SUSE CVE-2026-72238

In the Linux kernel, the following vulnerability has been resolved: x86/boot: Validate console=uart8250 baud rate to fix early boot hang When the baud rate is empty, 0, invalid, or overflows to 0 when stored as an int, the system will hang during early boot because of a division by zero in...

The vulnerability of the uncore_discoverypci() function in the arch/x86/events/intel/uncore_discovery.c module of the Linux operating system’s x86 kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the uncorediscoverypci function in the arch/x86/events/intel/uncorediscovery.c module of the Linux operating system’s x86 kernel is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2026-80663

In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile open Avoid symlink-based pidfile clobbering by opening the pidfile with ONOFOLLOW and validating it with fstat before locking/writing. The daemon currently uses a fixed...

CVE-2026-80602: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/lbr: Fix kernel address leakage A user-only branch stack can contain branches that originate from the kernel. As a result, kernel addresses are exposed to user space even when PERFSAMPLEBRANCHUSER is requested. On AM...

The vulnerability of the vcpu_block() function in the arch/x86/kvm/x86.c module of the virtualization subsystem on the x86 architecture of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the vcpublock function in the arch/x86/kvm/x86.c module of the virtualization subsystem on the x86 architecture of the Linux operating system is related to incorrect checks for consistency in input data. Exploiting this vulnerability could allow an attacker to cause a service...

USN-8661-3: Linux kernel vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

curl: 37: `curl_mprintf` `%F` format specifier not consumed, causing variadic argument desynchronization

Summary docs/libcurl/curlmprintf.md documents %F as a conversion that consumes a double, alongside %f. However, parseconversion in lib/mprintf.c has no F case — it falls through to the default branch and returns without assigning an input slot. In a sequential format like "%F%s", the %s conversio...

curl: 34: `curl_mprintf` reads `double` for documented `long double` conversions — uninitialized value disclosure

Summary docs/libcurl/curlmprintf.md documents that the L length modifier makes floating-point conversions %f, %e, %E, %g, %G accept a long double argument. The implementation in lib/mprintf.c recognizes L and sets FLAGSLONGDOUBLE, but the conversion switch %f/%e/%E/%g/%G unconditionally selects...

ish builds/813

iSH A project to get a Linux shell running on iOS, using usermode x86 emulation and syscall translation. For the current status of the project, check the issues tab, and the commit logs. App Store page TestFlight beta Discord server Wiki with help and tutorials README中文 如若未能保持最新，请提交PR以更新 Hacking...

binary-exploitation-mitigation-bypass-lab-v2

binary-exploitation-mitigation-bypass-lab Four vulnerable x86...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098882)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098882 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected role Commit 0cb2af2ea66ad KVM: x86:...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098759)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098759 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer When advancing the...

ROS-20260826-73-0012

The vulnerability of the initbiosattributes function in the drivers/platform/x86/dell/dell-wmi-sysman/sysman.c file of the Linux kernel device driver for X86 processors is related to errors during link update. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098768)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098768 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O When completing emulation of...

MiracleLinux 9 : kernel-5.14.0-687.24.1.el9_8 (AXSA:2026-1649:67)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1649:67 advisory. kernel: net/sched: ets: Always remove class from active list before deleting in etsqdiscchange CVE-2025-71066 kernel: KVM: x86: Fix shadow paging...

Ubuntu 26.04 LTS : Linux kernel vulnerabilities (USN-8660-1)

The remote Ubuntu 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8660-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098688)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098688 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: x86/aegis - Add missing error checks The skcipherwalk functions can allocate memory and c...

USN-8630-5 linux-raspi, linux-raspi-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Mellanox network drivers; - File systems infrastructur...

ROS-20260825-73-0025

The vulnerability of the nestedvmcb02preparecontrol function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a attacker to cau...

The vulnerability of the setup_lass() function in the arch/x86/kernel/cpu/common.c module, which is part of the Linux operating system’s x86 kernel support, allows a hacker to trigger a service failure.

The vulnerability of the setuplass function in the arch/x86/kernel/cpu/common.c module, which is part of the Linux operating system’s x86 kernel support, is related to errors in system configuration or settings. Exploiting this vulnerability can allow an attacker to cause a service failure...