CVE-2026-98248

A flaw was found in the Linux kernel's arm64 per-CPU memory operations. When performing atomic operations on 8-bit and 16-bit variables using Large System Extensions LSE, the assembly instructions fail to specify the proper size suffix, erroneously reading and writing 32 bits of memory. A local...

CVE-2026-98247

A flaw was found in the Linux kernel's Bluetooth subsystem. When processing responses for supported codecs, the parser fails to verify that adequate buffer space remains before reading the vendor codec count. A malicious or malfunctioning Bluetooth controller can supply a truncated response packe...

CVE-2026-98246

A flaw was found in the Linux kernel's Bluetooth subsystem. A race condition during Bluetooth device closure allows codec list cleanup to proceed without appropriate locking while a concurrent socket option query is reading codec entries. A local user can exploit this vulnerability to trigger a...

CVE-2026-98245

A flaw was found in the Linux kernel's Btrfs file system. A local user could exploit this vulnerability to cause a Denial of Service DoS or potentially escalate privileges. The issue occurs due to missing synchronization during device replacement operations, where a concurrent transaction commit...

CVE-2026-98244

A flaw was found in the Linux kernel's Btrfs file system. When an error occurs while rebuilding the free space tree, the kernel fails to properly reset an internal state flag on failure paths. A local user could exploit this condition during filesystem operations, leaving the flag set on an activ...

CVE-2026-98250

A flaw was found in the Linux kernel's Network File System daemon nfsd. When configuring file exports through the Netlink interface, nfsd attempts to initialize parallel NFS pNFS layouts without verifying that pNFS is enabled for the export. A privileged local user managing NFS exports could...

CVE-2026-98310

A flaw was found in the Linux kernel's Intel Xe graphics driver. A local user can cause a Denial of Service DoS by triggering memory reclaim operations while the device is in a runtime-suspended state. This issue occurs because the driver's memory shrinker does not acquire a runtime power...

kernelpop

kernelpop kernelpop es un marco de trabajo para realizar enumeración y explotación automatizada de vulnerabilidades del kernel en los siguientes sistemas operativos: Linux Mac Está diseñado para ser python-agnóstico en cuanto a versión, lo que significa que debería funcionar tanto con python2 com...

CVE-2026-98309

A flaw was found in the Linux kernel. A use-after-free vulnerability exists in the VideoCore IV vc4 display driver where background polling tasks are not properly finalized when the driver is unbound. A local user could exploit this flaw by unbinding the device or unloading the driver module,...

CVE-2026-98308

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture High Definition Audio HDA subsystem. A local user can cause a denial of service DoS by attempting to open audio streams when hardware streams are exhausted. Because the controller driver invokes an event trace before...

CVE-2026-98307

A flaw was found in the Linux kernel's ath11k wireless driver. This vulnerability can lead to a Denial of Service DoS through memory exhaustion. When recovering from a wireless firmware crash, the driver fails to free memory allocated for station statistics. An attacker or anomalous condition...

CVE-2026-98306

A flaw was found in the Linux kernel's IPv6 Segment Routing SRv6 subsystem. When decapsulating IPv4 network traffic on an interface bound to a Virtual Routing and Forwarding VRF domain—a feature used to isolate network traffic—the kernel fails to properly preserve routing domain flags. A remote...

CVE-2026-98305

A flaw was found in the Linux kernel's MaxLinear MXL862xx Ethernet switch driver. Improper synchronization during device initialization failure, teardown, or shutdown allows background statistics polling to continue running after port resources have been released. This issue can allow a local use...

CVE-2026-98304

A flaw was found in the Linux kernel's Broadcom GENET network driver bcmgenet. When a network interface is brought up or restarted, the driver reinitializes its rule tracking, causing user-configured hardware packet filtering rules to be silently discarded. Consequently, incoming network traffic...

CVE-2026-98302

A flaw was found in the Linux kernel's SysKonnect FDDI skfp network driver. A local user with administrative privileges can trigger a null pointer dereference by configuring the Media Access Control MAC address on a network interface that is down. This issue occurs because the driver attempts to...

CVE-2021-22600__DirtyPagetable

CVE-2021-22600 DirtyPagetable This project aims to exploit a well-know kernel linux CVE-2021-22600 with DirtyPagetable technique. Author: Telmo Sendino This project is part of my final thesis in the UPV/EHU university for the Computer Engineering degree. Only for educational purposes...

CVE-2026-98301

A flaw was found in the Linux kernel's network bridge subsystem. A local user with network configuration privileges can trigger a Denial of Service DoS by updating bridge Multiple Spanning Tree MST states. Because a blocking operation is invoked within an atomic execution context that cannot safe...

Linux-Kernel-Dirty-Pipe-Exploitation-Logic-Bug-

Linux Kernel Dirty Pipe Exploitation Logic Bug by: Antonius w1sdom https://www.bluedragonsec.com https://github.com/bluedragonsecurity Dirty Pipe CVE-2022-0847 is one of the most significant security vulnerabilities in Linux Kernel 5.8 – 5.15.24, discovered by Max Kellermann in 2022. This...

CVE-2026-98300

A flaw was found in the Linux kernel. A race condition in the Transmission Control Protocol TCP IPv6 implementation occurs when an incoming network packet is processed concurrently while a listening socket is being closed. An attacker could exploit this timing window to cause improper memory...

CVE-2026-98299

A flaw was found in the Linux kernel's TCP networking subsystem. A privileged local user can cause a Denial of Service DoS by configuring TCP receive buffer limits to an abnormally low value. This improper setting causes the kernel to encounter a division-by-zero error during buffer adjustment...