337150 matches found
CVE-2026-98229
A flaw was found in the Linux kernel's XFRM IPsec subsystem. During incoming packet processing, certain network receive paths can reset security context information before the system finishes handling the IPsec state. If that state is concurrently deleted, the kernel can dereference freed memory,...
CVE-2026-98225
A flaw was found in the Linux kernel's memory management subsystem. A local attacker can trigger kernel warnings and potentially cause a Denial of Service DoS or system instability when kernel memory accounting is disabled. Under this configuration, memory shrinker identifiers are not properly...
CVE-2026-98228
A flaw was found in the Linux kernel's MIPS architecture support for Mobileye EyeQ platforms. On affected systems, atomic operations lack required memory synchronization barriers, which allows the processor to improperly reorder memory access. A local user can exploit this race condition through...
CVE-2026-98226
A flaw was found in the Linux kernel's swap subsystem. An internal tracking bit overlaps with the active page counter when swap utilization reaches very large capacities, causing the kernel to miscalculate active swap space. A local user capable of allocating enough memory to reach this threshold...
CVE-2022-0847-Linux
CVE-2022-0847 Description - POC for CVE-2022-0847: Linux Kernel Local Privilege Escalation Vulnerability. - create by antx at 2022-03-08. Detail - Security researcher Max Kellermann responsibly disclosed the 'Dirty Pipe' vulnerability and stated that it affects Linux Kernel 5.8 and later...
CVE_2026_31694
CVE-2026-31694 Passive Scanner A passive Linux host assessment tool for CVE-2026-31694 , a FUSE readdir-cache out-of-bounds write in the Linux kernel. The scanner evaluates the running kernel, FUSE exposure, local package metadata, kernel source evidence, execution environment, and operating-syst...
Security Bulletin: Multiple vulnerabilities in IBM Cloud Pak System
Summary Multiple vulnerabilities were found in linux kernel, libssh expat, libssh, openSSL in Platform System Manager PSM OS Image for Red Hat Enterprise Linux v8 shipped with IBM Cloud Pak System. Those vulnerabilities were addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details...
CVE-2026-98332
A flaw was found in the Linux kernel's mac80211 wireless subsystem. The Tunneled Direct Link Setup TDLS code fails to verify whether a station is a direct-link peer rather than an access point before executing TDLS operations. A local attacker can exploit this flaw to cause inconsistent kernel...
CVE-2026-98221
A flaw was found in the Linux kernel's trusted keys subsystem. A local user can exploit this vulnerability by submitting a specially crafted trusted key payload. Because the kernel validates boundaries against the encoded data length rather than the decoded buffer size, an out-of-bounds memory re...
CVE-2026-98218
A flaw was found in the Linux kernel's I2C Address Translator ATR component. When an adapter fails to register, the driver frees the channel memory without clearing its reference pointer, leaving a dangling pointer. A local user could exploit this flaw during cleanup routines to trigger a...
CVE-2026-98217
A flaw was found in the Linux kernel's mlx4 InfiniBand driver that can result in a Denial of Service DoS. When device registration encounters an error during setup, the driver frees memory objects associated with partition key interfaces but retains their references. A subsequent device cleanup...
CVE-2026-98222
A flaw was found in the Linux kernel's encrypted keys subsystem. An integer overflow occurs during memory size calculations for key data, resulting in an undersized buffer allocation. A local user can exploit this issue by supplying crafted key data to trigger an out-of-bounds write to kernel...
RLSA-2026:77690 Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipvlan: Make the addrslock be per port CVE-2026-23103 kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use CVE-2026-53360 kernel: vsock/virtio: fix zerocopy completion for...
RLSA-2026:77689 Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipvlan: Make the addrslock be per port CVE-2026-23103 kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use CVE-2026-53360 kernel: vsock/virtio: fix zerocopy completion for...
USN-8911-1: Linux kernel (OEM) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Hardware crypto device drivers; - NVIDIA Tegra memory controller driver; - Network drivers; - USB core drivers; -...
USN-8911-1 linux-oem-6.17 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Hardware crypto device drivers; - NVIDIA Tegra memory controller driver; - Network drivers; - USB core drivers; -...
cve-2026-31431
CVE-2026-31431 — Copy Fail: Linux Kernel LPE Research Lab Educational purposes only. Do NOT use on systems without explicit authorization. Index Description of the vulnerability Affected components How it works Lab setup Docker PoC — Demonstration Mitigation References Vulnerability Description...
CVE-2026-98373
A flaw was found in the Linux kernel's HugeTLB huge memory page subsystem. A local attacker can exploit this vulnerability to cause a Denial of Service DoS by triggering a system crash. The issue occurs during memory remapping operations when the kernel incorrectly calculates destination addresse...
CVE-2026-98238
A flaw was found in the Linux kernel's t7xx Wireless Wide Area Network WWAN driver. This vulnerability allows an attacker to cause a Denial of Service DoS by sending malformed network packets. The driver fails to validate the network interface index in incoming packet headers before indexing an...
CVE-2026-98212
A flaw was found in the Linux kernel's MultiMediaCard MMC host software queue. A local user could exploit a use-after-free vulnerability when pending retry operations are not cancelled before device removal, allowing tasks to access memory after it has been released. This issue can lead to a Deni...