CVE-2024-21626-POC

CVE-2024-21626-POC Instruções de uso Apenas para fins educacionais/pesquisa. Qualquer ação não relacionada à educação/pesquisa é de sua própria responsabilidade. Uso root@kitploit: docker build . -t cve-2024-21626 docker run -it --rm cve-2024-21626 bash /poc.sh 另起一个terminal /bin/bash.copy Nota Os...

cve-2024-21626

CVE-2024-21626 Visão Geral Este repositório contém exemplos de código para uma aplicação vulnerável ao CVE-2024-21626, bem como um gadget eBPF para detectar tentativas de exploração. Este repositório foi criado como parte deste post no blog. O programa gadget usado para detectar esta...

cve-2024-21626-runc-1.1.11-escape

CVE-2024-21626 - runc Leaky Vessels परिचय फ़ील्ड| विवरण ---|--- CVE| CVE-2024-21626 प्रभावित घटक| runc ≤ 1.1.11 कमज़ोरी वर्ग| फ़ाइल डिस्क्रिप्टर रिसाव के माध्यम से कंटेनर एस्केप उपनाम| Leaky Vessels मूल कारण runc कंटेनर प्रक्रिया चलाने से पहले होस्ट फ़ाइलसिस्टम के कार्यशील निर्देशिका की ओर इशारा...

CVE-2026-74487

In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: restore write access when removing an entry Registering an entry with the MISCFMTOPENFILE flag opens the interpreter via openexec which denies write access to it for as long as the entry exists. Removing the entry...

CVE-2026-74484 binfmt_misc: don't let an 'F' entry pin its own instance

In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: don't let an 'F' entry pin its own instance An entry registered with 'F' opens its interpreter at registration time and holds that file until the entry is freed. Any entry nobody removes by hand only gets closed once...

CVE-2026-74484

In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: don't let an 'F' entry pin its own instance An entry registered with 'F' opens its interpreter at registration time and holds that file until the entry is freed. Any entry nobody removes by hand only gets closed once...

CVE-2026-74484 binfmt_misc: don't let an 'F' entry pin its own instance

In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: don't let an 'F' entry pin its own instance An entry registered with 'F' opens its interpreter at registration time and holds that file until the entry is freed. Any entry nobody removes by hand only gets closed once...

UBUNTU-CVE-2026-72218

In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlmfile refcount leak on cached nlmdofopen failure The cached-file path in nlmlookupfile reaches the found: label unconditionally, even when nlmdofopen fails. At that label result and file-fcount are updated before th...

GHSA-M6X2-4HHH-669J vulnerabilities

Vulnerabilities for packages: gnupg...

GO-2024-3162 vulnerabilities

Vulnerabilities for packages: vault...

GO-2025-4272 vulnerabilities

Vulnerabilities for packages: temporal...

SUSE-SU-2026:23173-1 Security update for libarchive

This update for libarchive fixes the following issues: - creating temporary files in the current working directory instead of the target directory can lead to file creation failures when the working directory is not writable bsc1254340. - file descriptor leak in the mtree parser cleanup path coul...

Security update for libarchive

This update for libarchive fixes the following issues: creating temporary files in the current working directory instead of the target directory can lead to file creation failures when the working directory is not writable bsc1254340. file descriptor leak in the mtree parser cleanup path could le...

SUSE-SU-2026:23062-1 Security update for libarchive

This update for libarchive fixes the following issues: - creating temporary files in the current working directory instead of the target directory can lead to file creation failures when the working directory is not writable bsc1254340. - file descriptor leak in the mtree parser cleanup path coul...

netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling

A flaw was found in Netty, a network application framework. A local attacker could exploit a vulnerability in the nettyunixsocketrecvFd function when handling SCMRIGHTS messages in Epoll or KQueue DomainSocketChannel with DomainSocketReadMode.FILEDESCRIPTORS enabled. Incorrect handling of file...

CVE-2026-54786

Wasmtime is a runtime for WebAssembly. All versions prior to 24.0.10; versions 25.0.0 through those before 36.0.11; versions 37.0.0 through those before 44.0.3; and versions 45.0.0 and 45.0.1 contain a native implementation of WASIp1 which suffers from a leak in the fdrenumber function where the...

GO-2026-5281 opentelemetry-go's Schema ParseFile leaks file descriptors on each parse in go.opentelemetry.io/otel/schema

opentelemetry-go's Schema ParseFile leaks file descriptors on each parse in go.opentelemetry.io/otel/schema...

PT-2026-51890

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak exists in the ksmbd component of the Linux kernel during the durable v2 open process. When the parse durable handle context function handles a DURABLE REQ V2 request, it...

CVE-2026-45536

A flaw was found in Netty, a network application framework. A local attacker could exploit a vulnerability in the nettyunixsocketrecvFd function when handling SCMRIGHTS messages in Epoll or KQueue DomainSocketChannel with DomainSocketReadMode.FILEDESCRIPTORS enabled. Incorrect handling of file...

go.opentelemetry.io/otel: go.opentelemetry.io/otel/schema/v1.0: go.opentelemetry.io/otel/schema/v1.1: OpenTelemetry-Go: Denial of Service due to file descriptor leak

A flaw was found in OpenTelemetry-Go before schema package version 0.0.17. ParseFile in go.opentelemetry.io/otel/schema/v1.0 and v1.1 opens a schema file and passes it to Parse without closing it, leaking one file descriptor per successful call. Repeated parsing in a long-running process can...