 Dramma della Famiglia RBTree Linux HFSC Eltree Use-After-Free - Proof of Concept per Debian 12 Questo PoC sfrutta un attacco a livello di pagina basato solo sui dati, utilizzando trasformazioni RBTree per compromettere il sistema. L'exploit è portabile e funziona su tutte le istanz...