Exploit for CVE-2026-63030

wp2shell — CVE-2026-63030 + CVE-2026-60137 One-day WordPres...

CVE-2026-64143

In the Linux kernel, the following vulnerability has been resolved: platform/x86: uniwill-laptop: Do not enable the charging limit even when forced It seems that on some older models 2020 the battery charging limit can permanently damage the battery. Prevent users from enabling this feature thru...

CVE-2026-64143

The CVE relates to the Linux kernel, specifically the platform/x86 uniwill-laptop code path. On older devices (~2020), the battery charging limit could be unintentionally enabled via the force module parameter, potentially causing permanent hardware damage. The fix is to prevent enabling the char...

CVE-2026-64143 platform/x86: uniwill-laptop: Do not enable the charging limit even when forced

In the Linux kernel, the following vulnerability has been resolved: platform/x86: uniwill-laptop: Do not enable the charging limit even when forced It seems that on some older models 2020 the battery charging limit can permanently damage the battery. Prevent users from enabling this feature thru...

EUVD-2026-45828

In the Linux kernel, the following vulnerability has been resolved: platform/x86: uniwill-laptop: Do not enable the charging limit even when forced It seems that on some older models 2020 the battery charging limit can permanently damage the battery. Prevent users from enabling this feature thru...

CVE-2026-64111

In the Linux kernel, CVE-2026-64111 describes a fix where cred_guard_mutex is held for lsm_set_self_attr(), mirroring the behavior in proc_pid_attr_write() before calling the LSM hook. This matters for SELinux and AppArmor, which check if the process is ptraced and whether to allow the transition...

CVE-2026-64111 lsm: hold cred_guard_mutex for lsm_set_self_attr()

In the Linux kernel, the following vulnerability has been resolved: lsm: hold credguardmutex for lsmsetselfattr Just as procpidattrwrite already does before calling the LSM hook. This only matters for SELinux and AppArmor which check whether the process is being ptraced and if so, whether to allo...

CVE-2026-64111

In the Linux kernel, the following vulnerability has been resolved: lsm: hold credguardmutex for lsmsetselfattr Just as procpidattrwrite already does before calling the LSM hook. This only matters for SELinux and AppArmor which check whether the process is being ptraced and if so, whether to allo...

EUVD-2026-45796

In the Linux kernel, the following vulnerability has been resolved: lsm: hold credguardmutex for lsmsetselfattr Just as procpidattrwrite already does before calling the LSM hook. This only matters for SELinux and AppArmor which check whether the process is being ptraced and if so, whether to allo...

CVE-2026-64079

The CVE-2026-64079 issue affects the Linux kernel netfilter x_tables path. During arp/ipt registration, the per-netns table is added to the list before allocating per-netns hook ops, leaving a window where the table appears with ops=NULL. If a concurrent pernet exit occurs, nf_unregister_net_hook...

CVE-2026-64079 netfilter: x_tables: allocate hook ops while under mutex

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: allocate hook ops while under mutex arp/ip6tregistertable add the table to the per-netns list via xtregistertable before allocating the per-netns hook ops copy via kmemduparray. This leaves a window where the...

EUVD-2026-45652

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: allocate hook ops while under mutex arp/ip6tregistertable add the table to the per-netns list via xtregistertable before allocating the per-netns hook ops copy via kmemduparray. This leaves a window where the...

CVE-2026-64078

CVE-2026-64078 affects the Linux kernel netfilter x_tables path. The vulnerability is addressed by adding and using xtables_unregister_table_exit, a second-stage helper that unlinks the dying table from the per-net table list, frees hook ops (if any), and issues an audit notification. It replaces...

CVE-2026-64078 netfilter: x_tables: add and use xtables_unregister_table_exit

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: add and use xtablesunregistertableexit Previous change added xtablesunregistertablepreexit to detach the table from the packetpath and to unlink it from the active table list. In case of rmmod, userspace that ...

EUVD-2026-45651

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: add and use xtablesunregistertableexit Previous change added xtablesunregistertablepreexit to detach the table from the packetpath and to unlink it from the active table list. In case of rmmod, userspace that ...

CVE-2026-64059

The CVE affects the Linux kernel netfs code, specifically netfs_perform_write(), where folio->private was not reliably managed across NULL, NETFS_FOLIO_COPY_TO_CACHE, and netfs_folio/group pointers. This could lead to multiple attachments of private data, folio ref leaks, and leaks of netfs_fo...

CVE-2026-64059 netfs: Fix folio->private handling in netfs_perform_write()

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio-private handling in netfsperformwrite Under some circumstances, netfsperformwrite doesn't correctly manipulate folio-private between NULL, NETFSFOLIOCOPYTOCACHE, pointing to a group and pointing to a netfsfolio...

EUVD-2026-45632

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio-private handling in netfsperformwrite Under some circumstances, netfsperformwrite doesn't correctly manipulate folio-private between NULL, NETFSFOLIOCOPYTOCACHE, pointing to a group and pointing to a netfsfolio...

CVE-2026-64034

CVE-2026-64034 affects the Linux kernel’s net: mana path. The issue is a TOCTOU double-fetch of the field hwc_msg_id from a DMA buffer in mana_hwc_rx_event_handler(): the value is first read and bounds-checked, then re-read for test_bit() and pointer arithmetic. Because DMA-coherent memory is map...

CVE-2026-64034 net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer

In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix TOCTOU double-fetch of hwcmsgid from DMA buffer In manahwcrxeventhandler, resp-response.hwcmsgid is read from DMA-coherent memory and bounds-checked, then manahwchandleresp re-reads the same field from the same DMA...