CVE-2026-98957

The Linux kernel contains a vulnerability in the mt76 driver for the mt7915 chipset. When unloading the mt7915e module on an MT7916 device, the driver fails to disable the napi before destruction, triggering multiple warnings in __netif_napi_del_locked() and page_pool_disable_direct_recycling(). ...

CVE-2026-98743

A flaw was found in the Linux kernel's rt1017 SDCA audio codec driver. The driver fails to initialize stream configuration data before passing it to the sound subsystem, leaving configuration fields populated with uninitialized memory. A local user could exploit this flaw during audio stream...

metasploit-ldapnightmare

metasploit-ldapnightmare SafeBreaches CVE-2024-49113 POCLdapNightmare Integrated into Metasploit Overview This module implements CVE-2024-49113, a critical vulnerability in the Windows LDAP client that can cause system instability. The module integrates with the Metasploit Framework, providing a...

CVE-2026-98720

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine nested virtualization implementation. This flaw allows an attacker within a nested guest to bypass isolation boundaries and directly access host hardware controls, potentially causing host system instability or a Denial of...

CVE-2026-98714

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for AMD processors SVM. When virtual machine execution fails, the hypervisor prematurely updates control fields and marks control blocks as clean, assuming hardware operations were performed. A local attacker could...

CVE-2026-98718

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem supporting AMD SEV Secure Encrypted Virtualization. During virtual machine migration on the same host, CPU cache maintenance was performed after deactivating the source guest's encryption state instead of before. Th...

CVE-2026-98691

A flaw was found in the Linux kernel's Thunderbolt subsystem. This vulnerability can lead to a Denial of Service DoS or system instability when a Thunderbolt device is disconnected or unbound. When a Thunderbolt domain is stopped, inactive DisplayPort DP tunnels are not properly torn down, allowi...

CVE-2026-98679

A flaw was found in the Linux kernel's KXCJK-1013 accelerometer driver. A local user could exploit this flaw by submitting duplicate event disable requests to the device configuration interface. Because the driver does not filter repeated disable requests, it improperly releases a runtime power...

CVE-2026-98708

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A local user could exploit this flaw to cause a Denial of Service DoS or system instability. During in-place channel context replacement, an old channel context can be freed prematurely while still referenced by its replacement...

kernel: Bluetooth: hci_sync: Fix advertising data UAFs

A flaw was found in the Linux kernel's Bluetooth subsystem. Specifically, the hcisync component, which manages Bluetooth advertising data, is susceptible to a Use-After-Free UAF vulnerability. This occurs when a pointer to advertising data becomes invalid but is still accessed, particularly durin...

CVE-2026-89855

A flaw was found in the Linux kernel's scsi: qla2xxx component. A local attacker could exploit a race condition in the flash version read handler. By concurrently triggering a sysfs reset operation and other flash operations, an attacker could corrupt flash register reads. This could lead to data...

CVE-2026-89577

A flaw was found in the Linux kernel's device mapper I/O dm-io and RAID1 dm-raid1 components. Incorrect error handling for non-retryable errors such as BLKSTSNOTSUPP and BLKSTSINVAL could lead to misbehavior when a user utilizes unaligned bio vectors on dm-raid1. This misbehavior could potentiall...

CVE-2026-80873

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine component on ARM64 systems. When a nested guest hypervisor L2 encounters a System Error SError exception, the ESREL2 register, which provides details about the exception, is not properly updated. This can cause the guest L2...

CVE-2026-93213

A flaw was found in the Linux kernel. An out-of-bounds read vulnerability exists in the ofaliasscan function's stem parser. This issue occurs because the parser checks for a digit before verifying if it's within the valid memory bounds, potentially allowing it to read one byte before the intended...

CVE-2026-89808

A flaw was found in the drm/amdkfd component of the Linux kernel. During virtual memory VM migration, if a VM range is a 'hole' on the CPU side, an uninitialized variable is used. This can cause the system to drop all Video Random Access Memory VRAM, potentially leading to a denial of service or...

CVE-2026-93133

A flaw was found in the Linux kernel. In the riscvacpiaddprtdep function, the acpigethandle call can fail, leading to the linkhandle variable being uninitialized. This oversight could potentially lead to system instability or unexpected behavior...

CVE-2026-93132

A flaw was found in the Linux kernel's Advanced Configuration and Power Interface ACPI implementation for RISC-V architectures. Specifically, the riscvacpiaddprtdep function contains a loop that incorrectly handles error conditions. This can cause the loop to skip necessary entry pointer updates,...

CVE-2026-93181

A flaw was found in the Linux kernel's uncore performance monitoring unit. An incorrect ordering of internal function calls during CPU online and offline operations can prevent the uncore box from being properly initialized or de-initialized. This mismanagement of resources could lead to system...

CVE-2026-93169

A flaw was found in the Linux kernel's dmaengine: zynqmpdma component. A race condition exists during device removal, specifically in the zynqmpdmaremove function, where runtime power management PM is disabled after checking the device state and performing a manual suspend. This timing issue can...

CVE-2026-93165

A flaw was found in the Linux kernel's sensorhub component. This vulnerability occurs when a specialized piece of hardware, the Embedded Controller EC firmware, provides incorrect information about data size. This error causes the kernel to read beyond the intended memory area, which could lead t...