336036 matches found
CVE-2026-98352
A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA Transport client driver. A race condition occurs when a connection setup attempt is interrupted during teardown, causing shared Completion Queue CQ resources to be retained without being released. This flaw may allow an...
CVE-2026-98351
A flaw was found in the Linux kernel's virtual Wi-Fi virtwifi driver. This issue can result in a Denial of Service DoS due to an unreleased memory leak. When a simulated wireless link is disconnected, the driver fails to free packet buffers after dropping outgoing network packets. A local user ca...
CVE-2022-2588
CVE-2022-2588 The fix The bug is fixed in Linux v5.19 by this commit. The bug The bug was introduced in Linux v3.17 by this commit back to 2014. It requires User Namespaces to trigger. This bug is very similar to CVE-2021-3715, which was caused by improper operation on the route4filter's linked...
CVE-2026-98350
A flaw was found in the Linux kernel's Broadcom FullMAC brcmfmac wireless driver. During external Wi-Fi authentication, an uninitialized data structure can leak sensitive kernel stack memory directly to the device firmware when processing short network names or key identifiers. A local user or an...
CVE-2026-98349
A flaw was found in the Linux kernel's libipw wireless module. A remote attacker within Wi-Fi range can exploit this vulnerability by transmitting specially crafted, undersized Wi-Fi beacon or probe response frames. Due to an improper frame length calculation, the driver reads beyond allocated...
CVE-2026-98348
A flaw was found in the Linux kernel's libipw wireless driver. An attacker within Wi-Fi range can exploit this flaw by transmitting a malformed, abnormally short association response frame. Due to an improper packet length calculation, the driver performs an out-of-bounds memory read, which can...
CVE-2026-98347
A flaw was found in the Linux kernel's IP over InfiniBand IPoIB driver. A local user with administrative privileges can cause a Denial of Service DoS by triggering a race condition between interface shutdown and multicast flush operations. This timing conflict leaves the interface marked as activ...
CVE-2026-98346
A flaw was found in the Linux kernel's wireless configuration subsystem cfg80211. When calculating beacon interval data, the system attempts to retrieve radio mask information for wireless devices that lack an associated network interface without proper validation. A local attacker can exploit th...
Linux-4.19.72_CVE-2020-24490
Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...
CVE-2026-98345
A flaw was found in the Linux kernel's cfg80211 wireless subsystem. A local attacker can cause a Denial of Service DoS by transmitting crafted network frames that appear to be Internet Protocol IP traffic. Because the kernel fails to verify that the frame is large enough to hold a complete header...
CVE-2026-98344
A flaw was found in the Linux kernel's DMA Direct Memory Access engine subsystem. This vulnerability can lead to a Denial of Service DoS when a local user triggers concurrent channel acquisition and release operations. Because the dmachanput function unconditionally decrements device reference...
linux-4.19.72_CVE-2020-14381
Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...
CVE-2019-2215
CVE-2019-2215 Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1942 https://bugs.chromium.org/p/project-zero/issues/attachmentText?aid=414885 Samsung S7 and S7 Edge with Kernel 3.18.x seem not vulnerable could be however, with more work with PoC adjustments. Could not see more,...
libput_user_exploit
ATTENZIONE !!! Questo exploit scrive più 3 byte con zero. Ma è abbastanza per installare il gestore ptmx.fsync e modificare la stringa ueventhelper...
cve-2017-8890-msf
Module: Phoenix Talon CVE 2017-8890 This may resolve issue 8571, which requests Phoenix Talon modules. Overview of 2017-8890 This CVE: is the most serious member of the Phoenix Talon class of Linux kernel vulnerabilities. No POC of this CVE exists in the Exploit DB. But other public POC's are...
CVE-2022-0847
Información Exploit Title: Local Privilege Escalation in Linux kernel CVE-2022-0847 Tested on: ubuntu 20.04.1 LTS Affect product:Linux kernel 5.8 or later Fixed Product:Linux kernel 5.16.11, 5.15.25, 5.10.102 CVE ID: CVE-2022-0847 Cómo explotar Escalada de privilegios local gcc exploit.c -o explo...
linux-4.19.72_CVE-2020-29370
Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...
CVE-2026-98343
A flaw was found in the Linux kernel. A local user can exploit a use-after-free vulnerability in the Direct Memory Access DMA engine to cause a Denial of Service DoS via a system crash. The issue occurs when the channel cleanup routine attempts to access device information after the underlying...
CVE-2026-98342
A flaw was found in the Linux kernel's Direct Memory Access DMA engine subsystem. A timing flaw allows a device structure to be freed from memory while active read operations are still referencing it. A local attacker could exploit this use-after-free race condition to cause a Denial of Service D...
CVE-2026-98341
A flaw was found in the Linux kernel's cfg80211 wireless subsystem. When a wireless network interface is shut down while an active scan is running, the kernel prematurely frees memory associated with the scan request while the driver is still accessing it. A local user could exploit this race...