kernel: Kernel: Privilege escalation via uninitialized data in vmci transport packet

A flaw was found in the Linux kernel's vsock/vmci component. A local attacker with low privileges could exploit a vulnerability where the vmcitransportpacket structure is not properly cleared during initialization. This can lead to the use of uninitialized data, potentially allowing for informati...

kernel: Linux kernel: RDMA/rxe use-after-free vulnerability leading to potential arbitrary code execution

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem, specifically within the rxe component. This use-after-free vulnerability occurs in the rxecreatecq function. When the rxecqfrominit function fails, the subsequent call to rxecleanup attempts to free memory resource...

Linux WMI TXSTATUS EVENTID DoS

The vulnerability of the WMITXSTATUSEVENTID command in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel raid0_run raid10_run Use-After-Free

The vulnerability of the raid0run function drivers/md/raid0.c and raid10run function drivers/md/raid10.c in the Linux kernel is related to buffer overflow based stack-based attacks. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility...

Linux block-zoned Heap Buffer Overflow DoS

The vulnerability of the diskDestroyZoneWPLugsHashTable function in the block/blk-zoned.c module, which supports the block-level kernel in the Linux operating system, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a servi...

Btrfs Heap Buffer Overflow DoS

The vulnerability of the btrfsquotaenable function in the fs/btrfs/qgroup.c module of the btrfs file system in Linux kernels is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux JFS dbMount() Heap Buffer Overflow

The vulnerability of the dbMount function in the fs/jfs/jfsdmap.c module of the Linux file system’s JFS kernel relates to buffer-overflow attacks. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

ARM 64-bit Kernel Heap Buffer Overflow DoS

The vulnerability of the copyhighpage function in the arch/arm64/mm/copypage.c module of the Linux operating system’s ARM 64-bit kernel supports is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a remote attacker to cause...

Linux kernel xfrm_state_gcdestroy Heap Buffer Overflow DoS

The vulnerability of the xfrmstategcdestroy function in the net/xfrm/xfrmstate.c module, which is part of the Linux kernel’s networking functions, is related to improper initialization of resources. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...

CaseStudies

Case Studies Technical write-ups on vulnerabilities I've disc...

kernel security update

An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

SUSE CVE-2026-23099

In the Linux kernel, the following vulnerability has been resolved: bonding: limit BONDMODE8023AD to Ethernet devices BONDMODE8023AD makes sense for ARPHRDETHER only. syzbot reported: BUG: KASAN: global-out-of-bounds in hwaddrcreate net/core/devaddrlists.c:63 inline BUG: KASAN: global-out-of-boun...

ROS-20260205-73-0022

A vulnerability in the pktgenthreadwrite function of the net/core/pktgen.c component of the Linux kernel is related to buffer copying without input validation. Exploitation of the vulnerability could allow an attacker to gain access to sensitive data, compromise its integrity, and cause a denial ...

Direct Rendering Infrastructure AMD GPU Dri DoS

The vulnerability of the dcn401inithw function in the drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401hwseq.c driver of the Direct Rendering Infrastructure DRI module for AMD video cards in Linux operating systems is related to pointer aliasing. Exploiting this vulnerability could allow a remote...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2026-111 (ALASKERNEL-5.10-2026-111)

The version of kernel installed on the remote host is prior to 5.10.247-246.992. It is, therefore, affected by a vulnerability as referenced in the ALAS2KERNEL-5.10-2026-111 advisory. In the Linux kernel, the following vulnerability has been resolved: tcpmetrics: use dstdevnetrcu CVE-2025-40075...

Linux kernel parse_features() Heap Buffer Overflow DoS

The vulnerability of the parsefeatures function in the drivers/md/dm-flakey.c driver for multiple device types RAID and LVM in the Linux kernel is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Direct Rendering Infrastructure Heap Buffer Overflow DoS

The vulnerability of the drmclienttargetcloned function in the drivers/gpu/drm/drmclientmodeset.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the snddg00xstreaminitduplex function in the sound/firewire/digi00x/digi00x-stream.c module of the Linux kernel’s audio subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux JFS txBegin() Buffer Overflow

The vulnerability of the txBegin function in the JFS file system module fs/jfs/jfstxnmgr.c of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

ROS-20260205-73-0011

A vulnerability in the btrfsprelimref function of the include/trace/events/btrfs.h module of the Linux kernel is related to pointer dereferencing resulting from calls to old and new variables in the wrong order. Exploitation of the vulnerability could allow an attacker to cause a denial of servic...