CVE-2026-98051

The Linux kernel contains a vulnerability in the bcmasp networking component within the tx_spb_ring_full() function. The root cause is an improper loop initialization where next_index was reset on every iteration, causing the function to repeatedly test the same descriptor slot instead of checkin...

CVE-2026-98041

The Linux kernel contains a vulnerability where the is_branch_taken() function fails to distinguish between BPF_JMP and BPF_JMP32 comparisons. Specifically, when processing a comparison such as if w1 != 0, the system incorrectly reports the jump as always taken. This issue occurs because the kern...

CVE-2026-98041 bpf: Don't predict JMP32 pointer vs zero comparisons

In the Linux kernel, the following vulnerability has been resolved: bpf: Don't predict JMP32 pointer vs zero comparisons Consider the following program: r1 = mapvalue; / low 32 bits are zero at runtime / r6 = 0xdead000000000000; if w1 != 0 goto l1; l0: r1 += r6; r2 = u64 r1 + 0; exit; l1: r6 = 0;...

EUVD-2026-86694

In the Linux kernel, the following vulnerability has been resolved: bpf: Don't predict JMP32 pointer vs zero comparisons Consider the following program: r1 = mapvalue; / low 32 bits are zero at runtime / r6 = 0xdead000000000000; if w1 != 0 goto l1; l0: r1 += r6; r2 = u64 r1 + 0; exit; l1: r6 = 0;...

CVE-2026-98002 iommu/amd: Fix ineffective error check in nested domain allocation

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix ineffective error check in nested domain allocation amdiommupdomidalloc returns an int: a domain ID on success, or the negative errno from idaallocrange when the ID space is exhausted or memory is short...

CVE-2026-98002

The Linux kernel contains a vulnerability in the iommu/amd component due to an ineffective error check during nested domain allocation. The function amd_iommu_pdom_id_alloc() returns an int , which can be a negative errno (such as -ENOSPC) if the ID space is exhausted or memory is short. However,...

EUVD-2026-86655

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix ineffective error check in nested domain allocation amdiommupdomidalloc returns an int: a domain ID on success, or the negative errno from idaallocrange when the ID space is exhausted or memory is short...

EUVD-2026-86827

In the Linux kernel, the following vulnerability has been resolved: net: macb: destroy the phylink instance on the probe error path macbmiiinit creates a phylink instance on both of its success paths, but the probe unwind frees the netdev without destroying it, so a failing macballoctieoff or...

CVE-2026-97914

In the Linux kernel , a vulnerability was identified in the ethosu accelerator component within the ethosu_job_open() function. The issue occurred because a WARN_ON() macro returned a 0 or 1 instead of the original negative error code (errno), potentially leading to incorrect error reporting to u...

EUVD-2026-86768

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Fix ethosujobopen return value A WARNON returns a 0 or 1, not the original negative errno. Just drop the WARNON as the FD open will pass the return code to userspace and there's only one possible source of the erro...

EUVD-2026-86748

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Check resizedisabled before publishing the new subbuf order ringbuffersubbuforderset stores the new order and only then walks the CPUs, returning -EBUSY if any of them has resizing disabled. A user mapped buffer has...

CVE-2026-97588

The Linux kernel contains a vulnerability in the s390/crypto component where persistent -EBUSY errors from hardware during key conversion result in the error being swallowed by the crypto API's completion wrapper. Because the wrapper treats -EBUSY as a queueing status, the completion callback fai...

CVE-2026-97552

The Linux kernel contains a vulnerability in the xfs filesystem where xfs_defer_finish_one() declares an error variable without an initialiser. If the dfp->dfp_work list is empty, the loop body is skipped, and the function returns an indeterminate value . This occurs when xfs_reap_ag_blocks() ...

CVE-2026-97550

The Linux kernel contains a logic error in the xfs filesystem regarding per_binval computation. The vulnerability stems from performing unit conversions in the wrong direction: the second parameter of xfs_buf_inval_log_space is expected in bytes , while max_binval is measured in fsblocks . This r...

EUVD-2026-86842

In the Linux kernel, the following vulnerability has been resolved: f2fs: accurately adjust freesections during freesegmentrange In freesegmentrange, MAINSECSsbi is temporarily reduced by secs to restrict block allocation to the safe remaining main area while valid blocks in the truncated range a...

CVE-2026-97534

The Linux kernel contains a vulnerability in the f2fs filesystem related to how it handles free_sections during free_segment_range(). When restricting block allocation to a safe main area during Garbage Collection (GC), the system fails to deduct already-free sections within the truncated range f...

EUVD-2026-86830

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix bad accounting in mptcpsubflowpushpending If subflowpushpending errors out we should avoid updating the copied byte counters, to avoid mismatch push call later on...

wotop

Web-On-Top-Of-Protocol WOTOP root@kitploit: ██╗ ██╗ ██████╗ ████████╗ ██████╗ ██████╗ ██║ ██║██╔═══██╗╚══██╔══╝██╔═══██╗██╔══██╗ ██║ █╗ ██║██║ ██║ ██║ ██║ ██║██████╔╝ ██║███╗██║██║ ██║ ██║ ██║ ██║██╔═══╝ ╚███╔███╔╝╚██████╔╝ ██║ ╚██████╔╝██║ ╚══╝╚══╝ ╚═════╝ ╚═╝ ╚═════╝ ╚═╝ Introduction WOTOP is a...

CVE-2021-30357_CheckPoint_SNX_VPN_PoC

CVE-2021-30357CheckPointSNXVPNPoC Proof-of-Concept for privileged file read through CheckPoint SNX VPN Linux Client. Affected Version CheckPointVPNSNXLinux800007075.sh MD5 Checksum: 4372e9936e2dfb1d1ebcef3ed4dd7787 Exploit To exploit just load any file as SNX config using the -f paremeter. If the...

PoC-in-GitHub

PoC en GitHub 2026 CVE-2026-0009 2026-06-01 En múltiples ubicaciones, existe un posible tapjacking debido a un error lógico en el código. Esto podría provocar una escalada local de privilegios sin necesidad de privilegios de ejecución adicionales. No se necesita interacción del usuario para la...