22 matches found
CVE-2026-89668
CVE-2026-89668 affects the Linux kernel NFS server daemon (nfsd). The root cause is an initialization ordering flaw: nfsd_debugfs_init() runs before nfsd4_init_slabs() in init_nfsd(). If slab allocation fails, the early return bypasses nfsd_debugfs_exit(), leaving orphan debugfs files with stale ...
CVE-2026-43499-S25U
CVE-2026-43499 Galaxy S25 Ultra向けPoC 韓国Samsung Galaxy S25 Ultra向けのCVE-2026-43499のデバイス固有のProof of Conceptです。 サポート対象 root@kitploit: Model: SM-S938N Codename: pa3q Android: 16 / API 36 Build: S938NKSUACZF1 Display ID: BP4A.251205.006.S938NKSUACZF1 Fingerprint:...
rmgp-complete-handoff
rmgp-complete-handoff 针对 SM-A376B / Exynos S5E8845 / A376BXXU1AZB7 的 CVE-2026-43499（RMGP / "popsicle"）漏洞利用的完整工作区 + 实验状态备份。 请先阅读CURRENTSTATE.md —— 它是权威的"当前进展"说明：哪些功能可用（slide、skb 泄漏、pipe oracle、第 1 次 KernelSnitch 通过 / fops 页 MATCH ），哪些被阻塞（第 2 次 KernelSnitch 通过 / pipe 缓冲区页泄漏...
The vulnerabilities of the functions uacce_put_queue() and uacce_fops_unl_ioctl() in the drivers/misc/uacce/uacce.c module of the Linux kernel allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerabilities of the functions uacceputqueue and uaccefopsunlioctl in the drivers/misc/uacce/uacce.c module of the Linux kernel are related to state management errors. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and accessibility of...
CVE-2026-64290
A flaw was found in the Linux kernel's iommufd component. When a copytouser operation fails within the iommufdfaultfopsread function, the system enters an infinite loop. This continuous retry consumes 100% of the CPU and holds a mutex, which can lead to a denial of service DoS for affected system...
CVE-2026-64290
In the Linux kernel, the following vulnerability has been resolved: iommufd: Break the loop on failure in iommufdfaultfopsread On a copytouser failure inside the inner listforeachentry, only the inner loop breaks; the outer while re-fetches the just-restored fault group and retries the failing...
UBUNTU-CVE-2026-53188
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Validate the passed in fops for ibgetucaps Sashiko pointed out it is not safe to rely only on the devt because char/block alias so if the user finds a block device with the same devt it can masquerade as a ucap cdev fd...
CVE-2026-53188
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Validate the passed in fops for ibgetucaps Sashiko pointed out it is not safe to rely only on the devt because char/block alias so if the user finds a block device with the same devt it can masquerade as a ucap cdev fd...
EUVD-2026-39279
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Validate the passed in fops for ibgetucaps Sashiko pointed out it is not safe to rely only on the devt because char/block alias so if the user finds a block device with the same devt it can masquerade as a ucap cdev fd...
CVE-2026-53188 RDMA/core: Validate the passed in fops for ib_get_ucaps()
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Validate the passed in fops for ibgetucaps Sashiko pointed out it is not safe to rely only on the devt because char/block alias so if the user finds a block device with the same devt it can masquerade as a ucap cdev fd...
CVE-2026-53188
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Validate the passed in fops for ibgetucaps Sashiko pointed out it is not safe to rely only on the devt because char/block alias so if the user finds a block device with the same devt it can masquerade as a ucap cdev fd...
PT-2026-52284
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA core where the ib get ucaps function fails to properly validate the passed-in file operations fops. Because character and block devices can share the same dev...
SUSE CVE-2026-46280
In the Linux kernel, the following vulnerability has been resolved: lib: testhmm: evict device pages on file close to avoid use-after-free Patch series "Minor hmmtest fixes and cleanups". Two bugfixes a cleanup for the HMM kernel selftests. These were mostly reported by Zenghui Yu with special...
The vulnerability in the structure of nv50_crc_flip_threshold_fops{} within the drivers/gpu/drm/nouveau/dispnv50/crc.c file – a driver for supporting Direct Rendering Infrastructure (DRI) in NVIDIA’s Linux operating system – allows a hacker to trigger a service failure.
The vulnerability in the structure of nv50crcflipthresholdfops in the drivers/gpu/drm/nouveau/dispnv50/crc.c file affects the Nouveau driver that supports Direct Rendering Infrastructure DRI for NVIDIA’s Linux operating system. This vulnerability arises from improper memory release before deletin...
Vulnerability of the nouveau_pstate_fops{} structure in the drivers/gpu/drm/nouveau/nouveau_debugfs.c module – This driver provides support for Direct Rendering Infrastructure (DRI) in NVIDIA’s Linux kernel, allowing attackers to cause system failures.
The vulnerability of the nouveaupstatefops structure in the drivers/gpu/drm/nouveau/nouveaudebugfs.c module – The driver that supports Direct Rendering Infrastructure DRI for NVIDIA graphics cards in the Linux operating system is vulnerable to a memory leak before the last reference is freed...
SUSE CVE-2025-21769
In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: Add .owner to vmclockmiscdevfops Without the .owner field, the module can be unloaded while /dev/vmclock0 is open, leading to an oops...
CVE-2025-21769 ptp: vmclock: Add .owner to vmclock_miscdev_fops
In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: Add .owner to vmclockmiscdevfops Without the .owner field, the module can be unloaded while /dev/vmclock0 is open, leading to an oops...
CVE-2025-21769 ptp: vmclock: Add .owner to vmclock_miscdev_fops
In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: Add .owner to vmclockmiscdevfops Without the .owner field, the module can be unloaded while /dev/vmclock0 is open, leading to an oops...
DEBIAN-CVE-2021-47470
In the Linux kernel, the following vulnerability has been resolved: mm, slub: fix potential use-after-free in slabdebugfsfops When sysfsslabadd failed, we shouldn't call debugfsslabadd for s because s will be freed soon. And slabdebugfsfops will use s later leading to a use-after-free...