CVE-2026-98161

A flaw was found in the Linux kernel's persistent memory pmem subsystem. When processing storage write requests, the driver continues copying data even if a preceding cache flush operation fails, potentially overwriting the error status and reporting success. A local user performing I/O operation...

CVE-2026-97519

A flaw was found in the Linux kernel's Intel Xe graphics driver. When device core dump cleanup routines are triggered without a completed capture, the driver attempts to access uninitialized snapshot data. A local user could exploit this issue to cause a null pointer dereference, resulting in a...

kernel: RDMA/rxe: Fix double free in rxe_srq_from_init

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem, specifically within the rxe driver. An error in the rxesrqfrominit function's memory management can lead to a double free vulnerability. This occurs when an attempt to copy data to user space fails, causing the sam...

CVE-2026-98160

A flaw was found in the Linux kernel's rtl8723bs wireless driver. During device initialization error handling, allocated memory is released using an incompatible deallocation routine. A local attacker could exploit this condition during driver initialization failures to cause memory corruption,...

CVE-2026-97518

A flaw was found in the Linux kernel's cfg80211 wireless configuration subsystem. The subsystem fails to reject duplicate cipher suite entries during wireless device registration. This flaw allows a local user to cause an array buffer overflow within the Wireless Extensions WEXT compatibility...

CVE-2026-97517

A flaw was found in the Linux kernel's nl80211 wireless configuration interface. This flaw can lead to a Denial of Service DoS caused by an out-of-bounds memory read when processing wireless beacon settings. The kernel fails to validate that the variable-length portion of a High Efficiency HE...

CVE-2026-98157

A flaw was found in the Linux kernel's Error Detection and Correction EDAC subsystem. The sysfs interface for device polling improperly validated input values when configuring the polling interval, allowing integer truncation and zero-delay settings. A local user with write permissions to the...

CVE-2025-27591

CVE-2025-27591 descripción Básicamente, la herramienta below permite la modificación universal de su archivo de registro, lo que conduce a una escalada de privilegios como root. detalles. El archivo de registro creado por below es escribible por cualquier usuario, permitiendo a cualquier usuario...

CVE-2026-97514

A flaw was found in the Linux kernel's Chips Wave5 video processing driver. Improper synchronization during dynamic resolution changes allows functions that may sleep to run while holding an atomic lock, and permits state changes without required locks held. A local user with access to the video...

CVE-2026-98154

A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express over RDMA Remote Direct Memory Access driver. This vulnerability can lead to a Denial of Service DoS due to improper error cleanup during request processing. When an input/output I/O communication error occurs while queuing a...

CVE-2026-97510

A flaw was found in the Linux kernel's Thunderbolt subsystem. When handling communication responses, a failure to set up a configuration request—such as when the control channel is already shut down—causes the system to return an error without releasing allocated memory. A local user or repeated...

CVE-2026-97509

A flaw was found in the Linux kernel's Thunderbolt subsystem. A local attacker could exploit this issue to cause a Denial of Service DoS or potentially execute arbitrary code. The vulnerability occurs because the driver fails to maintain a reference to the parent domain device during the lifetime...

CVE-2026-98149

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When updating per-CPU maps on systems configured with non-contiguous CPU identifiers, the kernel incorrectly calculates memory offsets using logical processor IDs instead of dense buffer positions. A local user can explo...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Local Privesc Affected Versions Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Usage gcc exploit.c -o exploit chmod +x exploit ./exploit Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it di...

CVE-2026-98146

A flaw was found in the Linux kernel's AMD XDNA driver, which can result in a Denial of Service DoS. The driver processes command chains located in shared memory that can be concurrently modified by userspace. By altering the command counter during execution, a local attacker can cause a bounds...

CVE-2026-93825

A flaw was found in the Linux kernel's Serial Peripheral Interface SPI subsystem. This vulnerability allows a local user to cause a Denial of Service DoS through a system crash. The issue occurs because the spigetdevicematchdata function does not verify whether a device identifier exists before...

CVE-2026-98145

A flaw was found in the Linux kernel's AMD XDNA driver. A local user with access to the accelerator device node can trigger a Denial of Service DoS by submitting an empty command chain with a zero command count. Because the driver fails to properly validate the command count, it processes an empt...

CVE-2026-98141

A flaw was found in the Linux kernel's NTFS file system driver. When an index insertion fails during a reparse data update, the driver ignores the error and returns success instead of propagating the failure. A local user creating symbolic links or special files can trigger this issue, causing fi...

CVE-2026-98140

A flaw was found in the Linux kernel's NTFS file system. A local user could trigger this vulnerability during error handling in Master File Table MFT write operations, where temporary kernel memory mappings fail to be released properly. Because these local memory mappings require strict ordering,...

CVE-2026-98139

A flaw was found in the Linux kernel's NTFS New Technology File System driver. When errors occur while releasing storage blocks, the driver mistakenly counts failed release operations as successfully freed space. A local user could exploit this behavior to cause file system state corruption and a...