xring-CVE-2026-98260-OS4.0

XRING-KSU · CVE-2026-98260 在玄戒 O1 家族 （violin = Xiaomi Pad 7S Pro 12.5 / 25053RP5CC、jinghu = Xiaomi Pad 7 Ultra、dijun = Xiaomi 15S Pro）上一键取得 root：利用 CVE-2026-98260（exec 子系统的 POSIX timer UAF）拿到内核任意读写，落成 root + 宽容 SELinux，并按所选方案加载 KernelSU / SukiSU / KernelSU Next / 7kimisu 中的任一 LKM，打包成平板双栏 UI 的...

K80Pro-miro-CVE-2026-98260

CVE-2026-98260 — Android arm64 POSIX Timer UAF 红米k80 Pro OS 3.0.305.0 移植 非 leader 线程 execve 触发的 POSIX CPU timer UAF，从 uid=2000 拿到 uid=0 + 完整 capabilities（CapEff=0x1ffffffffff）。 ⚠️ 仅限自有设备的安全研究 ，使用前请读文末免责声明。 支持范围 项| 值 ---|--- 机型| Redmi K80 Pro miro 系统| HyperOS 3 / OS3.0.305 （OS3.0.304 理论可用，同一内核...

Exploit for CVE-2026-98260

CVE-2026-98260 — Android arm64 POSIX Timer UAF for Redmi K80 P...

Vivo S60 16.0.11.15.W10 POSIX Timer Local Privilege Escalation

Vivo S60 version 16.0.11.15.W10 with kernel 6.1.145-android14-11-maybe-dirty contains a POSIX CPU timer use-after-free vulnerability that can be exploited to obtain root privileges and load KernelSU. https://packetstorm.news/download/238551...

CVE-2026-58084

To retrieve the previous timer value, the kernel calls realtimergettime, which obtains the current time for the timer's clock. For a timer using CLOCKTAI this can fail when no TAI offset has been configured, but the error return was not checked, so the uninitialized output buffer was copied to...

EUVD-2026-62338

To retrieve the previous timer value, the kernel calls realtimergettime, which obtains the current time for the timer's clock. For a timer using CLOCKTAI this can fail when no TAI offset has been configured, but the error return was not checked, so the uninitialized output buffer was copied to...

CVE-2026-58084

To retrieve the previous timer value, the kernel calls realtimergettime, which obtains the current time for the timer's clock. For a timer using CLOCKTAI this can fail when no TAI offset has been configured, but the error return was not checked, so the uninitialized output buffer was copied to...

PT-2026-78317

To retrieve the previous timer value, the kernel calls realtimer gettime, which obtains the current time for the timer's clock. For a timer using CLOCK TAI this can fail when no TAI offset has been configured, but the error return was not checked, so the uninitialized output buffer was copied to...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013682)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013682 advisory. In the Linux kernel, the following vulnerability has been resolved: posix-timers: Ensure timer ID search-loop limit is valid posixtimeradd tries to allocate a posix...

SUSE-SU-2026:20504-1 Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise kernel 6.4.0-31.1 fixes various security issues The following security issues were fixed: - CVE-2025-38352: posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel bsc1249205. - CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero ...

SUSE SLES15 Security Update : kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP4) (SUSE-SU-2026:0526-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0526-1 advisory. This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.147 fixes various security issues The following security issues were fixed: ...

SUSE-SU-2026:0546-1 Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.60 fixes various security issues The following security issues were fixed: - CVE-2025-38352: posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel bsc1249205. - CVE-2025-39742: RDMA: hfi1: fix possible...

SUSE-SU-2026:0535-1 Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.113 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211hwsim: drop short frames bsc1250314. - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access...

Linux kernel timer Heap Buffer Overflow DoS

The vulnerability of the posixtimerbyid function in the kernel/time/posix-timers.c module of the Linux timer subsystem is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an invalid timer ID search loop limit in the posixtimeradd function, which could lead to an infinite loop...

EUVD-2005-3800

Malware in sbrugna...

EUVD-2018-4849

Malware in sbrugna...

RHEL 8 : kpatch-patch-4_18_0-372_118_1, kpatch-patch-4_18_0-372_131_1, kpatch-patch-4_18_0-372_137_1, kpatch-patch-4_18_0-372_145_1, and kpatch-patch-4_18_0-372_158_1 (RHSA-2025:16045)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:16045 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patc...

CLSA-2025-1758009294 kernel: Fix of 3 CVEs

posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 - schqfq: make qfqqlennotify idempotent CVE-2025-38177 - schhfsc: make hfscqlennotify idempotent CVE-2025-38177 - schdrr: make drrqlennotify idempotent CVE-2025-38177 - schhtb: make htbqlennotify...

RHEL 9 : kpatch-patch-5_14_0-284_104_1, kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_79_1, and kpatch-patch-5_14_0-284_92_1 (RHSA-2025:15931)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:15931 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patc...