Chimera

Chimera Hardware Emulation & Proximity Exploitation Why Hak5 gear is heavy and obvious. My phone has a full Linux kernel in it, so I made it do the same job — HID emulation, RNDIS, mass storage, the whole thing — straight through ConfigFS. No extra hardware. No cables dangling out of a bag. Plug...

tap-ducky

TapDucky - Android USB HID Keystroke Injector TapDucky - Android USB HID Keystroke Injector Open-source DuckyScript runner for rooted Android with USB Gadget ConfigFS support TapDucky lets you create, customize, schedule, and run DuckyScript on Android by emulating a USB keyboard, mouse, or...

AutoGadgetFS

Ethereum Donations : 0xA919e40ddB0563918dDc174320D91992e0048477 Table of Contents 1. What's AutoGadgetFS ? 2. Requirments 3. The Setup a. Device testing only b. Minimal agfs in the middle setup c. Complete agfs in the middle setup with debugging support 4. USB Device class support 5. Capabilities...

Rocky Linux 9.6 [TuxCare] Security Update: kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1779434490)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779434490 advisory. - In the Linux kernel, the following vulnerability has been resolved: configfs: fix a race in configfs,unregistersubsystem When...

CVE-2026-97950

A flaw was found in the Linux kernel's configfs filesystem. A local user could exploit a race condition between creating a symbolic link and deleting its target directory to cause a Denial of Service DoS. When this race condition occurs, the kernel attempts to access a freed directory entry, whic...

CVE-2026-97949

A flaw was found in the Linux kernel's configfs filesystem. A race condition between directory removal and symbolic link creation can result in a use-after-free vulnerability, where the system attempts to access memory after it has been released. A local user can exploit this flaw by concurrently...

DEBIAN-CVE-2026-97949

In the Linux kernel, the following vulnerability has been resolved: configfs: unhash the dentry before dropping the item in rmdir configfsgetconfigitem treats a hashed dentry as proof that sd-selement is a live configitem. configfsrmdir breaks that: simplermdir leaves the dentry hashed, the last...

AZL-104555 CVE-2026-97949 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: configfs: unhash the dentry before dropping the item in rmdir configfsgetconfigitem treats a hashed dentry as proof that sd-selement is a live configitem. configfsrmdir breaks that: simplermdir leaves the dentry hashed, the last...

CVE-2026-97950

In the Linux kernel, the following vulnerability has been resolved: configfs: pin the symlink target's dirent instead of chasing -cidentry createlink reads the target's configfsdirent from item-cidentry-dfsdata, relying on the item reference taken by gettarget. That reference pins the item, not i...

DEBIAN-CVE-2026-97950

In the Linux kernel, the following vulnerability has been resolved: configfs: pin the symlink target's dirent instead of chasing -cidentry createlink reads the target's configfsdirent from item-cidentry-dfsdata, relying on the item reference taken by gettarget. That reference pins the item, not i...

AZL-104570 CVE-2026-97950 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: configfs: pin the symlink target's dirent instead of chasing -cidentry createlink reads the target's configfsdirent from item-cidentry-dfsdata, relying on the item reference taken by gettarget. That reference pins the item, not i...

CVE-2026-97949

In the Linux kernel, the following vulnerability has been resolved: configfs: unhash the dentry before dropping the item in rmdir configfsgetconfigitem treats a hashed dentry as proof that sd-selement is a live configitem. configfsrmdir breaks that: simplermdir leaves the dentry hashed, the last...

UBUNTU-CVE-2026-97950

In the Linux kernel, the following vulnerability has been resolved: configfs: pin the symlink target's dirent instead of chasing -cidentry createlink reads the target's configfsdirent from item-cidentry-dfsdata, relying on the item reference taken by gettarget. That reference pins the item, not i...

UBUNTU-CVE-2026-97949

In the Linux kernel, the following vulnerability has been resolved: configfs: unhash the dentry before dropping the item in rmdir configfsgetconfigitem treats a hashed dentry as proof that sd-selement is a live configitem. configfsrmdir breaks that: simplermdir leaves the dentry hashed, the last...

CVE-2026-97950

The Linux kernel contains a vulnerability in configfs where create_link() incorrectly relies on an item reference that pins the item but not its dentry. A race condition between a symlink creation and an rmdir of its target can cause configfs_remove_dir() to release the dentry via simple_rmdir() ...

CVE-2026-97949 configfs: unhash the dentry before dropping the item in rmdir

In the Linux kernel, the following vulnerability has been resolved: configfs: unhash the dentry before dropping the item in rmdir configfsgetconfigitem treats a hashed dentry as proof that sd-selement is a live configitem. configfsrmdir breaks that: simplermdir leaves the dentry hashed, the last...

CVE-2026-97949 configfs: unhash the dentry before dropping the item in rmdir

In the Linux kernel, the following vulnerability has been resolved: configfs: unhash the dentry before dropping the item in rmdir configfsgetconfigitem treats a hashed dentry as proof that sd-selement is a live configitem. configfsrmdir breaks that: simplermdir leaves the dentry hashed, the last...

EUVD-2026-86804

In the Linux kernel, the following vulnerability has been resolved: configfs: pin the symlink target's dirent instead of chasing -cidentry createlink reads the target's configfsdirent from item-cidentry-dfsdata, relying on the item reference taken by gettarget. That reference pins the item, not i...

EUVD-2026-86803

In the Linux kernel, the following vulnerability has been resolved: configfs: unhash the dentry before dropping the item in rmdir configfsgetconfigitem treats a hashed dentry as proof that sd-selement is a live configitem. configfsrmdir breaks that: simplermdir leaves the dentry hashed, the last...

CVE-2026-97949

The Linux kernel contains a vulnerability in configfs where configfs_rmdir() fails to unhash a dentry before dropping the item. This creates a race condition because configfs_get_config_item() relies on the hashed state as proof of a live item, but simple_rmdir() only unhashes the dentry via d_de...