CVE-2026-80620

A flaw was found in the Linux kernel. During the error handling of Message Signaled Interrupts eXtended MSI-X region setup, the kernel attempts to unmap an already freed memory region. This double unmap operation on a null pointer can lead to a kernel warning or crash. A local attacker could...

CVE-2026-80697

A flaw was found in the Linux kernel's erofs filesystem. An invalid fpath for page cache sharing could lead to a null pointer dereference when a mincore operation is performed. This vulnerability could allow a local attacker to cause a system crash, resulting in a Denial of Service DoS...

CVE-2026-80700

A flaw was found in the drm/vmwgfx component of the Linux kernel. This vulnerability allows a local attacker to cause memory corruption by providing specially crafted input to the vmwexternalbocopy function. The function, which handles copying data between graphics buffers, does not properly...

CVE-2026-38763

CVE-2026-38763 Una vulnerabilità in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 consente a un attaccante locale di causare una negazione del servizio nel kernel...

-Detection-and-Mitigation-for-CVE-2022-1679

-Rilevamento-e-Mitigazione-per-CVE-2022-1679 Descrizione ath9k è un driver del kernel Linux che supporta i chip Atheros. È stata riscontrata una vulnerabilità use-after-free nel driver dell'adattatore wireless Atheros del kernel Linux, nel modo in cui un utente forza la funzione...

CVE-2026-80590 inet: frags: strip GSO state from fragments before reassembly

In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtionethdr tun/tap, or AFPACKET with PACKETVNETHDR can mark an IPv4 or IPv6 fragment as GSO; nothing relates gsotype to fragoff...

CVE-2026-80520

A flaw was found in the ovpn module of the Linux kernel. The ovpncryptokillkey function incorrectly assumes that both crypto key slots are always populated. This can lead to a NULL dereference if a peer has only one installed key or if the function attempts to remove a key that is not present. A...

CVE-2026-80539

A flaw was found in the Linux kernel's drm/amdgpu graphics driver. When processing graphics commands, the driver fails to properly handle multiple "FENCE chunks" in a single submission. This oversight leads to a memory leak, where system resources are not released as expected. A local attacker...

CVE-2017-6074-DOS

CVE-2017-6074 - DoS-Only-Exploit Linux DCCP Kernel-Panik Dieses Repository bietet eine modifizierte Version des ursprünglichen CVE-2017-6074-Exploits Use-After-Free in der DCCP-Subsystem des Linux-Kernels, die nur dazu entwickelt wurde, die Auswirkungen eines Denial of Service DoS zu demonstriere...

CVE-2026-80541

A flaw was found in the Linux kernel's drm/amdgpu component. A local user could exploit improper validation of Graphics Execution Manager GEM CREATE domain combinations. By combining specific memory domains CPU|GTT|VRAM with special hardware domains DOORBELL, GDS, GWS, or OA, a user could trigger...

CVE-2026-58097 ppp(8): missing length validation in mp_SetEnddisc()

mpSetEnddisc copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the ppp8 command interface. A local user with access to the ppp8 command interface can crash ppp8 or potentially execute arbitrary code as root...

EUVD-2026-66134

BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd...

Linux Distros Unpatched Vulnerability : CVE-2026-80185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP XML parser...

VulnCheck KEV: CVE-2026-36425

An issue in OPSWAT AppRemover Driver ardrv.sys v2017.10.02.1551 and earlier in IOCTL handler 0x2420031. Any local user can open the device and send process termination requests without privilege validation...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098669)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098669 advisory. An out-of-bounds OOB memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This flaw allows a local attacker with a special...

Linux Distros Unpatched Vulnerability : CVE-2026-80541

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: validate GEMCREATE domain combinations AMDGPUGEMCREATE checked domain bits against AMDGPUGEMDOMAINMASK, but did not validate domain combinations...

DEBIAN-CVE-2026-80185

BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd...

CVE-2026-80185

BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd...

CVE-2026-80185 Bluez: sdp-xml: bluez 5.86: unprivileged-local and adjacent-le-peer leads to arbitrary code execution as root

BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd...

CVE-2026-80185

BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd...