CVE-2026-90143 net: kcm: Hold RCU read lock while running BPF parser

In the Linux kernel, the following vulnerability has been resolved: net: kcm: Hold RCU read lock while running BPF parser kcmparsefuncstrparser calls bpfprogrunpinoncpu which prevents CPU migration, but does not establish an RCU read-side critical section. Consequently, BPF map operations can...

EUVD-2026-81736

In the Linux kernel, the following vulnerability has been resolved: net: kcm: Hold RCU read lock while running BPF parser kcmparsefuncstrparser calls bpfprogrunpinoncpu which prevents CPU migration, but does not establish an RCU read-side critical section. Consequently, BPF map operations can...

CVE-2026-90143 net: kcm: Hold RCU read lock while running BPF parser

In the Linux kernel, the following vulnerability has been resolved: net: kcm: Hold RCU read lock while running BPF parser kcmparsefuncstrparser calls bpfprogrunpinoncpu which prevents CPU migration, but does not establish an RCU read-side critical section. Consequently, BPF map operations can...

CVE-2026-90143

CVE-2026-90143 affects the Linux kernel in the KCM (Kernel Connection Multiplexer) subsystem. The root cause is that kcm_parse_func_strparser() calls bpf_prog_run_pin_on_cpu()—which prevents CPU migration—but fails to establish an RCU read-side critical section . As a result, BPF map operations i...

CVE-2026-90143

In the Linux kernel, the following vulnerability has been resolved: net: kcm: Hold RCU read lock while running BPF parser kcmparsefuncstrparser calls bpfprogrunpinoncpu which prevents CPU migration, but does not establish an RCU read-side critical section. Consequently, BPF map operations can...

CVE-2026-90065 net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure

In the Linux kernel, the following vulnerability has been resolved: net/smc: release the internal TCP sock on IPPROTOSMC socket creation failure IPPROTOSMC sockets create an internal TCP sock "clcsock" from the proto-init hook. When socket creation fails after proto-init has run - e.g. a cgroup B...

EUVD-2026-81926

In the Linux kernel, the following vulnerability has been resolved: net/smc: release the internal TCP sock on IPPROTOSMC socket creation failure IPPROTOSMC sockets create an internal TCP sock "clcsock" from the proto-init hook. When socket creation fails after proto-init has run - e.g. a cgroup B...

CVE-2026-90065

In the Linux kernel, the following vulnerability has been resolved: net/smc: release the internal TCP sock on IPPROTOSMC socket creation failure IPPROTOSMC sockets create an internal TCP sock "clcsock" from the proto-init hook. When socket creation fails after proto-init has run - e.g. a cgroup B...

CVE-2026-90065 net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure

In the Linux kernel, the following vulnerability has been resolved: net/smc: release the internal TCP sock on IPPROTOSMC socket creation failure IPPROTOSMC sockets create an internal TCP sock "clcsock" from the proto-init hook. When socket creation fails after proto-init has run - e.g. a cgroup B...

CVE-2026-90065

CVE-2026-90065 affects the Linux kernel 's net/smc subsystem. When an IPPROTO_SMC socket creation fails after the proto->init hook has run (e.g., a cgroup BPF program at BPF_CGROUP_INET_SOCK_CREATE denies the socket), neither smc_inet_prot nor smc_inet6_prot defines a .destroy hook, so the int...

CVE-2020-0022

CVE-2020-0022 Android 9-6은 유사한 Bluetooth 서브시스템을 가지고 있는 것으로 보이며, Android 5와 4는 다르다. Android 9.0 BlueFrag 실험 패치: https://android.googlesource.com/platform/system/bt/+/3cb7149d8fed2d7d77ceaa95bf845224c4db3baf 아래에서 패치된 조건에 도달했다. 좋아, 이해한 것 같지만, 어째서인지 프로세스를 크래시시킬 수 없다. 흠흠 사실, memcpy에 부호 있는 길이 값을 전달하는 데...

PoC

PoC 기타 PoC - 불안전 사물 인터넷 이런 형편없는 불안전 제품들에 대해 읽어볼 가치가 충분히 있습니다: https://ipvm.com/reports/security-exploits Hikvision CVE-2021-36260 2021-10-19 모든 공로는 WatchfulIP에게 있습니다 https://watchfulip.github.io/ https://github.com/mcw0/PoC/blob/master/CVE-2021-36260.py Dahua CVE-2021-33044, CVE-2021-33045...

PyPath-Escape-CVE-2025-4517-Exploit-Research

🛡️ PyPath-Escape: 고급 PATHMAX 우회 툴킷 저자: Beriwalarohit 연구 대상: CVE-2025-4517 / CVE-2025-4138 ██████╗ ███████╗██████╗ ██╗██╗ ██╗ █████╗ ██╗ █████╗ ██████╗ ██╔══██╗██╔════╝██╔══██╗██║██║ ██║██╔══██╗██║ ██╔══██╗██╔══██╗ ██████╔╝█████╗ ██████╔╝██║██║ █╗ ██║███████║██║ ███████║██████╔╝ ██╔══██╗██╔══╝...

CVE-2025-9223

Applications Manager - Execute Program Action Bypass PoC 📖 설명 이 저장소에는 ManageEngine Applications Manager의 "Execute Program Action" 기능에서 명령 실행 취약점을 입증하는 개념 증명PoC이 포함되어 있습니다. 🔍 취약점 세부 정보 Applications Manager는 위험한 명령을 차단하기 위해 블랙리스트BlackListCommands를 사용하지만, 검증에는 치명적인 결함이 있습니다: 문자열 기반 검증 은 첫 번째 토큰에만 적용...

The Odyssey and trojans again: MovieReaper attacks users in multiple countries via compromised torrents

Introduction Torrent trackers have long been abused for distributing malicious software, disguised as popular films, games, and other content. Our previous research has shown that cybercriminals repeatedly turn torrents as an initial infection vector, using trojanized cracks and installers to rea...

KLAIOS

🛡️ KLAIOS – Руководство по системе v6.0 Название: KLAIOS Kali Linux AI Operations System Версия: 6.0 Red Team Edition Статус: Рабочий / Вооружён 1. Что такое KLAIOS? KLAIOS — это гибридная среда безопасности. Она объединяет наступательную мощь Kali Linux с безопасностью VPN-бункера и интеллектом...

codex-security npm-v0.1.28

Codex Security @openai/codex-security is a CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in your code. 👉👉 See theCodex Security documentation for full documentation. Some cybersecurity requests and protected findings require approval through Trusted Access fo...

CVE-2021-44228

🛡️ CVE-2021-44228: Log4Shell 분석 - Java 보안을 뒤흔든 취약점 심각도 최고 CVSS 10.0 | 2021년 발견된 Apache Log4j의 이 결함은 원격 코드 실행RCE을 허용하며 전 세계 수백만 시스템에 영향을 미칩니다. 오늘날에도 사이버 보안의 핵심 교훈으로 남아 있습니다! 🔍 Log4Shell이란 무엇인가? CVE-2021-44228 , 일명 Log4Shell 은 Apache Log4j 2 로깅 라이브러리의 치명적인 원격 코드 실행RCE 취약점입니다. 이 결함으로 인해 공격자는 애플리케이션이...

Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway for Multiplatforms.

Summary Multiple vulnerabilities were identified in third-party components used by CICS Transaction Gateway for Multiplatforms including gdb, gdb-headless, pip, gzip, unbound-libs, tar, binutils, libpkgconf, pkgconf, pkgconf-m4, pkgconf-pkg-config, python3-unbound, platform-python-pip,...

Security update for libpcap

This update for libpcap fixes the following issues: CVE-2026-0799: the BPF interpreter does not validate values in BPF instructions that load/store a value from/to a scratch memory register and allows for OOB access bsc1279782. CVE-2026-6244: libpcap BPF interpreter for the 'div k' and 'mod k' AL...