kern

kern: rootless container runtime and sandbox with no daemon. Runs agent tool calls and LLM-generated code in kernel-enforced containers. A real, kernel-enforced container in a few milliseconds, out of one static binary with no daemon. MCP support for Claude Code, Cursor, Claude Desktop and LM...

PT-2026-128165

In the Linux kernel, the following vulnerability has been resolved: ipc: drop the mqueue mount with kern unmount on setup failure mq init ns creates the mqueue mount with fc mount longterm, so its -mnt ns is MNT NS INTERNAL. When setting up the mqueue or ipc sysctls or msg init ns fails afterward...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: tipc: fixed an information leak in tipctopsrvkernsubscr A 8-byte write was used to initialize sub.usherhandle in tipctopsrvkernsubscr. Otherwise, four bytes remained uninitialized when calling setsockopt..., SOLTIPC,.... This...

SUSE CVE-2026-64449

In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: bound slave read/write to the kernbuf size The SLAVE-path helpers buffertouser and bufferfromuser copy 'count' bytes into/out of the fixed-size kernbuf sizebuf == PCIBUFSIZE == 0x20000, 128 KiB using ppos as the...

CVE-2026-64449 staging: vme_user: bound slave read/write to the kern_buf size

In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: bound slave read/write to the kernbuf size The SLAVE-path helpers buffertouser and bufferfromuser copy 'count' bytes into/out of the fixed-size kernbuf sizebuf == PCIBUFSIZE == 0x20000, 128 KiB using ppos as the...

EUVD-2026-39963

sigqueue2 was marked as permitted in capability mode with the introduction of Capsicum in 2011, but the implementation of kernsigqueue did not include a capability mode check restricting signal delivery to the calling process's own PID. A process in capability mode can use sigqueue2 to send signa...

CVE-2026-57589: Use After Free

sys/kern/sysvsem.c in OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root. This is a context switch use-after-free after tsleep in syssemget...

CVE-2022-50531 tipc: fix an information leak in tipc_topsrv_kern_subscr

In the Linux kernel, the following vulnerability has been resolved: tipc: fix an information leak in tipctopsrvkernsubscr Use a 8-byte write to initialize sub.usrhandle in tipctopsrvkernsubscr, otherwise four bytes remain uninitialized when issuing setsockopt..., SOLTIPC, .... This resulted in an...

CVE-2025-22535

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in jonkern WPListCal wplistcal allows SQL Injection.This issue affects WPListCal: from n/a through = 1.3.5...

SUSE CVE-2025-21660

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix unexpectedly changed path in ksmbdvfskernpathlocked When ksmbdvfskernpathlocked met an error and it is not the last entry, it will exit without restoring changed path buffer. But later this buffer may be used as the...

CVE-2025-22535 WordPress WPListCal Plugin <= 1.3.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in jonkern WPListCal wplistcal allows SQL Injection.This issue affects WPListCal: from n/a through = 1.3.5...

Apple macOS libFontValidation kern Table Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the libFontValidation library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists...

PT-2025-4341

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue concerns the ksmbd vfs kern path locked function in the Linux kernel. When this function encounters an error and it is not the last entry, it exits without restoring the changed path...

kerncitizensforenergy.com Cross Site Scripting vulnerability OBB-3898570

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2024-26775

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel, where a vulnerability has been resolved. The vulnerability is described as avoiding dereference of garbage after mount failure. In case kern mou...

PT-2022-35241

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.76 Description The issue concerns an information leak in tipc topsrv kern subscr. It was introduced in version v4.17 and fixed in Linux Kernel version v5.15.76. The actual impact and attack plausibility hav...

PT-2022-35616

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.221 Description The issue concerns an information leak in tipc topsrv kern subscr. It was introduced in version v4.17 and fixed in version v5.4.221. The actual impact and attack plausibility have not yet bee...

PT-2022-35734

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.264 Description The issue is related to an information leak in tipc topsrv kern subscr. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-34952

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.6 Description The issue concerns an information leak in tipc topsrv kern subscr. It was introduced in version v4.17 and fixed in Linux Kernel version v6.0.6. The actual impact and attack plausibility have no...

PT-2022-38030

Уязвимость функции tipc topsrv kern subscr модуля net/tipc/topsrv.c реализации протокола TIPC ядра операционной системы Linux связана с раскрытием конфиденциальной информации. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...