CVE-2026-90140

This Linux kernel vulnerability affects the cuse (Character device in Userspace) module. Since commit 053fc4f755ad, fuse_conn_put() releases the fuse_conn via call_rcu() rather than synchronously. Because fc->release points to cuse_fc_release() in the cuse module, removing the module (rmmod cu...

EUVD-2026-81733

In the Linux kernel, the following vulnerability has been resolved: cuse: wait for pending RCU callbacks on module exit Since commit 053fc4f755ad "fuse: fix UAF in rcu pathwalks", fuseconnput frees the fuseconn through callrcu rather than synchronously. For cuse, fc-release is cusefcrelease, whic...

CVE-2026-90082

This CVE affects the Linux kernel mana network driver (Microsoft Azure Network Adapter). The root cause is an out-of-bounds access during MSI-X vector setup: mana_gd_query_max_resources() sizes the usable vector count from the reported maximum and CPU count but never caps it to the actual device ...

EUVD-2026-81943

In the Linux kernel, the following vulnerability has been resolved: net: mana: Cap MSI-X vectors to the device MSI-X table size managdquerymaxresources sizes gc-nummsixusable from resp.maxmsix and the CPU count, but never from the device MSI-X table. On a 1792 vCPU M-series VM that yields 1793...

CVE-2025-62470

これはエクスプロイトではなく、単なるPOCです。 root@kitploit: BUGCHECKCODE: 50 BUGCHECKP1: ffffc101f6bf91be BUGCHECKP2: 0 BUGCHECKP3: fffff8007e194409 BUGCHECKP4: 0 READADDRESS: ffffc101f6bf91be MMINTERNALCODE: 0 IMAGENAME: CLFS.SYS MODULENAME: CLFS FAULTINGMODULE: fffff8007e190000 CLFS PROCESSNAME:...

DEBIAN-CVE-2026-90040

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped Wire up a gmeminvalidaterange call for SNP VMs, and use it to force vCPUs to reload/recheck their guest-provided VMSA if the backing gmem page is being...

EUVD-2026-80648

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped Wire up a gmeminvalidaterange call for SNP VMs, and use it to force vCPUs to reload/recheck their guest-provided VMSA if the backing gmem page is being...

CVE-2026-90008 scsi: megaraid_sas: Limit NVMe request size to the PRP chain frame

In the Linux kernel, the following vulnerability has been resolved: scsi: megaraidsas: Limit NVMe request size to the PRP chain frame megasasmakeprpnvme builds a command's PRP list in cmd-sgframe, a DMA pool buffer of instance-maxchainframesz bytes, spending one entry per NVMe page of the transfe...

CVE-2026-90008

The Linux kernel megaraid_sas driver contains a buffer overflow in megasas_make_prp_nvme(), which builds an NVMe PRP list in a fixed-size DMA pool buffer (cmd->sg_frame) without checking bounds. After commit 9b8b84879d4a raised BLK_DEF_MAX_SECTORS_CAP from 1280 KiB to 4 MiB, the required list ...

EUVD-2026-80597

In the Linux kernel, the following vulnerability has been resolved: ima: Check for ERRPTR from dentrypath in validatehashalgo dentrypath returns ERRPTR-ENAMETOOLONG when the path exceeds the buffer. validatehashalgo passes the result straight to integrityauditmsg without checking. ERRPTR is not...

CVE-2026-89989

CVE-2026-89989 affects the Linux kernel's IMA (Integrity Measurement Architecture) subsystem. In validate_hash_algo(), the return value of dentry_path() is passed directly to integrity_audit_msg() without checking for error pointers. When a path exceeds the buffer, dentry_path() returns ERR_PTR(-...

EUVD-2026-80578

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: return early from a zero-length flush SYNCBO does not constrain its size, so a request for zero bytes reaches drmclflushvirtrange, which ends with an unconditional clflushoptend - 1. For an empty range that is the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/i915/reset: Fixed the use of the pointer offset in errorstateread. This fix addresses the issue where, when there is no i915gpucoredump but the bufoffset is non-zero, a kernel page fault may occur. This issue can occur when...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: cpufreq: The completion function is called before kobjectinitandadd. In cpufreqpolicyalloc, the uninitialized completion function is called in cpufreqsysfsrelease when kobjectinitandadd fails. This will cause a crash, such as a...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: TCP: fixed page frag corruption upon a page fault. Steffen reported a corruption of the TCP stream for HTTP requests served by the Apache web-server, using a CIFS mount-point and the corresponding file’s memory mapping. The root...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: For the m68k architecture, the bus error is only forced if the PC is not in the exception table. The getkernelnofault function copies data in supervisor mode when forcing a task backtrace log through /proc/sysrqtrigger. This is...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel before version 6.1.3, fs/ntfs3/inode.c does not validate the attribute name offset. A unhandled page fault may occur...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: erofs: Stop parsing non-compact HEAD indexes if clusterofs is invalid Syzbot generated a crafted image with a non-compact HEAD index of clusterofs 33024. Valid numbers should be between 0 and lclustersize-1, which causes the...

CVE-2025-62454

これはエクスプロイトではなく、単なるPOCです root@kitploit: BUGCHECKCODE: 50 BUGCHECKP1: ffff808b75973000 BUGCHECKP2: 2 BUGCHECKP3: fffff803df12ddda BUGCHECKP4: 0 READADDRESS: ffff808b75973000 Special pool MMINTERNALCODE: 0 IMAGENAME: cldflt.sys MODULENAME: cldflt FAULTINGMODULE: fffff803df110000 cldflt PROCESSNAME:...

Linux Distros Unpatched Vulnerability : CVE-2026-80853

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Allocate full pages for DE,ENCRYPT ops on SNP-enabled hosts When de,encrypting...