CVE-2026-44099

A privilege escalation vulnerability in the system configuration allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise...

CVE-2026-44096 udhcpc Privilege Escalation

A privilege escalation vulnerability in udhcpc allows a local user "charx-web" to execute arbitrary commands as root, resulting in full system compromise...

CVE-2026-44096

The CVE-2026-44096 entry describes a privilege escalation in udhcpc that allows a local user named "charx-web" to run arbitrary commands as root, leading to full system compromise. The available connected sources confirm the affected component (udhcpc) and the local-exploit scenario, with high se...

EUVD-2026-51031

A privilege escalation vulnerability in udhcpc allows a local user "charx-web" to execute arbitrary commands as root, resulting in full system compromise...

CVE-2026-44095

CVE-2026-44095 is described as a local privilege escalation affecting a script used for network configuration. A low-privileged local user can execute arbitrary commands as root, leading to full system compromise. The CVSS metrics indicate high impact on confidentiality, integrity, and availabili...

CVE-2026-44095

A privilege escalation vulnerability in a script used for network configuration allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise...

CVE-2026-44095 Local Privilege Escalation via Network scripts

A privilege escalation vulnerability in a script used for network configuration allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise...

EUVD-2026-51028

A local privilege escalation vulnerability in the init-script for user-applications allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise...

CVE-2026-44093

A local privilege escalation affecting the init-script for user-applications, specifically the /etc/init.d/user-applications startup script. The vulnerability allows a low-privilege local user to execute arbitrary commands as root, enabling full system compromise. This aligns with the NVD entry d...

CVE-2026-44093 Local Privilege Escalation vulnerability in /etc/init.d/user-applications via user-application start script

A local privilege escalation vulnerability in the init-script for user-applications allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise...

openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux OpenSSH client versions

A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack ca...

CVE-2026-64510

A flaw was found in the Linux kernel's Advanced Configuration and Power Interface ACPI Non-Volatile Memory NVM Firmware Interface Table NFIT core. Improper error handling during the initialization process can leave a dangling pointer. A local attacker could potentially trigger an ACPI Machine Che...

CVE-2026-64426

A flaw was found in the Linux kernel's iouring/nop component. A local user could exploit this by submitting a specially crafted no-operation NOP request. This could lead to a file reference not being properly released, resulting in a memory leak. Over time, this memory leak could impact system...

kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup

A flaw was found in the Linux kernel's netfilter subsystem, specifically within the nfconntrackhelper. When a connection tracking helper is unregistered, its associated expectations are not properly cleaned up. This oversight can lead to a use-after-free vulnerability, where the system attempts t...

kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete

A flaw was found in the Linux kernel's xfrm IPSec framework subsystem. This vulnerability, a use-after-free, occurs when the system incorrectly manages memory related to security policies, specifically during the deletion of xfrmstate lists. An attacker with local access could exploit this flaw b...

kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture USB audio subsystem. An inconsistency in how USB audio playback and capture streams are handled can lead to an out-of-bounds write to a memory buffer. This can result in a system crash, causing a denial of service for a...

CVE-2026-64455

A flaw was found in the Linux kernel's chaoskey driver. A local user could trigger a use-after-free vulnerability by closing the device file after the associated USB device has been unplugged. This could lead to a system crash due to memory corruption when a debugging statement attempts to access...

CVE-2026-64453

A flaw was found in the Linux kernel's USB subsystem, specifically within the usbio module. This vulnerability, known as a use-after-free UAF, occurs when the system attempts to access memory that has already been released during the disconnection of a USB device. A local attacker or a specially...

CVE-2026-64487

A flaw was found in the Linux kernel's sound subsystem, specifically within the ALSA caiaq driver responsible for handling Traktor Kontrol S4 devices. A local attacker, by providing specially crafted input from a connected device, could exploit an out-of-bounds read vulnerability. This issue aris...

CVE-2026-64468

A flaw was found in the Linux kernel's binder component. A use-after-free UAF vulnerability exists in the binderfreetransaction function, where a process's reference is accessed after the lock protecting it is released, allowing the process to terminate prematurely. A local attacker with low...