Linux Distros Unpatched Vulnerability : CVE-2026-80775

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - futex: Fix race on the initial mm-futex.phash.ref allocation futexhashallocate allocates mm-futex.phash.ref without any locking. Commit d9b05321e21e futex: Move...

Linux Distros Unpatched Vulnerability : CVE-2026-80758

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - futex: Avoid private hash use-after-free on final put futexprivatehashput drops the reference to fph before evaluating fph-mm for wakeupvar. futexrefput enables...

Linux Distros Unpatched Vulnerability : CVE-2026-80776

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - futex: Fix race in futexpivotpending during private hash resize A task performing a custom private hash resize can remain blocked in uninterruptible sleep...

Linux Distros Unpatched Vulnerability : CVE-2026-80778

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - futex/pi: Reject cross-mm private futex owners A private futex key borrows the waiter's mm without taking an mmusers reference. Nevertheless, attachtopiowner...

hazel-cve-2026-43499

PS7716.5665N Hazel Fire TV 임시 루트 Toshiba/Amazon hazel Fire TV 플랫폼용 임시 루트 익스플로잇으로, CVE-2026-43499 기반입니다. 현재 익스플로잇은 다음 환경에서 테스트되었습니다: | ---|--- 기기| Toshiba Fire TV hazel Fire OS 빌드| PS7716.5665N 커널| Linux 4.9.113 제품 모델| AFTHA004 C350 !WARNING 이 익스플로잇은 펌웨어 전용 입니다. 커널 주소, 구조체 오프셋 및 재확보reclaim 체인의 일부는...

ghostlock-oppo-watch3pro

GhostLock CVE-2026-43499 — OPPO Watch 3 Pro 完全研究ケース OPPO Watch 3 Pro OWW211, ColorOS Watch 中国版, Android 11, ARM32 における CVE-2026-43499 GhostLock, rtmutex/futex-PI スタック UAF の完全なエクスプロイト研究。 最終結論：チェーン書き込み機構は OPPO 00522 msm-5.4 リファクタリング版 rtmutex 上ではトリガーと同時にクラッシュし、 エクスプロイトを完了できない 。すべてのトリガー方法（T2 requeue ...

Exploit for Use After Free in Linux Linux_Kernel

PS7716.5665N Hazel Fire TV temporary root Temporary root expl...

CVE-2026-43499

CVE-2026-43499 — Linux 커널 Futex PI Use-After-Free 버그 removewaiter는 kernel/locking/rtmutex.c에서 slowlock 경로에 사용되며, futexrequeue에서 호출될 때 rtmutexstartproxylock의 프록시 잠금 롤백에도 사용됩니다. 프록시 잠금의 경우 waiter::task는 current가 아니지만, removewaiter는 잘못되게 current에 대해 동작합니다. 이로 인해 세 가지 문제가 발생합니다: 1. rbtree 제거dequeue가...

SUSE CVE-2026-80758

In the Linux kernel, the following vulnerability has been resolved: futex: Avoid private hash use-after-free on final put futexprivatehashput drops the reference to fph before evaluating fph-mm for wakeupvar. futexrefput enables preemption again before returning. If that put drops the final...

CVE-2026-80778

CVE-2026-80778 affects the Linux kernel futex/pi subsystem. The root cause is that attach_to_pi_owner() accepted a priority-inheritance owner from a different address space (mm) for private futexes, even though the private futex key borrows the waiter's mm without an mm_users reference. Upon owne...

EUVD-2026-71421

In the Linux kernel, the following vulnerability has been resolved: futex/pi: Reject cross-mm private futex owners A private futex key borrows the waiter's mm without taking an mmusers reference. Nevertheless, attachtopiowner currently accepts an owner from a different address space and copies th...

CVE-2026-80778

In the Linux kernel, the following vulnerability has been resolved: futex/pi: Reject cross-mm private futex owners A private futex key borrows the waiter's mm without taking an mmusers reference. Nevertheless, attachtopiowner currently accepts an owner from a different address space and copies th...

CVE-2026-80778 futex/pi: Reject cross-mm private futex owners

In the Linux kernel, the following vulnerability has been resolved: futex/pi: Reject cross-mm private futex owners A private futex key borrows the waiter's mm without taking an mmusers reference. Nevertheless, attachtopiowner currently accepts an owner from a different address space and copies th...

CVE-2026-80777

CVE-2026-80777 is a race condition in the Linux kernel's futex/pi subsystem. During exec() , there is a window between setting a task's futex exit state to OK and actually swapping its memory map (mm), during which the check comparing a waiter's mm against the owner's mm can return an incorrect r...

CVE-2026-80777

In the Linux kernel, the following vulnerability has been resolved: futex/pi: Plug private futex exec race The check for private futexes whether the waiter's mm, which is stored in the futexkey and copied into the pistate, is the same as the owner's mm is not sufficient for exec. exec has a gap...

EUVD-2026-71420

In the Linux kernel, the following vulnerability has been resolved: futex/pi: Plug private futex exec race The check for private futexes whether the waiter's mm, which is stored in the futexkey and copied into the pistate, is the same as the owner's mm is not sufficient for exec. exec has a gap...

CVE-2026-80777 futex/pi: Plug private futex exec() race

In the Linux kernel, the following vulnerability has been resolved: futex/pi: Plug private futex exec race The check for private futexes whether the waiter's mm, which is stored in the futexkey and copied into the pistate, is the same as the owner's mm is not sufficient for exec. exec has a gap...

CVE-2026-80776

CVE-2026-80776 is a race condition in the Linux kernel futex subsystem, specifically in futex_pivot_pending() during a custom private hash resize. Because futex_pivot_pending() reads the hash_new and hash fields without serialization, a resize task can observe a pre-pivot hash_new alongside a pos...

CVE-2026-80776

In the Linux kernel, the following vulnerability has been resolved: futex: Fix race in futexpivotpending during private hash resize A task performing a custom private hash resize can remain blocked in uninterruptible sleep indefinitely. The hung-task detector reports: INFO: task futex-resizer:314...

EUVD-2026-71419

In the Linux kernel, the following vulnerability has been resolved: futex: Fix race in futexpivotpending during private hash resize A task performing a custom private hash resize can remain blocked in uninterruptible sleep indefinitely. The hung-task detector reports: INFO: task futex-resizer:314...