CVE-2026-90139

A flaw was found in the Linux kernel's Filesystem in Userspace FUSE subsystem. When the fuseiget function fails to allocate an inode, such as under memory pressure, the subsequent fusefillsupersubmount function does not properly handle the returned null value. This oversight can lead to a null...

CVE-2026-90129

A flaw was found in the virtioballoon component of the Linux kernel. During device shutdown, the virtioballoon component fails to properly stop its asynchronous operations. This can lead to a system crash kernel panic if the paniconwarn setting is enabled, or cause the system to become unresponsi...

CVE-2026-90109

A flaw was found in the Linux kernel. A local attacker with root privileges could exploit a 32-bit integer overflow vulnerability in the networking scheduler's gred, bfifo, and plug enqueue functions. This occurs when the queue backlog, stored as a 32-bit integer, exceeds 4 Gigabytes GiB. The...

CVE-2026-90086

A flaw was found in the Linux kernel's xsk AFXDP subsystem. The zero-copy path incorrectly reads transmit TX metadata even when the XDPTXMETADATA option is not explicitly set. This can lead to the metadata union being overwritten with an unrequested timestamp, potentially causing data integrity...

CVE-2026-90095

A flaw was found in the Linux kernel's FUSE Filesystem in Userspace component. This vulnerability occurs when the FUSEOVERIOURING flag is not correctly handled during the initialization of a FUSE connection. A local attacker or a malicious FUSE server could exploit this by sending IORINGOPURINGCM...

CVE-2026-90085

A flaw was found in the Linux kernel's octeontx2-af driver. The rvudbgnixtmtreedisplay function, responsible for displaying NIX TM tree debug information, attempts to dereference a pointer without verifying if the associated context has been allocated. A local attacker can trigger a kernel crash...

CVE-2026-90084

A flaw was found in the Linux kernel's octeontx2-vf driver. A race condition exists during the network device's probe and removal process, which can cause the system to attempt to queue work on an uninitialized workqueue. This issue can result in a system crash, leading to a denial of service...

CVE-2026-90082

A flaw was found in the mana network driver within the Linux kernel. This vulnerability occurs because the driver incorrectly calculates the number of Message Signaled Interrupts MSI-X vectors, leading to an out-of-bounds write. A local attacker, by operating a specially crafted virtual machine,...

CVE-2026-90080

A flaw was found in the Linux kernel's octeontx2-pf driver. When switching to devlink eswitch mode, a null pointer dereference can occur in the afxdpzcqidx handling. This issue arises because the afxdpzcqidx pointer, which tracks receive queues, is not properly initialized in certain non-AFXDP...

CVE-2026-90072

A flaw was found in the Linux kernel. A local user with CAPNETADMIN privileges in a user namespace can configure a network device with an excessively large Maximum Transmission Unit MTU. This leads to a signed integer overflow when the kernel's sfqinit function calculates a quantum value. This...

CVE-2026-46300-Fragnesia---TryHackMe-Lab-Project

CVE-2026-46300-Fragnesia---TryHackMe-Lab-Project The project documents the completion and analysis of the Fragnesia CVE-2026-46300 TryHackME lab, which demonstrates a Linux kernel page -cache corruption vulnerability capable of achieving local privilege escalation through modification of cached...

CVE-2026-90078

A flaw was found in the Linux kernel's network scheduler component, actskbmod. Incorrect length calculations when processing network packets can lead to an underflowed length value or cause the system to drop valid short packets. This vulnerability could allow a remote attacker to cause a Denial ...

CVE-2026-90070

A flaw was found in the Linux kernel's Trusted Platform Module TPM driver for the ST33ZP24 chip. The st33zp24status function does not correctly handle errors when reading data from the I2C transport. This can result in uninitialized data being interpreted as valid TPM status flags, leading to...

CVE-2026-90067

A flaw was found in the Linux kernel's libceph component. A remote attacker could exploit this by sending a specially crafted Ceph messenger v2 protocol banner with a zero-length payload. This malformed banner causes the kernel to attempt a zero-length socket read, which violates internal state...

CVE-2026-90066

A flaw was found in the Linux kernel's ftrace module. This vulnerability occurs because the ftracedirectmultiinit function does not properly check the return value of kthreadrun. If kthreadrun fails, an error pointer is assigned, which is later passed to kthreadstop during module unload. This...

CVE-2026-90064

A flaw was found in the Linux kernel. Specifically, within the drm/xe driver, a vulnerability exists where a virtual machine VM not configured for fault handling attempts to process a page fault on an already valid virtual memory area VMA. This can lead to the Graphics Processing Unit GPU enterin...

CVE-2026-90062

A flaw was found in the Linux kernel's netfilter subsystem, specifically within the nftables component. This vulnerability occurs because the hardware offload step for network filtering rules is performed before the complete set of rules chain blob is built. This timing issue can lead to an...

CVE-2026-90060

A flaw was found in the Linux kernel's ALSA control module. A local user could create a write-only kcontrol element without a get callback. This could lead to a null pointer dereference in the LED layer, causing a system crash and resulting in a denial of service...

CVE-2026-90058

A flaw was found in the Linux kernel's networking scheduler net/sched. A local unprivileged user with CAPNETADMIN capabilities within a user namespace could provide a crafted size table to a deficit scheduler, such as DRR or ETS, with a small quantum. This manipulation can cause the scheduler to...

ProyectoFinalSO

Final Project — Operating Systems 2026-2 Author: Reyna Mendez Cristian Ignacio Requirements GitHub account with access to GitHub Codespaces Approximately 10 GB of free space in the Codespace kernel compilation Approximately 20 minutes to compile Step 1 — Clone and open in Codespaces git clone...