CVE-2026-74744

A flaw was found in the Linux kernel's ipvlan component. The ipvlan devices do not properly inherit neededheadroom and neededtailroom from the physical device phydev. This can lead to insufficient space being reserved for packet headers and trailers, potentially causing memory corruption, such as...

CVE-2026-74753

A flaw was found in the Linux kernel's performance monitoring perf subsystem. This vulnerability allows a local attacker to trigger a use-after-free condition by improperly handling exited events as group leaders. Successful exploitation could lead to a system crash, resulting in a denial of...

CVE-2026-20687-AppleJPEGDriver-UAF

CVE-2026-20687 — AppleJPEGDriver startDecoder Timeout UAF CVE-2026-20687 · Enfilade · enfilade.io Komponente: Kernel Auswirkung: Eine App könnte einen unerwarteten Systemabsturz verursachen oder Kernel-Speicher beschreiben. Beschreibung: Ein Use-after-Free-Problem wurde durch verbessertes...

CVE-2026-20637-AppleSEPKeyStore-UAF

CVE-2026-20637 — Use-After-Free in AppleSEPKeyStore CVE-2026-20637 · Enfilade · enfilade.io Componente: AppleKeyStore Impatto: Un'app potrebbe essere in grado di causare una terminazione imprevista del sistema. Descrizione: Un problema di use-after-free è stato risolto con una migliore gestione...

EUVD-2026-66494

In the Linux kernel, the following vulnerability has been resolved: fbdev: clear fbinfo-mode before deleting a videomode fbsetvar can delete a mode from info-modelist when userspace passes FBACTIVATEINVMODE through FBIOPUTVSCREENINFO. The code checks that the mode being deleted is not the current...

EUVD-2026-66504

In the Linux kernel, the following vulnerability has been resolved: block: stop the timeout timer when releasing a never added disk diskrelease undoes blkmqinitallocatedqueue for a disk whose probe failed before adddisk, but it only calls blkmqexitqueue. Nothing there stops q-timeout, and that...

EUVD-2026-66468

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Cancel existing workqueues The initialization of the iowork and crwwork workqueues begs the question of whether they should be un-initialized. Add the corresponding cleanup tags in releasedev to ensure work isn't...

EUVD-2026-66471

In the Linux kernel, the following vulnerability has been resolved: mmc: atmel-mci: Fix use-after-free in atmciremove due to race condition In atmciprobe, &host-bhwork is bound with atmciworkfunc, and atmciinterrupt, atmcitimeouttimer and atmcidmacomplete can all queue this work on systembhwq. If...

EUVD-2026-66487

In the Linux kernel, the following vulnerability has been resolved: Input: byd - synchronize timer deletion before freeing private data byddisconnect uses timerdelete before freeing the driver's private data. This does not wait for a running bydcleartouch callback, which dereferences the private...

EUVD-2026-66587

In the Linux kernel, the following vulnerability has been resolved: afunix: Unlink sccentry in unixdeledge. Kyle Zeng reported that GC could free a dead SCC partially. The scenario is as follows: 1 Create two SCCs: X -. A B ^--' 2 Run the following concurrently: 2-1 send sk-B to sk-B from sk-X 2-...

EUVD-2026-66585

In the Linux kernel, the following vulnerability has been resolved: ovpn: finish crypto callback cleanup before peer release Crypto completion callbacks hold both key-slot and peer references. The peer reference pins the netdev, and dropping the last peer reference can let netdev unregistration a...

EUVD-2026-66583

In the Linux kernel, the following vulnerability has been resolved: perf: Reject exited events as group leaders perfeventremoveonexec sets remove-on-exec events to the EXIT state and detaches their group relationships. The event's file descriptor can remain open, however, and perfeventopen...

EUVD-2026-66446

In the Linux kernel, the following vulnerability has been resolved: xfs: avoid UAF on sc-tempip in xreptempfilecreate LOLLM noticed a potential UAF if the tempfile creation code fails after it set sc-tempip. Fix that...

EUVD-2026-66573

In the Linux kernel, the following vulnerability has been resolved: macvlan: inherit neededheadroom and neededtailroom from lowerdev macvlan devices inherit hardheaderlen from lowerdev during macvlaninit, but leave neededheadroom and neededtailroom set to 0. When the underlying lowerdev requires...

EUVD-2026-66574

In the Linux kernel, the following vulnerability has been resolved: ipvlan: inherit neededheadroom and neededtailroom from phydev ipvlan devices inherit hardheaderlen from phydev during ipvlaninit, but leave neededheadroom and neededtailroom set to 0. When the underlying phydev or stacked lower...

EUVD-2026-66576

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: publish GC-visible tuple last nfflowtableiterate only treats original-direction tuple nodes as owning entries. Publishing the original node first lets GC observe and free a flow while flowoffloadadd is still...

copy-fail-CVE-2026-31431-universal

CVE-2026-31431 - PoC UAF Splice AEAD AFALG Implementazione multi-linguaggio e compatibilità con versioni precedenti di Python. C exploit.c root@kitploit: gcc -o exploit exploit.c -O2 gcc -o exploit exploit.c -static -O2 ./exploit Testato su Ubuntu 20.04: Python exploit-python3-8-10.py Compatibile...

GhostLock-H80GT

Englisch | 中文 Honor 80 GT Privilege-Escalation-PoC: GhostLock CVE-2026-43499 Ein lokaler Privilege-Escalation-Exploit für das Honor 80 GT AGT-AN00 , CVE-2026-43499 — eine Use-after-Free-Schwachstelle im rtmutex-removewaiter-Pfad des Kernels — plus eine begleitende Lösung zum Laden des...

CVE-2026-23479

CVE-2026-23479 — Redis Use-After-Free RCE PoC 集合 HackSpeak 分发镜像。本仓库整合了三个公开 PoC/检测工具 ,代码与各上游一致。 ⚠️ 包含实际利用代码与检测工具 ;仅供安全研究、漏洞验证与授权测试使用,请在可销毁环境运行,勿对未授权系统使用。 漏洞简述 CVE-2026-23479 是 Redisredis-server的 Use-After-FreeUAF 漏洞,可导致远程代码执行RCE 。 根因 :unblockClientOnKeysrc/blocked.c未检查 processCommandAndResetClient...

ghostlock-custom

GhostLock Custom — CVE-2026-43499 适配版 针对 非 Android Linux 6.x ARM64 内核的 GhostLock CVE-2026-43499 提权利用。 内核特征 项目| 值 ---|--- 架构| ARM64 AArch64 VABITS| 39 KIMAGETEXTBASE| 0xffffffc008000000 内核版本| 6.x SELinux| 无 ashmem| 无 configfs| 无 编译 本地编译 需要交叉编译器 root@kitploit: make Android NDK 编译 root@kitploit: mak...