kernel-sanitizers

Linux Kernel Sanitizers Hinweis: Die meisten Sanitizer werden im Linux-Kernel-Repository gepflegt und hier nicht gehostet. Dieses Repository enthält Out-of-Tree-Informationen und Prototypen für KASAN, UBSAN, KCSAN, KFENCE, KMSAN und KTSAN. Beachten Sie, dass der KMSAN-Code separat gehostet wird...

sctphantom

SCTPhantom — Linux kernel SCTP ASCONF use-after-free tracking site Source for the SCTPhantom patch-status tracker: a single-page site recording which distributions have shipped a fix for the SCTP ASCONF transport use-after-free in the Linux kernel. Where the facts live Everything about the bug —...

CVE-2026-98237

A flaw was found in the Linux kernel's MHI Mobile Broadband Interface Model MBIM driver. This flaw allows a malicious or compromised modem to cause a Denial of Service DoS by sending network frames with cyclic Network Datagram Pointer NDP chains that do not advance. Processing these cyclic...

CVE-2026-98235

A flaw was found in the Linux kernel's network traffic control subsystem. When processing a batched request to delete traffic actions, a failure encountered on an action bound to a filter causes the cleanup process to terminate prematurely without releasing references on subsequent actions. A loc...

CVE-2026-98233

A flaw was found in the Linux kernel's packet socket implementation. An attacker could cause a Denial of Service DoS by transmitting network packets that fail virtual network header processing. When processing encounters an error, the kernel fails to clear the ownership status of the assigned...

CVE-2026-98311

A flaw was found in the Linux kernel's virtwifi driver. A local user can exploit this vulnerability by attempting to create a virtual network interface with an invalid name while the underlying network device is dormant. Due to improper initialization handling, the system prematurely frees memory...

CVE-2026-98236

A flaw was found in the Linux kernel's MHI MBIM Modem Host Interface Mobile Broadband Interface Model driver. When receiving network data, the driver ignores the return value of memory copy operations when extracting datagrams. A compromised or malicious modem can supply crafted datagram offsets...

CVE-2026-98223

A flaw was found in the Linux kernel's memory management component. When dropbehind memory pages are mapped during read-ahead fault operations, the kernel can mistakenly attempt to execute a sleepable operation while running in an atomic, non-preemptible context upon writeback completion. A local...

CVE-2026-98230

A flaw was found in the Linux kernel's IPsec xfrm subsystem. A local attacker can trigger repeated state deletion during cleanup, leading to a use-after-free condition where the kernel attempts to access memory that has already been released. This vulnerability may allow an attacker to achieve...

CVE-2026-98231

A flaw was found in the Linux kernel's IPsec XFRM subsystem. A race condition between device state flushing and background memory cleanup allows kernel memory to be accessed after it has already been freed. A local attacker could exploit this flaw during network device state changes to cause a...

CVE-2026-98229

A flaw was found in the Linux kernel's XFRM IPsec subsystem. During incoming packet processing, certain network receive paths can reset security context information before the system finishes handling the IPsec state. If that state is concurrently deleted, the kernel can dereference freed memory,...

CVE-2026-98225

A flaw was found in the Linux kernel's memory management subsystem. A local attacker can trigger kernel warnings and potentially cause a Denial of Service DoS or system instability when kernel memory accounting is disabled. Under this configuration, memory shrinker identifiers are not properly...

CVE-2026-98228

A flaw was found in the Linux kernel's MIPS architecture support for Mobileye EyeQ platforms. On affected systems, atomic operations lack required memory synchronization barriers, which allows the processor to improperly reorder memory access. A local user can exploit this race condition through...

CVE-2026-98226

A flaw was found in the Linux kernel's swap subsystem. An internal tracking bit overlaps with the active page counter when swap utilization reaches very large capacities, causing the kernel to miscalculate active swap space. A local user capable of allocating enough memory to reach this threshold...

CVE-2022-0847-Linux

CVE-2022-0847 Beschreibung - POC für CVE-2022-0847: Schwachstelle zur lokalen Privilegienausweitung im Linux-Kernel. - erstellt von antx am 2022-03-08. Details - Der Sicherheitsforscher Max Kellermann hat die 'Dirty Pipe'-Schwachstelle verantwortungsvoll offengelegt und erklärt, dass sie den...

CVE_2026_31694

CVE-2026-31694 Passiver Scanner Ein passives Linux-Host-Bewertungstool für CVE-2026-31694 , einen FUSE-readdir-Cache-Out-of-Bounds-Write im Linux-Kernel. Der Scanner bewertet den laufenden Kernel, die FUSE-Exposition, lokale Paketmetadaten, Kernel-Quellbelege, die Ausführungsumgebung und die...

CVE-2019-13272

CVE-2019-13272 - Pkexec Escalation Locale dei Privilegi ⚠️ Solo per scopi educativi e di ricerca di sicurezza autorizzata Autori Originali dell'Exploit Molto grato all'autore originale della PoC BCOLES Descrizione Nel kernel Linux prima della versione 5.1.17, ptracelink in kernel/ptrace.c gestisce...

CVE-2018-1000199

CVE-2018-1000199 Der Linux-ptrace-Code virtualisiert den Zugriff auf die Debug-Register, und der Virtualisierungscode hat eine falsche Fehlerbehandlung. Das bedeutet, dass, wenn Sie einen ungültigen Wert in beispielsweise DR0 schreiben, der interne Zustand der Breakpoint-Verfolgung des Kernels...

linux-4.1.15_CVE-2023-4128

Linux kernel release 4.x http://kernel.org/ Queste sono le note di rilascio per la versione 4 del kernel Linux. Leggetele attentamente, poiché spiegano di cosa si tratta, come installare il kernel e cosa fare se qualcosa va storto. COS'È LINUX? Linux è un clone del sistema operativo Unix, scritto...

linux-4.19.72_CVE-2020-10757

Kernel Linux Esistono diverse guide per sviluppatori e utenti del kernel. Queste guide possono essere generate in vari formati, come HTML e PDF. Si prega di leggere prima Documentation/admin-guide/README.rst. Per costruire la documentazione, utilizzare make htmldocs o make pdfdocs. La...