The vulnerability of the fbcon_do_set_font() function in the drivers/video/fbdev/core/fbcon.c driver for kernel-based graphics buffer devices in the Linux operating system allows a hacker to gain access to protected information or cause service failures.

The vulnerability of the fbcondosetfont function in the drivers/video/fbdev/core/fbcon.c driver for kernel-based graphics buffer devices in the Linux operating system is related to the execution of operations outside of the buffer’s boundaries. Exploiting this vulnerability could allow an attacke...

The vulnerability of the sctp_wait_for_connect() function in the net/sctp/socket.c module of the Linux operating system’s SCTP protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sctpwaitforconnect function in the net/sctp/socket.c module of the Linux operating system’s SCTP protocol implementation is related to the lack of measures taken to neutralize numerous internal special elements. Exploiting this vulnerability can allow an attacker to...

The vulnerability of the opfb_mmap() function in the drivers/video/fbdev/omap2/omapfb/omapfb-main.c driver code of the Linux operating system’s frame buffer device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the oppfbmmap function in the drivers/video/fbdev/omap2/omapfb/omapfb-main.c driver for kernel video devices in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the tlbFlush() function in the arch/arm64/include/asm/tlb.h header of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tlbFlush function in the arch/arm64/include/asm/tlb.h header of the Linux operating system’s kernel is related to the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the a6xx_gpu_init() function in the drivers/gpu/drm/msm/adreno/a6xx_gpu.c file of the Direct Rendering Infrastructure (DRI) driver module in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the a6xxgpuinit function in the drivers/gpu/drm/msm/adreno/a6xxgpu.c file of the Direct Rendering Infrastructure DRI driver module in the Linux operating system is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the vti6_siocdevprivate() function in the net/ipv6/ip6_vti.c module of the IPv6 protocol implementation in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vti6siocdevprivate function in the net/ipv6/ip6vti.c module of the IPv6 protocol implementation in the Linux operating system is related to insufficient spatial separation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the function ieee80211_invoke_fast_rx() in the module net/mac80211/rx.c, part of the mac80211 stack in the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the function ieee80211invokefastrx in the net/mac80211/rx.c module of the mac80211 stack in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the iucv_sock_getsockopt() function in the net/iucv/af_iucv.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iucvsockgetsockopt function in the net/iucv/afiucv.c module, which implements networking functions in the Linux kernel, is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the smc_v2_determine_accepted_chid() function in the net/smc/af_smc.c module of the SMC protocol family in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the smcv2determineacceptedchid function in the net/smc/afsmc.c module of the SMC protocol family in the Linux operating system’s kernel is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the l2tp_session_unhash() function in the net/l2tp/l2tp_core.c module of the Linux operating system’s L2TP tunneling protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the l2tpsessionunhash function in the net/l2tp/l2tpcore.c module of the Linux operating system’s L2TP tunneling protocol implementation is related to the execution of a loop with an unreachable exit condition “Infinite loop”. Exploiting this vulnerability could allow an...

The vulnerability of the sev_dbg_crypt() function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sevdbgcrypt function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...

Linux Distros Unpatched Vulnerability : CVE-2026-80925

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vlan: fix skbunderpanic and races when toggling HW VLAN offload Toggling hardware VLAN TX offload NETIFFHWVLANCTAGTX or NETIFFHWVLANSTAGTX on a lower device...

ALSA-2026:66000 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: pcrypt - Fix handling of MAYBACKLOG requests CVE-2026-43493 kernel: netfilter: conntrack: remove sprintf usage CVE-2026-53002 kernel: netfilter: synproxy: refresh tcphdr after...

o3_finds_cve-2025-37899

basado en Cómo usé o3 para encontrar CVE-2025-37899, una vulnerabilidad de día cero remota en la implementación SMB del kernel de Linux vulnerabilidad objetivo vulnerabilidad de ollama CVE-2024-37032 https://github.com/ollama/ollama/releases/tag/v0.1.34...

LockingGirl-----CVE-2022-0847-Dirty_Pipe_virus

DirtyPipevirus Dirty Pipe es un tipo de exploit de Linux. Su CVE es CVE 2022-0847. Lo usamos para eliminar todos los archivos en tu Ubuntu. Entorno: Ubuntu 20.04 Linux Kernel 5.8 Este es el archivo ova de Ubuntu 20.04:...

CVE-2024-50251-PoC

CVE-2024-50251-PoC Just a local Dos bug in Linux kernel...

cve-2017-16995

CVE-2017-16995 分析报告 本文件夹包含对 CVE-2017-16995（Linux BPF 本地提权漏洞）的逐行源代码分析。 漏洞利用程序和补丁已在内核 4.4.0.116 上测试。 致谢 特别感谢 difengtang 对本分析报告的贡献。 漏洞利用脚本由 @iBearcat 创建，地址为 https://github.com/iBearcat/CVE-2017-16995/blob/master/exploit.c。...

CVE-2022-34918-LPE-PoC

CVE-2022-34918 LPE PoC CVE-2022-34918 の LPE エクスプロイト。 このエクスプロイトはカーネル Linux ubuntu 5.15.0-39-generic 向けに作成されています。 関連する解説記事は当社のブログでご覧いただけます。 使用方法 getroot がカレントフォルダに存在している必要があります root@kitploit: $ ls getroot poc $ ./poc ライセンス Copyright 2022, RandoriSec...

CVE-2026-80863

A flaw was found in the Linux kernel's RDMA/rxe component. A local user could exploit a memory corruption vulnerability in the freerdatomicresources function by updating the maxdestrdatomic value before the old array is properly freed, leading to an out-of-bounds write. This issue can cause a...

CVE-2026-49895

CVE-2026-49895 is an out-of-bounds read in get_eht_operation_channel_width within ieee802_11_common.c, caused by an incorrect bounds check. The flaw resides in Android's Wi-Fi component (Project Mainline) and affects Android 14, 15, and 16 . An attacker in a proximal/adjacent position can exploit...