CVE-2024-36971

CVE-2024-36971 — Proof of Concept Research & Analysis Only ⚠️ DISCLAIMER — READ BEFORE USING THIS REPOSITORY This repository is intended only for defensive research, analysis, and responsible reporting. It contains a non-exploitable proof of concept file named CVE-2024-36971 and a publicly...

Astra Linux – Vulnerability in Chromium

The use of after-free in the Network subsystem in Google Chrome before version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory through a crafted HTML page. Chromium security severity: Low...

RHEL 10 : kernel (RHSA-2026:62609)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62609 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: fanotify: fix false positive...

SUSE-SU-2026:23378-1 Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie bsc1270023 - CVE-2026-53246: sctp: validate cached peer INIT chunk length in...

SUSE-SU-2026:23292-1 Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split bsc1259134. - CVE-2026-23449: net/sched: teql: Fix double-free in teqlmasterxmit...

Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1255616. CVE-2026-23204: net: add skbheaderpointercareful helper bsc1258340. CVE-2026-52986: netfilter:...

SUSE SLES15 Security Update : kernel (Live Patch 48 for SUSE Linux Enterprise 15 SP4) (SUSE-SU-2026:3750-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3750-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.194 fixes various security issues: The following security issues were fixed:...

SUSE SLES15 Security Update : kernel (Live Patch 38 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:3744-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3744-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.149 fixes various security issues: The following security issues were fixed:...

SUSE SLES15 Security Update : kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:3715-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3715-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.163 fixes various security issues: The following security issues were fixed:...

SUSE-SU-2026:3756-1 Security update for the Linux Kernel (Live Patch 46 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.184 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT...

SUSE-SU-2026:3708-1 Security update for the Linux Kernel (Live Patch 32 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.127 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT...

CVE-2026-74596

In the Linux kernel, the following vulnerability has been resolved: fs,fsverity: remove check for fsverity being enabled in setattrprepare The check that fs-verity is available in the kernel is not necessary here. Filesystems could have fsverity files even without fs-verity enabled. In that case,...

CVE-2026-74285

A flaw was found in the Linux kernel's network subsystem. An issue in the netifrxqcleanupunlease function, responsible for tearing down network queue memory providers, allows a device to perform Direct Memory Access DMA to an incorrect memory address. This occurs because the DMA mappings are...

CVE-2026-72493 net: serialize netif_running() check in enqueue_to_backlog()

In the Linux kernel, the following vulnerability has been resolved: net: serialize netifrunning check in enqueuetobacklog Syzbot reported a KASAN slab-use-after-free in fibruleslookup. The root cause is a race condition where packets can escape the backlog flushing during device unregistration...

CVE-2026-72233

In the Linux kernel, the batman-adv component (bla) vulnerability is resolved: pskb_may_pull() used by batadv_bla_is_backbone_gw() could reallocate the buffer behind the skb, making variables pointing to the old buffer prone to use-after-free. The issue is mitigated by the patch that ensures poin...

Linux Distros Unpatched Vulnerability : CVE-2026-74525

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: sxgbe: free TX rings on RX allocation failure When RX descriptor ring allocation fails, initdmadescrings only frees the partially allocated RX rings and...

SUSE-SU-2026:23231-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-23259: iouring/rw: free potentially allocated iovec on cache put failure bsc1259866. - CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled...

Linux Distros Unpatched Vulnerability : CVE-2026-68338

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/packet: avoid fanout hook re-registration after unregister packetsetring temporarily detaches a socket from packet delivery while reconfiguring its ring. It...

Oracle Linux 10 : kernel (ELSA-2026-30129)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-30129 advisory. - crypto: ccp - copy IV using skcipher ivsize CKI Backport Bot RHEL-188463 CVE-2026-53016 - futex/requeue: Revert 'Prevent NULL pointer dereference i...

ROS-20260804-73-0025

The vulnerability of the net/hsr/hsrslave.c component in the Linux operating system is related to incorrect syntax validation during input processing. Exploiting this vulnerability allows an attacker to cause service failures...