Exploit for Use After Free in Linux Linux_Kernel

S26 SM-S942U1 / m1q GhostLock CVE-2026-43499 — Achieved SELi...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 GhostLock – Honor BVL-AN16 Exploit Research...

CVE-2026-74543

In the Linux kernel, the following vulnerability has been resolved: net: udptunnel: fix memory leak in udptunnelnicunregister syzbot reported a memory leak 1 in the UDP tunnel NIC offload code. When device registration fails e.g. in registernetdevice, netdev core unwinds by sending a single...

CVE-2026-74458 can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents

In the Linux kernel, the following vulnerability has been resolved: can: kvaserusbleaf: kvaserusbleafwaitcmd: validate received command extents The wait and bulk receive paths walk variable-length commands from a USB buffer. A nonzero command shorter than CMDHEADERLEN can still be dispatched, and...

CVE-2026-74458

In the Linux kernel, the following vulnerability has been resolved: can: kvaserusbleaf: kvaserusbleafwaitcmd: validate received command extents The wait and bulk receive paths walk variable-length commands from a USB buffer. A nonzero command shorter than CMDHEADERLEN can still be dispatched, and...

CVE-2026-74397

In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier mlx5iballoctransportdomain allocates a transport domain and then may fail in mlx5ibenablelb. In that case, the allocated TD is leaked. Fix this by deallocatin...

CVE-2026-74310

In the Linux kernel, the following vulnerability has been resolved: vhost/net: complete zerocopy ubufs only once vhost-net initializes one ubufinfo per outstanding zerocopy TX descriptor and hands it to the backend socket. The networking stack may then clone a zerocopy skb before all skb referenc...

UBUNTU-CVE-2026-74406

In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix potential null-ptr-deref in vxlangropreparereceive. udptunnelsockrelease could set sk-skuserdata to NULL while vxlangropreparereceive is running. Let's check if rcudereferenceskuserdata is NULL after skbgroremcsuminit...

UBUNTU-CVE-2026-72407

In the Linux kernel, the following vulnerability has been resolved: geneve: validate inner network offset in genevegrocomplete Even with both paths gated on gs-grohint, genevegrocomplete re-derives the inner dispatch type and length from the packet and the current gs-grohint, independently of...

EUVD-2026-59507

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject exclusive maps for bpfmapelem iterators Exclusive maps aka exclproghash are meant to be reachable only from the single program whose hash matches. This is enforced by checkmapprogcompatibility when the map is referenc...

CVE-2026-74331 firmware_loader: Fix recursive lock in device_cache_fw_images()

In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Fix recursive lock in devicecachefwimages A recursive locking deadlock can occur in the firmware loader's power management notification handler. During system suspend or hibernation preparation, fwpmnotify calls...

CVE-2026-72154

CVE-2026-72154 describes a Linux kernel vulnerability in the OpenRISC path related to jump_label SMP cache syncing. The issue arose from an OpenRISC-specific implementation that copied from arm64 and didn’t correctly handle icache invalidation on remote cores, which could leave stale static_key c...

PT-2026-72935

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the binfmt misc module when a mount fails. The bm get tree function takes a reference to the user namespace and passes it to get tree keyed as the sget key, which...

PT-2026-72870

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rxrpc recvmsg oob function where out-of-band OOB messages are handled incorrectly when using the MSG PEEK flag. While the unlink operation from recvmsg oobq is...

Linux Distros Unpatched Vulnerability : CVE-2026-72157

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: thunderbolt: Fix frags overflow by bounding framecount tbnetpoll assembles a multi-frame ThunderboltIP packet into one skb. The first frame goes into the...

Exploit for Write-what-where Condition in Linux Linux_Kernel

No d...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock SELinux park — SM-S948U1 / AZF1 m3q Research snap...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-23111 — noddlenpottato nftables catchall UAF → unpr...

Exploit for Use After Free in Linux Linux_Kernel

vivo/iQOO Temporary Root Toolkit No unlocking required, no...

CVE-2026-68287

The CVE-2026-68287 issue affects the Linux kernel’s drop_monitor feature. On 32-bit architectures without CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS, 64-bit attributes (PC and TIMESTAMP) appended via nla_put_u64_64bit() may cause a 64-bit alignment pad, and net_dm_packet_report_size()/net_dm_hw_packe...