CVE-2026-98154

A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express over RDMA Remote Direct Memory Access driver. This vulnerability can lead to a Denial of Service DoS due to improper error cleanup during request processing. When an input/output I/O communication error occurs while queuing a...

CVE-2026-97510

A flaw was found in the Linux kernel's Thunderbolt subsystem. When handling communication responses, a failure to set up a configuration request—such as when the control channel is already shut down—causes the system to return an error without releasing allocated memory. A local user or repeated...

CVE-2026-97509

A flaw was found in the Linux kernel's Thunderbolt subsystem. A local attacker could exploit this issue to cause a Denial of Service DoS or potentially execute arbitrary code. The vulnerability occurs because the driver fails to maintain a reference to the parent domain device during the lifetime...

CVE-2026-98149

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When updating per-CPU maps on systems configured with non-contiguous CPU identifiers, the kernel incorrectly calculates memory offsets using logical processor IDs instead of dense buffer positions. A local user can explo...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS 로컬 권한 상승 영향을 받는 버전 Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM 사용 방법 gcc exploit.c -o exploit chmod +x exploit ./exploit 설명 "Linux 커널의 overlayfs 파일 시스템에서 사용자 네임스페이스와 관련하여 파일 시스템 capabilities 적용을 제대로 검증하지 않은 Ubuntu 고유의 문제입니다...

CVE-2026-98146

A flaw was found in the Linux kernel's AMD XDNA driver, which can result in a Denial of Service DoS. The driver processes command chains located in shared memory that can be concurrently modified by userspace. By altering the command counter during execution, a local attacker can cause a bounds...

CVE-2026-93825

A flaw was found in the Linux kernel's Serial Peripheral Interface SPI subsystem. This vulnerability allows a local user to cause a Denial of Service DoS through a system crash. The issue occurs because the spigetdevicematchdata function does not verify whether a device identifier exists before...

CVE-2026-98145

A flaw was found in the Linux kernel's AMD XDNA driver. A local user with access to the accelerator device node can trigger a Denial of Service DoS by submitting an empty command chain with a zero command count. Because the driver fails to properly validate the command count, it processes an empt...

CVE-2026-98141

A flaw was found in the Linux kernel's NTFS file system driver. When an index insertion fails during a reparse data update, the driver ignores the error and returns success instead of propagating the failure. A local user creating symbolic links or special files can trigger this issue, causing fi...

CVE-2026-98140

A flaw was found in the Linux kernel's NTFS file system. A local user could trigger this vulnerability during error handling in Master File Table MFT write operations, where temporary kernel memory mappings fail to be released properly. Because these local memory mappings require strict ordering,...

CVE-2026-98139

A flaw was found in the Linux kernel's NTFS New Technology File System driver. When errors occur while releasing storage blocks, the driver mistakenly counts failed release operations as successfully freed space. A local user could exploit this behavior to cause file system state corruption and a...

CVE-2026-98137

A flaw was found in the Linux kernel's NTFS file system driver. This issue can lead to information disclosure when allocating storage space for files. Due to an improper error check, failures during disk zeroing operations are silently ignored rather than aborting the allocation. A local user cou...

CVE-2026-97506

A flaw was found in the Linux kernel's Intel IXP4xx crypto driver. When memory allocation fails while constructing buffer descriptor chains for cryptographic operations, the driver attempts to access an invalid null pointer. A local user could exploit this flaw under low-memory conditions to...

CVE-2026-97504

A flaw was found in the Linux kernel's Lenovo SE10 watchdog driver. Improper error handling during device initialization fails to clear a platform device pointer if registration fails, resulting in a use-after-free condition. A local user could exploit this vulnerability to cause a Denial of...

CVE-2026-93824

A flaw was found in the Linux kernel's Transport Layer Security TLS subsystem. A local user can trigger this vulnerability by configuring TLS keys on a network socket already attached to a Berkeley Packet Filter BPF socket map sockmap. This unsupported integration exposes latent flaws in the...

CVE-2026-101078

A vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2. Affected is an unknown function of the file packages/sandbox/sandbox-local/src/profiles.ts of the component Landlock Backend. Such manipulation leads to improper isolation or compartmentalization. The attack must be...

CVE-2026-101080

A vulnerability was identified in Tencent AI-Infra-Guard up to 4.5.2/4.6.2. This affects the function startsWith of the file skillscan/tools/dir/diractions.py of the component File Access. The manipulation leads to path traversal. The attack needs to be performed locally. The exploit is publicly...

CVE-2026-101079

A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function isSecurityDefenseSkill of the file dist/scanner/analyzers/context.js. Performing a manipulation results in reliance on untrusted inputs in a security decision. The attack must be...

CVE-2026-101080 Tencent AI-Infra-Guard File Access dir_actions.py startsWith path traversal

A vulnerability was identified in Tencent AI-Infra-Guard up to 4.5.2/4.6.2. This affects the function startsWith of the file skillscan/tools/dir/diractions.py of the component File Access. The manipulation leads to path traversal. The attack needs to be performed locally. The exploit is publicly...

EUVD-2026-88341

A vulnerability was identified in Tencent AI-Infra-Guard up to 4.5.2/4.6.2. This affects the function startsWith of the file skillscan/tools/dir/diractions.py of the component File Access. The manipulation leads to path traversal. The attack needs to be performed locally. The exploit is publicly...