Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 GhostLock — futex PI Use-After-Free local...

CVE-2026-31431-EXPLOIT

CVE-2026-31431 - 복사 실패 이 취약점은 권한 없는 로컬 공격자 가 취약한 Linux 시스템에서 루트 권한 을 획득할 수 있게 합니다. ⚠️ 면책 조항 이 코드는 교육 및 보안 연구 목적으로만 제공됩니다. 이 코드는 Linux 커널의 AFALG 소켓 인터페이스에서 가상의 취약점CVE-2026-31431을 시연합니다. 소유하지 않았거나 명시적인 서면 허가를 받지 않은 시스템에서는 이 코드를 실행하지 마십시오. 이 코드의 오용은 법률과 규정을 위반할 수 있습니다. 📜 설명 CVE-2026-314312026년 공개은...

CVE-2026-97575

A flaw was found in the Linux kernel's Video4Linux2 V4L2 subsystem. The stateless AV1 video decoding interface fails to properly validate tile dimensions in frame control requests. A local attacker can exploit this vulnerability by submitting a specially crafted frame configuration with excessive...

PT-2026-102876

🚨 CVE-2026-76732 A local privilege-escalation vulnerability has been discovered in the affected daemon of HPE Networking Instant ON. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges if certain preconditions are met...

Important: gvfs

Issue Overview: A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buff...

CVE-2026-19547: Untrusted Search Path

Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for PostScript resource files in predictable paths under C:\gs\ that do not exist by default on Windows installations, combined with Windows default...

PT-2026-102646

Name of the Vulnerable Software and Affected Versions TeamViewer Full Client and Host versions prior to 15.82 Description Improper path validation in the local IPC Inter-Process Communication service allows a local authenticated user with low privileges to perform arbitrary file writes with...

FreeBSD Security Advisory - FreeBSD-SA-26:65.kqueue

FreeBSD Security Advisory - Memory safety bugs in kqueue copy-on-fork implementation. An unprivileged local user may be able to exploit these races to escalate privileges...

Harvest Season for SLUB: From Io_uring Vulnerability to Novel Sheaf-Based Exploitation Techniques

The Linux kernel's push for higher I/O performance and more efficient memory management has introduced new mechanisms that, while improving performance, also open new attack surfaces. This research examines two of them together: the iouring subsystem and the sheaf/barn caching mechanism added to...

CVE-2026-76732: Improper Privilege Management

A local privilege-escalation vulnerability has been discovered in the affected daemon of HPE Networking Instant ON. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges if certain preconditions are met outside of the...

FreeBSD-SA-26:65.kqueue

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:65.kqueue Security Advisory The FreeBSD Project Topic: Memory safety bugs in kqueue copy-on-fork implementation Category: core Module: kqueue Announced:...

FreeBSD -- Memory safety bugs in kqueue copy-on-fork implementation

Problem Description: When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude marker knotes used internally to track list traversal position before marking them as in-flux and releasing the kqueue lock. If another thread freed a marker while the lock was droppe...

Important: dotnet8.0

Issue Overview: Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. CVE-2026-58649 Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. CVE-2026-62886 Affected Packages: dotnet8.0 Issue Correction...

CVE-2026-19743: Improper Limitation of a Pathname to a Restricted Directory

Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a local authenticated user with low privileges to perform arbitrary file writes with elevated privileges NT AUTHORITY/SYSTEM \ root. By sending crafted I...

Important: systemd

Issue Overview: systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user CVE-2026-16742 Affected Packages: systemd Issue Correction: Run dnf update systemd --releasever 2023.12.20260928 or dnf update --advisory...

Amazon Linux 2023 : systemd, systemd-boot-unsigned, systemd-container (ALAS2023-2026-3117)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3117 advisory. systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user CVE-2026-16742 Tenable has extracted the preceding description bloc...

Debian dsa-6527 : rsync - security update

The remote Debian 13 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-6527 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6527-1 [email protected] https://www.debian.org/securit...

SUSE CVE-2026-91840

A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...

SUSE CVE-2026-91841

A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege...

CVE-2026-98041

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. The verifier incorrectly predicts that 32-bit conditional branch comparisons between a pointer and zero are always taken, failing to account for valid pointer values whose lower 32 bits can be zero. A local attacker could...