EUVD-2026-93159

In the Linux kernel, the following vulnerability has been resolved: xfrm: serialize state GC with device state flush The deferred-device pass in xfrmdevstateflush finds states under xfrmstatedevgclock, but drops the lock before calling xfrmdevstatefree because the driver callback may sleep. The...

CVE-2026-98219

The Linux kernel contains a vulnerability in the sched_ext component where a race condition exists during the transition to the SCX_ENABLING state. Specifically, the scx_alloc_and_add_sched() function publishes ops->priv before scx_root_enable_workfn() switches the state. An error claimed via ...

EUVD-2026-93147

In the Linux kernel, the following vulnerability has been resolved: schedext: Close the pre-enable ops error claim window scxallocandaddsched publishes ops-priv before scxrootenableworkfn switches the state to SCXENABLING. An error claimed via scxbpferrorbstr from an associated BPF program in tha...

CVE-2026-98200 hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show()

In the Linux kernel, the following vulnerability has been resolved: hwmon: hp-wmi-sensors Fix use-after-free in fungibleshow nsensor-currentstate is dynamically replaced as the sensor's state changes. updatenumericsensorfromwobj does this by freeing the old string and installing a new one: if...

CVE-2026-98174 smb: client: fix rlist race and missing initialization

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix rlist race and missing initialization TCPServerInfo.rlist is allocated via kzalloc which zeros both -next and -prev to NULL instead of pointing to itself, making listempty always return false and listadd...

EUVD-2026-93102

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix rlist race and missing initialization TCPServerInfo.rlist is allocated via kzalloc which zeros both -next and -prev to NULL instead of pointing to itself, making listempty always return false and listadd...

CVE-2026-98174 smb: client: fix rlist race and missing initialization

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix rlist race and missing initialization TCPServerInfo.rlist is allocated via kzalloc which zeros both -next and -prev to NULL instead of pointing to itself, making listempty always return false and listadd...

CVE-2026-98174

The Linux kernel contains a vulnerability in the smb client due to a race condition and missing initialization. Specifically, TCP_Server_Info.rlist is allocated via kzalloc, which incorrectly sets ->next and ->prev to NULL instead of pointing to the node itself; this causes list_empty() to ...

Security update for the Linux Kernel (Live Patch 57 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.228 fixes various security issues: The following security issues were fixed: CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd bsc1272391. CVE-2026-63917: ip6: vti: Use ip6tnl.net in...

Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.16 fixes various security issues: The following security issues were fixed: CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc1272283...

SUSE-SU-2026:4518-1 Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.16 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. - CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc127228...

RLSA-2026:75747 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition CVE-2025-39994 kernel: gfs2: Fix unlikely race in gdlmputlock CVE-2025-40242 kernel: Linux kernel: Denial of...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

MiniPlasma

MiniPlasma Après avoir réexaminé la technique utilisée dans GreenPlasma notamment SetPolicyVal, il s'avère que cldflt!HsmOsBlockPlaceholderAccess est toujours vulnérable au même problème qui avait été signalé à Microsoft il y a 6 ans. Je ne revendique pas tout le mérite de cette découverte : Jame...

Exploit-Chain-CVE-2025-6018-6019

https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt This exploit chains CVE-2025-6018 and CVE-2025-6019 to achieve local privilege escalation from an unprivileged user to root on vulnerable SUSE/openSUSE systems. CVE-2025-6018 is a PAM Pluggable Authentication Modules environment variabl...

CVE-2025-5777

Эксплойт для CVE-2025-5777: Утечка памяти Citrix NetScaler CitrixBleed 2 T1606 Отказ от ответственности Предназначено только для авторизованного использования. Ваша ответственность — убедиться в наличии авторизации перед использованием. Я не несу ответственности за любые судебные или уголовные...

CVE-2021-3560-Polkit-Privilege-Escalation

CVE-2021-3560-Polkit-Privilege-Escalation by Mark, Qingchen Yu Для сборки контейнера с помощью docker build -t . Для запуска контейнера docker run -it 1. начните с start.sh 2. Измерьте время выполнения: Запомните время 'real' и вычислите его половину. time dbus-send --system...

CVE-2024-6387

0. 요약 이는 본질적으로 통계적 취약점입니다. 경쟁 조건을 이기고 임의 코드 실행에 성공하려면 많은 시도가 필요하며, 공격자는 많은 장애물을 극복해야 합니다.”라고 Schwartz는 SecurityWeek에 말했습니다. “최상의 경우에도 가장 잘 알려진 취약점은 실행하는 데 4시간 이상이 걸립니다.” OpenSSH 9.8 릴리스 노트에서 개발자는 이 취약점이 glibc 기반 32비트 Linux 시스템에서만 확인되었으며, OpenBSD는 영향을 받지 않는다고 밝혔습니다. 1. 환경 설정 환경 설정은 Docker를 사용합니다...

Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_57251)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202657251 advisory. kernel: drm/amdkfd: Fix out-of-bounds write in kfdeventpageset CVE-2026-43206 kernel: drm/amdgpu: Refactor amdgpugemvaioctl for Handling Last Fence...

Linux Distros Unpatched Vulnerability : CVE-2026-98174

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: fix rlist race and missing initialization TCPServerInfo.rlist is allocated via kzalloc which zeros both -next and -prev to NULL instead of pointing...