CVE-2026-98077

The Linux kernel contains an out-of-bounds (OOB) read vulnerability in the netfilter: nf_conntrack_sip component. The root cause is located in the sip_skip_whitespace() function, which fails to return NULL when its loop exhausts the buffer (where dptr == limit). Because the calling function ct_si...

CVE-2026-97560

The Linux kernel contains a one-byte out-of-bounds (OOB) read vulnerability within the smb2_parse_native_symlink() function of the SMB client. The flaw occurs when parsing a share-root relative native symlink, where memcpy copies smb_target+1 (skipping the leading separator) but incorrectly uses ...

kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg

A flaw was found in the Linux kernel's drm/amdgpu/vcn4 component. This vulnerability allows an attacker to trigger an out-of-bounds OOB read when parsing decoder messages due to insufficient bounds checking. This could lead to information disclosure, potentially revealing sensitive data from memo...

kernel: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg

A flaw was found in the Linux kernel's drm/amdgpu/vcn3 component. This vulnerability, an Out-of-Bounds OOB read, occurs when parsing decoder messages without proper boundary checks. A local attacker could potentially exploit this to read sensitive information from memory or cause system...

CVE-2026-84118-who-labeled-the-crit-as-a-high

CVE-2026-84118 — Use-after-free en el GC de SpiderMonkey Bug 2057457 Este es uno de esos casos en los que Mozilla etiquetó una Critical como High. Así que alguien podría querer que Firefox actualice el pago a los cazadores de bugs originales si ese es el caso. EL TLDR: Puedes hacer una primitiva ...

CVE-2026-7482-PoC

CVE-2026-7482: Lectura Fuera de Límites del Heap en Ollama PoC de 1 Día Este repositorio contiene una cadena de explotación de Prueba de Concepto PoC de 1 día para CVE-2026-7482 , una vulnerabilidad de lectura Fuera de Límites OOB no autenticada en el cargador de modelos GGUF de Ollama versiones...

kernel: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg

A flaw was found in the Linux kernel's drm/amdgpu/vcn3 component. This vulnerability, an Out-of-Bounds OOB read, occurs when parsing decoder messages without proper boundary checks. A local attacker could potentially exploit this to read sensitive information from memory or cause system...

kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg

A flaw was found in the Linux kernel's drm/amdgpu/vcn4 component. This vulnerability allows an attacker to trigger an out-of-bounds OOB read when parsing decoder messages due to insufficient bounds checking. This could lead to information disclosure, potentially revealing sensitive data from memo...

CVE-2026-32945

CVE-2026-32945 Lectura fuera de límites del puntero de compresión DNS en el heap de PJSIP DoS remoto Descripción getnamelen y getname en pjlib-util/src/pjlib-util/dns.c leen un puntero de compresión DNS de 2 bytes mediante pjmemcpy&offset, p, 2 sin comprobar que ambos bytes se encuentren dentro d...

CVE-2017-13672

CVE-2017-13672 PoCs para CVE-2017-13672 lectura fuera de límites en el controlador VGA Cirrus de QEMU, causando denegación de servicio...

Elysium-Vanguard-Sentinel-Audit

SENTINEL-ROOT-AUDIT: Honor Magic V2 Hypervisor Detection Suite ➲ Project Overview SENTINEL-ROOT-AUDIT is a professional-grade security suite designed to audit kernel integrity and detect hypervisor-level interventions on the Honor Magic V2 SM8550. While the core vulnerability CVE-2025-38352 allow...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2026-65343-e7eb2ed

CVE-2026-65343 — Lectura OOB en AppleKeyStore Derrota de KASLR Componente: Extensión del kernel AppleKeyStore — LibSerSEPControlDeserialize Afecta a: iOS / iPadOS 26.6 23G71 y anteriores Corregido en: iOS / iPadOS 26.6.1 23G83 Tipo: Lectura fuera de límites en la deserialización de mensajes de...

ALSA-2026:71016 Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: drm/amdgpu: Fix use-after-free race in VM acquire CVE-2026-43370 kernel: mac802154: llsec: add skbcowdata before in-place crypto...

ALSA-2026:71213 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/amdgpu: Fix use-after-free race in VM acquire CVE-2026-43370 kernel: mac802154: llsec: add skbcowdata before in-place crypto CVE-2026-63831 kernel: sctp: don't free the ASCONF's own...

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: drm/amdgpu: Fix use-after-free race in VM acquire CVE-2026-43370 kernel: mac802154: llsec: add skbcowdata before in-place crypto...

CVE-2024-5274

CVE-2024-5274 authors: @mistymntncop, @buptsb Shoutout to @buptsb for his major contribution of discovering both the DCHECK bytecode mismatch POC and then discovering how to elevate that primitive to more powerful OOB read/write primitives. Without him this exploit would not be possible :- based ...

CVE-2026-81884

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O LCDATAINCODE parser was vulnerable because the Mach-O LCDATAINCODE parser trusted dataoff and datasize and allowed a final partial record to be processed. The vulnerability is triggered...

CVE-2026-81882

radare2 (a UNIX-like reverse engineering framework) contained a vulnerability in its binary property-list Unicode parser prior to version 6.2.0. The parser underallocated an uninitialized UTF-8 destination buffer and did not guarantee NUL termination , causing the JSON encoder to read beyond the ...

EUVD-2026-84468

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O LCDATAINCODE parser was vulnerable because the Mach-O LCDATAINCODE parser trusted dataoff and datasize and allowed a final partial record to be processed. The vulnerability is triggered...