ved-ebpf

VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF VED Vault Exploit Defense-eBPF leverages eBPF extended Berkeley Packet Filter to implement runtime kernel security monitoring and exploit detection for Linux systems. Introduction eBPF is an in-kernel virtual machine that allows code...

ved-ebpf

VED-eBPF: Detección de Exploits y Rootkits del Kernel usando eBPF VED Vault Exploit Defense-eBPF aprovecha eBPF extended Berkeley Packet Filter para implementar monitoreo de seguridad del kernel en tiempo de ejecución y detección de exploits para sistemas Linux. Introducción eBPF es una máquina...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: s390/netiucv: Fixed the return type of netiucvtx With Clang’s Kernel Control Flow Integrity kCFI, CONFIGCFICLANG feature, indirect call targets are validated against the expected function pointer prototype to ensure that the call...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: Fixed the return type of netcpndostartxmit With Clang’s Kernel Control Flow Integrity kCFI, CONFIGCFICLANG, indirect call targets are validated against the expected function pointer prototype to ensure that the...

CVE-2026-102711

Two issues in the ThreadX loadable-module loader, reached when a device loads an attacker-controlled module object via txmmodulemanagermemoryload / txmmodulemanagerinplaceload — APIs that take ONLY a base pointer, no image length, so every size/offset field in TXMMODULEPREAMBLE is fully...

CVE-2026-102711

Two issues in the ThreadX loadable-module loader, reached when a device loads an attacker-controlled module object via txmmodulemanagermemoryload / txmmodulemanagerinplaceload — APIs that take ONLY a base pointer, no image length, so every size/offset field in TXMMODULEPREAMBLE is fully...

EUVD-2026-89174

Two issues in the ThreadX loadable-module loader, reached when a device loads an attacker-controlled module object via txmmodulemanagermemoryload / txmmodulemanagerinplaceload — APIs that take ONLY a base pointer, no image length, so every size/offset field in TXMMODULEPREAMBLE is fully...

CVE-2026-102711

The ThreadX loadable-module loader contains two issues triggered when a device loads an attacker-controlled module via the _txm_module_manager_memory_load or _txm_module_manager_in_place_load APIs. Because these APIs accept only a base pointer without an image length, fields in TXM_MODULE_PREAMBL...

PT-2026-102759

Two issues in the ThreadX loadable-module loader, reached when a device loads an attacker-controlled module object via txm module manager memory load / txm module manager in place load — APIs that take ONLY a base pointer, no image length, so every size/offset field in TXM MODULE PREAMBLE is full...

CVE-2026-102711: Out-of-bounds Read

Two issues in the ThreadX loadable-module loader, reached when a device loads an attacker-controlled module object via txmmodulemanagermemoryload / txmmodulemanagerinplaceload — APIs that take ONLY a base pointer, no image length, so every size/offset field in TXMMODULEPREAMBLE is fully...

PT-2026-94654

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ARM architecture implementation where the hw breakpoint cfi handler stub incorrectly claims breakpoint type 0x03 ARM ENTRY CFI BREAKPOINT even when Control Flow...

PT-2026-94794

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subprograms where a Control Flow Integrity CFI mismatch occurs during task work callbacks. While BPF subprograms utilize the bpf callback t ABI, task work...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: s390/lcs: Fixed the return type of lcsstartxmit With Clang’s Kernel Control Flow Integrity kCFI, CONFIGCFICLANG, indirect call targets are validated against the expected function pointer prototype to ensure that the call target i...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/sti: The return type of stidvo,hda,hdmiconnectormodevalid has been corrected. With Clang’s Kernel Control Flow Integrity kCFI, CONFIGCFICLANG, indirect call targets are validated against the expected function pointer...

Unity Linux 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-105436)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105436 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: Fix return type of netcpndostartxmit With clang's kernel control flow integrit...

MGASA-2026-0352 Updated expat & mingw-expat packages fix security vulnerabilities

Missing control flow integrity checks. CVE-2026-50219 Missing control flow integrity checks. CVE-2026-56131 Out-of-bounds write. CVE-2026-56132 Integer overflow. CVE-2026-56403 Integer overflow. CVE-2026-56404 Integer overflow. CVE-2026-56405 Integer overflow. CVE-2026-56406 Integer overflow...

Updated expat & mingw-expat packages fix security vulnerabilities

Missing control flow integrity checks. CVE-2026-50219 Missing control flow integrity checks. CVE-2026-56131 Out-of-bounds write. CVE-2026-56132 Integer overflow. CVE-2026-56403 Integer overflow. CVE-2026-56404 Integer overflow. CVE-2026-56405 Integer overflow. CVE-2026-56406 Integer overflow...

ROLoad-PMP: Securing Sensitive Operations for Kernels and Bare-Metal Firmware

A common way for attackers to compromise victim systems is hijacking sensitive operations e.g., control-flow transfers with attacker-controlled inputs. Existing solutions in general only protect parts of these targets and have high performance overheads, which are impractical and hard to deploy o...

SUSE CVE-2026-53099

In the Linux kernel, the following vulnerability has been resolved: bpf: Switch CONFIGCFICLANG to CONFIGCFI This was renamed in commit 23ef9d439769 "kcfi: Rename CONFIGCFICLANG to CONFIGCFI" as it is now a compiler-agnostic option. Using the wrong name results in the code getting compiled out...

CVE-2026-53099

A flaw was found in the Linux kernel. The issue arises from an incorrect configuration option for Control-Flow Integrity CFI, a security mechanism designed to prevent certain types of attacks. Due to a naming change, the CFI code was not properly compiled, leading to its intended protections not...