CVE-2014-3153

Towelroot لنظام Ubuntu x86 تم اختبار هذا الاستغلال بنجاح على ubuntu 14.04 x86 و ubuntu 12.04.2 x86. تعلم CVE2014-3153 و towelroot. نواة حتى الإصدار 3.14، تستخدم rbtree لتخزين rtwaiter وليس plistnode، أكثر تعقيدًا! IA لديها threadinfo مختلف عن ARM!! المصدر من geekben/towelroot و timwr/CVE-2014-315...

CVE-2025-38001

CVE-2025-38001---Linux-Kernel-HFSC-RBTree-Use-After-Free-Research يحتوي هذا المستودع على إثبات المفهوم PoC لثغرة أمنية CVE-2025-38001 التي تستهدف وحدة HFSC في نواة لينكس. أُنشئ خصيصًا كمواد تعليمية حول تلف الذاكرة في النواة وتدقيق أنظمة الأمان. الاعتمادات والمراجع الاستغلال الأصلي بواسطة: 0xdevil...

CVE-2025-38001

CVE-2025-38001 RBTree फैमिली ड्रामा Linux HFSC Eltree यूज़-आफ्टर-फ्री - Debian 12 PoC यह PoC सिस्टम से समझौता करने के लिए RBTree परिवर्तनों पर आधारित पेज-स्तरीय डेटा-ओनली हमले का उपयोग करता है। यह एक्सप्लॉइट पोर्टेबल है और सभी kernelCTF इंस्टेंसेस LTS 6.6.90, COS 109, COS 105 और Debian 12 पर काम...

CVE-2026-98047

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier, which may allow a local attacker to cause a denial of service DoS or potentially escalate privileges. When verifying red-black tree rbtree callbacks, the verifier fails to enforce callback restrictions across nested...

CVE-2026-98060

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject resilient lock operations in rbtree callbacks bpfrbtreeadd keeps parent and link pointers live across calls to the program-supplied comparison callback. The verifier therefore requires the root's lock to remain held...

DEBIAN-CVE-2026-98060

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject resilient lock operations in rbtree callbacks bpfrbtreeadd keeps parent and link pointers live across calls to the program-supplied comparison callback. The verifier therefore requires the root's lock to remain held...

CVE-2026-98047

In the Linux kernel, the following vulnerability has been resolved: bpf: Check ancestor frames for rbtree callbacks bpfrbtreeadd invokes its comparator while the caller holds the root lock. The native insertion code retains raw parent and link pointers across the callback, so the verifier prohibi...

DEBIAN-CVE-2026-98047

In the Linux kernel, the following vulnerability has been resolved: bpf: Check ancestor frames for rbtree callbacks bpfrbtreeadd invokes its comparator while the caller holds the root lock. The native insertion code retains raw parent and link pointers across the callback, so the verifier prohibi...

UBUNTU-CVE-2026-98047

In the Linux kernel, the following vulnerability has been resolved: bpf: Check ancestor frames for rbtree callbacks bpfrbtreeadd invokes its comparator while the caller holds the root lock. The native insertion code retains raw parent and link pointers across the callback, so the verifier prohibi...

UBUNTU-CVE-2026-98060

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject resilient lock operations in rbtree callbacks bpfrbtreeadd keeps parent and link pointers live across calls to the program-supplied comparison callback. The verifier therefore requires the root's lock to remain held...

CVE-2026-98060 bpf: Reject resilient lock operations in rbtree callbacks

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject resilient lock operations in rbtree callbacks bpfrbtreeadd keeps parent and link pointers live across calls to the program-supplied comparison callback. The verifier therefore requires the root's lock to remain held...

CVE-2026-98060

The Linux kernel contains a vulnerability in the BPF subsystem where the resilient lock kfunc argument path fails to enforce a rule regarding rbtree callbacks . Specifically, because __bpf_rbtree_add() keeps parent and link pointers live during comparison callbacks, the root's lock must remain he...

EUVD-2026-86713

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject resilient lock operations in rbtree callbacks bpfrbtreeadd keeps parent and link pointers live across calls to the program-supplied comparison callback. The verifier therefore requires the root's lock to remain held...

CVE-2026-98060

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject resilient lock operations in rbtree callbacks bpfrbtreeadd keeps parent and link pointers live across calls to the program-supplied comparison callback. The verifier therefore requires the root's lock to remain held...

CVE-2026-98060 bpf: Reject resilient lock operations in rbtree callbacks

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject resilient lock operations in rbtree callbacks bpfrbtreeadd keeps parent and link pointers live across calls to the program-supplied comparison callback. The verifier therefore requires the root's lock to remain held...

EUVD-2026-86700

In the Linux kernel, the following vulnerability has been resolved: bpf: Check ancestor frames for rbtree callbacks bpfrbtreeadd invokes its comparator while the caller holds the root lock. The native insertion code retains raw parent and link pointers across the callback, so the verifier prohibi...

CVE-2026-98047 bpf: Check ancestor frames for rbtree callbacks

In the Linux kernel, the following vulnerability has been resolved: bpf: Check ancestor frames for rbtree callbacks bpfrbtreeadd invokes its comparator while the caller holds the root lock. The native insertion code retains raw parent and link pointers across the callback, so the verifier prohibi...

CVE-2026-98047

The Linux kernel contains a vulnerability in the BPF subsystem where bpf_rbtree_add() fails to properly enforce callback restrictions during nested static subprogram calls. Because in_rbtree_lock_required_cb() only checks the innermost verifier frame, a subprogram can push a frame without the in_...

CVE-2026-98047 bpf: Check ancestor frames for rbtree callbacks

In the Linux kernel, the following vulnerability has been resolved: bpf: Check ancestor frames for rbtree callbacks bpfrbtreeadd invokes its comparator while the caller holds the root lock. The native insertion code retains raw parent and link pointers across the callback, so the verifier prohibi...

CVE-2026-98047

In the Linux kernel, the following vulnerability has been resolved: bpf: Check ancestor frames for rbtree callbacks bpfrbtreeadd invokes its comparator while the caller holds the root lock. The native insertion code retains raw parent and link pointers across the callback, so the verifier prohibi...