Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In binder.c, there is a potential way to corrupt memory due to a use after free. This could lead to a local escalation of privileges without the need for additional execution privileges. User interaction is not required for exploitation. Product: Android Versions: Android kernel Android ID:...

Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access

Security researchers at SSD Secure Disclosure have published a two-stage exploit chain that achieves full Android kernel access on devices running Unisoc modem firmware through a VoLTE video call, with no fix from the chipset maker. The advisory, published August 17, 2026, is the second stage of ...

Black Hat Asia 2024 Conference Slides

Black Hat Asia 2024 conference slides for topics Confused Learning: Supply Chain Attacks through Machine Learning Models, The Fault in Our Metrics: Rethinking How We Measure Detection & Response, The Hack@DAC Story: Learnings from Organizing the World's Largest Hardware Hacking Competition, The...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock — CVE-2026-43499 PoC Qualcomm 4.19 kernel Local p...

Exploit for Use After Free in Arm Bifrost_Gpu_Kernel_Driver

Aristotle ADB Enable A minimal Android app that turns on AD...

📄 Android Kernel /dev/umts_ipc0 Out-Of-Bounds Read / Write

Proof of concept exploit targeting a vulnerability in an Android kernel driver related to GNSS/UMTS IPC /dev/umtsipc0. ================================================================================================================================== | Title : Android Kernel Exploit OOB Read/Write...

Astra Linux – Vulnerability in Linux 5.10

In TBD of TBD, there is a potential use-after-free due to a race condition. This could lead to a local escalation of privileges in the kernel, as execution privileges are required. User interaction is not necessary for exploitation. Product: Android Versions: Android kernel Android ID: A-21951397...

NewStart CGSL MAIN 6.06 (SP) : linux-firmware Multiple Vulnerabilities (NS-SA-2026-0017)

The remote NewStart CGSL host, running version MAIN 6.06 SP, has linux-firmware packages installed that are affected by multiple vulnerabilities: - Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the Broadpwn issue. CVE-2017-9417 - A remo...

The vulnerability of the Android operating system’s kernel, which allows a hacker to disclose protected information

The vulnerability of Android operating system kernels is related to key management errors. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001154)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001154 advisory. In driveroverridestore and driveroverrideshow of bus.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege wit...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004302)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004302 advisory. Product: AndroidVersions: Android kernelAndroid ID: A-127973231References: Upstream kernel Tenable has extracted the preceding description block directly from the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004058)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004058 advisory. Product: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernel Tenable has extracted the preceding description block directly from the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003640)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003640 advisory. In taskgetunusedfdflags of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no addition...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003634)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003634 advisory. In skclonelock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001644)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001644 advisory. In hiddebugeventsread of drivers/hid/hid-debug.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004038)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004038 advisory. Product: AndroidVersions: Android kernelAndroid ID: A-127973231References: Upstream kernel Tenable has extracted the preceding description block directly from the...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004324)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004324 advisory. In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with ...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004429)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004429 advisory. In the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due to seccomp policies that allow the use of ptrace. This could lead t...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003628)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003628 advisory. In skclonelock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001022)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001022 advisory. An elevation of privilege vulnerability in the kernel networking subsystem could enable a local malicious application to execute arbitrary code within the context of...