Linux Distros Unpatched Vulnerability : CVE-2026-89452

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/msm: Unwind probe state on registration failure msmiommuprobe adds its devm-managed IOMMU object to qcomiommudevices before adding the IOMMU sysfs device...

ContextMenuHijack

ContextMenuHijack 这个启发我的原始创意来自 @NinjaParanoid： ContextMenuHijack 是一种基于人类行为、利用 COM 劫持的简单持久化技术：当你在文件资源管理器中右键单击文件/文件夹以打开上下文菜单时，它会在同一时间执行我们指定的 beacon。 root@kitploit: IFACEMETHODIMP FileContextMenuExt::Initialize LPCITEMIDLIST pidlFolder, LPDATAOBJECT pDataObj, HKEY hKeyProgID DWORD tid = NULL;...

CVE-2025-47646

CVE-2025-47646 PoC 针对 WordPress PSW 前端登录注册插件 ≤ 1.12 的未认证权限提升漏洞利用 📖 描述 此 Python 脚本是 CVE-2025-47646 的概念验证 PoC 漏洞利用，针对 WordPress PSW 前端登录注册插件 ≤ 1.12 中的漏洞。 该漏洞允许未经认证的攻击者通过暴露的 AJAX 操作注册新用户账户，而无需适当的验证或限制。 📌 使用方法 ▶️ 要求： Python 3 requests 库 pyfiglet 库 安装所需库： root@kitploit: pip install requests pyfiglet ▶️...

CVE-2026-89510

A flaw was found in the Linux kernel's RDMA/cxgb4 component. This vulnerability occurs when the c4iwremove function frees a device while its registration work regwork is still pending or actively running. This timing issue can lead to the c4iwregisterdevice function attempting to access memory th...

AZL-100433 CVE-2026-89741 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: Revert "media: v4l2-dev: fix error handling in videoregisterdevice" This reverts commit 2a934fdb01db6458288fc9386d3d8ceba6dd551a. The intentions of that patch were good, but it doesn't work. The idea is that if deviceregister...

AZL-100154 CVE-2026-89740 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: serial: imx: serialize imxuartports lifetime imxuartprobe publishes its devm-allocated port in imxuartports before uartaddoneport because console setup uses the table. The entry is not cleared when adding the port fails or after...

DEBIAN-CVE-2026-89599

In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: panel-dsi-cm: initialize lock before registering display dsicmprobe registers the display before initializing ddata-lock. Once omapdssregisterdisplay publishes the display, another consumer can reach a dsicm callba...

CVE-2026-89599

In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: panel-dsi-cm: initialize lock before registering display dsicmprobe registers the display before initializing ddata-lock. Once omapdssregisterdisplay publishes the display, another consumer can reach a dsicm callba...

DEBIAN-CVE-2026-89585

In the Linux kernel, the following vulnerability has been resolved: auxdisplay: charlcd: cancel backlight work on registration failure With CONFIGCHARLCDBLFLASH, charlcdinit schedules blwork before charlcdregister calls miscregister. If registration fails, the caller frees the charlcd object whil...

CVE-2026-89585

In the Linux kernel, the following vulnerability has been resolved: auxdisplay: charlcd: cancel backlight work on registration failure With CONFIGCHARLCDBLFLASH, charlcdinit schedules blwork before charlcdregister calls miscregister. If registration fails, the caller frees the charlcd object whil...

DEBIAN-CVE-2026-89510

In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Cancel regwork before freeing device on remove c4iwuldstatechange queues regwork to register the RDMA device. c4iwremove can free ctx-dev while this work is pending or running, leaving c4iwregisterdevice accessing the...

CVE-2026-89452

In the Linux kernel, the following vulnerability has been resolved: iommu/msm: Unwind probe state on registration failure msmiommuprobe adds its devm-managed IOMMU object to qcomiommudevices before adding the IOMMU sysfs device and registering it with the IOMMU core. If iommudevicesysfsadd fails,...

DEBIAN-CVE-2026-81006

In the Linux kernel, the following vulnerability has been resolved: ipmi: Remove all sysfs files on registration failure ipmiaddsmi creates the nrusers and nrmsgs files before trying to create the maintenancemode file. If that last creation fails, the error path removes only nrusers before droppi...

AZL-100268 CVE-2026-81005 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ipmi: si: Fix NULL pointer dereference after failed registration trysmiinit allocates newsmi-sism and later calls ipmiregistersmimod, which maps to ipmiaddsmi. During ipmiaddsmi, the upper IPMI message handler obtains the initial...

CVE-2026-81005

In the Linux kernel, the following vulnerability has been resolved: ipmi: si: Fix NULL pointer dereference after failed registration trysmiinit allocates newsmi-sism and later calls ipmiregistersmimod, which maps to ipmiaddsmi. During ipmiaddsmi, the upper IPMI message handler obtains the initial...

DEBIAN-CVE-2026-81005

In the Linux kernel, the following vulnerability has been resolved: ipmi: si: Fix NULL pointer dereference after failed registration trysmiinit allocates newsmi-sism and later calls ipmiregistersmimod, which maps to ipmiaddsmi. During ipmiaddsmi, the upper IPMI message handler obtains the initial...

CVE-2026-81006

In the Linux kernel, the following vulnerability has been resolved: ipmi: Remove all sysfs files on registration failure ipmiaddsmi creates the nrusers and nrmsgs files before trying to create the maintenancemode file. If that last creation fails, the error path removes only nrusers before droppi...

DEBIAN-CVE-2026-80992

In the Linux kernel, the following vulnerability has been resolved: net: ravb: avoid dereferencing an invalid PTP clock The PTP clock is unavailable before the first open, so querying its index can dereference a NULL pointer. Registration failures can also leave an error pointer in priv-ptp.clock...

EUVD-2026-76652

In the Linux kernel, the following vulnerability has been resolved: serial: imx: serialize imxuartports lifetime imxuartprobe publishes its devm-allocated port in imxuartports before uartaddoneport because console setup uses the table. The entry is not cleared when adding the port fails or after...

CVE-2026-89740

CVE-2026-89740 is a dangling pointer vulnerability in the Linux kernel's imx UART (serial) driver . imx_uart_probe() publishes its devm-allocated port in the imx_uart_ports[] table before calling uart_add_one_port(), but the entry is not cleared on failure or after removal, leaving a stale pointe...