Linux Kernel Security Vulnerabilities

Versions of the Linux kernel prior to 7.2.9 have a security vulnerability. This vulnerability arises from the BPF verifier failing to reject the transfer of the PTRTOPACKET pointer to procedures that may modify data packets, potentially causing the data packet memory area to become invalid...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.4 contains a security vulnerability. This vulnerability arises from the fact that the stackslotobjgetspi function does not reject non-negative offsets. When the offset is 0, the calculated spi index is the same as the valid stack slot at fp-8. This may lead to...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.14 contains a security vulnerability. This vulnerability arises from the thunderbolt driver failing to release the domain reference acquired by tbtunnelonedp when DP RX reading is canceled. When the operation is cancelled, the reference leaks, potentially leading to a...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from the use of meshfasttxcache, which stores original meshpath pointers. After deleting and clearing the cache, searches for existing paths may still insert new cache entries, causing the cache to point to...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.19 contains a security vulnerability. This vulnerability stems from the use of adsdbufferpostenable, which allocates samplesbuf during runtime. However, when unbinding the buffer, it is released before the IRQ is disabled. As a result, the handler may still copy samples...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities arise from a failure in the payload page pool allocation process. During this process, the cleanup path passes an incorrect pointer to pagepooldestroy, instead of destroying the header page pool. This can lead ...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.16 contains a security vulnerability. This vulnerability stems from the wacomwacpenserialenforce function, which calculates and passes an invalid offset to hidfieldextract, resulting in out-of-bounds memory access and potentially leading to information leakage...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains a security vulnerability. This vulnerability stems from emmactxmemmap in drivers/net/ethernet/spacemit/k1emac.c, which fails to clear the written TX descriptors when fragment mapping fails. As a result, the DMA engine may access an old address that has been...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.11 contains security vulnerabilities. One of these vulnerabilities arises from sockmapalloc, which does not reject entries greater than INTMAX. Additionally, sockmapfree uses a signed int to iterate through the sks array, leading to integer overflows and potential...

Strophe/Libstrophe buffer error vulnerability

Strophe libstrophe versions 0.14.0 and earlier have a buffer overflow vulnerability. This vulnerability stems from SCRAMHi’s handling of SCRAM salts, where a stack buffer overflow occurs when processing SCRAM salts. Malicious XMPP servers can exploit this vulnerability by sending SCRAM salts that...

Lode Vandevenne has a buffer error vulnerability

Lode Vandevenne’s lodepng 20261006 and earlier versions have a buffer error vulnerability. This vulnerability stems from the lodepng::getFilterTypesInterlaced function in lodepngutil.cpp, which fails to perform boundary checks on the decompressed IDAT data. As a result, a stack overflow attack is...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.1 contains a security vulnerability. This vulnerability stems from the winwinginitff function in the HID winwing driver, which passes the driver-specific data allocated by devmkzalloc as an effect context to inputffcreatememless. This leads to invalid reclamation and...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.7 contains security vulnerabilities. These vulnerabilities stem from a driver that allocates memory for buffer paths based on samples. When the regmap operation in kx022afifoenable fails, the allocated memory is not released, and the hardware configuration and status...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.16 contains a security vulnerability. This vulnerability arises from the iiopushtobufferswithtsunaligned function, which may leak uninitialized heap memory into user space when the input data is not an integer multiple of 8 bytes and timestamping is enabled...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.1 contains security vulnerabilities. These vulnerabilities stem from the fixedrateidx field in the debugfs file, which does not validate the fixed rate index written there. This can lead to out-of-bound array indexing and damage to adjacent kernel memory...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.16 contains a security vulnerability. This vulnerability arises from the sockops program failing to check the sk type when reading rttmin. As a result, requestsock is forced to convert to tcpsock, and the rttmin value is read beyond its bounds, potentially leading to th...

CVE-2022-1015

CVE-2022-1015 id uid=1000d gid=1000d groups=1000d ./poc + unshare done table created: leaktable chain created: leakchain rule added Listening on port 9999 table created: leaktable chain created: leakchain rule added Listening on port 9999 kerneladdress: ffffffffb4a00000 kernelstack:...

kernel: Fix of 31 CVEs

ipv4: validate checksumstart before completing checksum CVE-2026-99999 - fbdev: serialize mode sysfs access with lockfbinfo CVE-2026-80785 - powerpc/rtas: avoid device tree lookups in rtasosterm CVE-2022-50870 - svcrdma: Reject connection when transport allocation fails CVE-2026-89531 -...

CVE-2018-8174-msf

CVE-2018-8174-msf This is a metasploit module which creates a malicious word document to exploit CVE-2018-8174 - VBScript memory corruption vulnerability. This module is a very quick port and uses the exploit sample that was found in the wild. The exploit works only for Microsoft Office 32-bit...

CVE-2019-2215

CVE-2019-2215 Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1942 https://bugs.chromium.org/p/project-zero/issues/attachmentText?aid=414885 Samsung S7 and S7 Edge with Kernel 3.18.x seem not vulnerable could be however, with more work with PoC adjustments. Could not see more,...