DEBIAN-CVE-2026-89998

In the Linux kernel, the following vulnerability has been resolved: dm: fix race when loading and unloading a table If the userspace calls two concurrent table load ioctls and one of them succeeds and the other fails, there is a race condition because dmsetupmdqueue walks &md-tabledevices without...

CVE-2026-89955

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix NULL deref in statusshow during queue probe When vfioapmdevprobequeue creates the sysfs attribute group, the queue's driver data has not yet been set. A concurrent read of the 'status' attribute can therefore ca...

EUVD-2026-80628

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: fix NULL pointer dereference in gadgetdevioctl gadgetdevioctl reads dev-gadget before acquiring dev-lock, but dev-state is checked after acquiring the lock. Therefore a concurrent bind can change the device state...

CVE-2026-90020 USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: fix NULL pointer dereference in gadgetdevioctl gadgetdevioctl reads dev-gadget before acquiring dev-lock, but dev-state is checked after acquiring the lock. Therefore a concurrent bind can change the device state...

CVE-2026-89998

This Linux kernel vulnerability affects the Device Mapper (dm) subsystem. A race condition occurs when userspace issues two concurrent table-load ioctls where one succeeds and the other fails: dm_setup_md_queue walks &md->table_devices without holding a lock, racing against dm_table_destroy → ...

CVE-2026-89788 ksmbd: fix tree connection use-after-free in smb2_tree_connect()

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix tree connection use-after-free in smb2treeconnect ksmbdtreeconnconnect publishes a new tree connection in sess-treeconns with a single reference and returns its pointer to smb2treeconnect. The handler continues to...

CVE-2026-89788

CVE-2026-89788 is a use-after-free vulnerability in the Linux kernel's ksmbd (SMB server) subsystem, specifically in smb2_tree_connect() (fs/smb/server/smb2pdu.c). A race condition exists where ksmbd_tree_conn_connect() publishes a new tree connection with a single reference, but a concurrent ses...

CVE-2026-89774 Bluetooth: SCO: hold sk properly in sco_conn_ready

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: hold sk properly in scoconnready sk deref in scoconnready must be done either under conn-lock, or holding a refcount, to avoid concurrent close. conn-sk and parent sk is currently accessed without either, and...

cpra

Continuous Pulse and Recovery Agent Checks services, sends alerts, and runs the recovery actions you configure. CPRa is a self-hosted monitoring and recovery agent written in Go. It runs health checks against your services on a schedule, opens and closes incidents against configurable thresholds,...

CVE-2026-12352

CVE-2026-12352 Краткое описание В Digi PortServer TS 4 H MEI обнаружен неаутентифицированный обход аутентификации, вызванный нагрузкой, позволяющий получить локальный файл конфигурации устройства без действительных учётных данных. При повышенной нагрузке от одновременных запросов веб-сервер...

CVE-2025-14847

📝 MongoDB Scanner – Инструкция по запуску Имя скрипта mongoexposurescanner.py 1. Предварительные требования Python 3.9+ Сетевой доступ к целевым хостам Утверждённый диапазон для сканирования Проверка Python: root@kitploit: python3 --version 2. Используемые файлы Файл| Назначение ---|---...

erlvulnscan

Веб-сканер с параллельным выполнением для CVE-2015-1635. Рабочая реализация здесь. Этот демонстрационный сайт используется для разработки этого проекта, и его стабильность не гарантируется. Информация об этом проекте написана здесь. Поскольку список «TODO», задокументированный там, выполнен, этот...

UBUNTU-CVE-2026-91947

GHSA-6mpx-c8rj-whj5: FreeRDP server DRDYNVC parser use-after-free during concurrent channel close...

CVE-2026-91947

GHSA-6mpx-c8rj-whj5: FreeRDP server DRDYNVC parser use-after-free during concurrent channel close...

Linux Distros Unpatched Vulnerability : CVE-2026-89998

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm: fix race when loading and unloading a table If the userspace calls two concurrent table load ioctls and one of them succeeds and the other fails, there is a...

Linux Distros Unpatched Vulnerability : CVE-2026-90020

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: gadget: fix NULL pointer dereference in gadgetdevioctl gadgetdevioctl reads dev-gadget before acquiring dev-lock, but dev-state is checked after acquiring...

http2-rst-stream-attacker

CVE-2023-44487 и http2-rst-stream-attacker CVE-2023-44487 CVE-2023-44487 — это эксплойт против самого протокола HTTP2. В HTTP2 запросы данных инициируются отправкой кадра HEADERS. После получения этого кадра сервер начинает обработку вашего запроса, затем отправляет кадры DATA, пока все данные не...

CVE-2026-53715

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, HTTPServer.ServeHTTP in internal/wasm/httpserver.go reads the plain mappingPath2Cache map without synchronization while HTTPServer.Get writes the sam...

CVE-2026-53715 Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, HTTPServer.ServeHTTP in internal/wasm/httpserver.go reads the plain mappingPath2Cache map without synchronization while HTTPServer.Get writes the sam...

CVE-2026-53715 Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, HTTPServer.ServeHTTP in internal/wasm/httpserver.go reads the plain mappingPath2Cache map without synchronization while HTTPServer.Get writes the sam...