CVE-2026-23243

CVE-2026-23243 is a Linux kernel vulnerability involving RDMA/umad_write, where user-controlled MAD header size mismatch could yield a negative data_len, leading to an out-of-bounds memset in alloc_send_rmpp_list. The issue has a concrete upstream fix that rejects negative data_len before creatin...

CVE-2026-23243 RDMA/umad: Reject negative data_len in ib_umad_write

In the Linux kernel, the following vulnerability has been resolved: RDMA/umad: Reject negative datalen in ibumadwrite ibumadwrite computes datalen from user-controlled count and the MAD header sizes. With a mismatched user MAD header size and RMPP header length, datalen can become negative and...

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of checks on the rxfpdu pointer in the siwtcprxdata function. This vulnerability may lead to...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the dvbdvropen function incorrectly reinitializing the circular buffer in the wait queue,...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the failure of masstoregfp without releasing the entry, potentially leading to memory leaks...

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the failure to check the return value of the xchkscrubcreatesubord function, potentially leading to nul...

RHEL 9 : kernel (RHSA-2026:4899)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:4899 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: sctp: avoid NULL dereference when chunk...

The vulnerability of the perf_event_unthrottle() function, located in the kernel/events/core.c module responsible for handling kernel events in Linux operating systems, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the perfeventunthrottle function, located in the kernel/events/core.c module responsible for handling kernel events in Linux operating systems, stems from accessing memory beyond the permissible buffer data size during initialization of a variable with a default non-universal...

Linux Distros Unpatched Vulnerability : CVE-2026-23259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/rw: free potentially allocated iovec on cache put failure If a read/write request goes through ioreqrwcleanup and has an allocated iovec attached and...

kernel: Linux kernel: Use-after-free in IPv6 address deletion may lead to a denial of service

A flaw was found in the Linux kernel. An issue exists in the inet6addrdel function, where a use-after-free vulnerability can be triggered due to an incorrect order of operations when deleting IPv6 temporary addresses. A local attacker with low privileges could exploit this flaw to potentially cau...

ROS-20260317-73-0029

A vulnerability in the drivers/usb/gadget/configfs.c module of the Linux kernel is related to a violation of the initial buffer boundary. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

The vulnerability of the j1939_netdev_notify() function in the net/can/j1939/main.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the j1939netdevnotify function in the net/can/j1939/main.c module of the Linux operating system’s kernel is related to improper release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the xsk_generic_rcv() function in the net/xdp/xsk.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xskgenericrcv function in the net/xdp/xsk.c module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Exploit for Race Condition in Canonical Ubuntu_Linux

Privilege Escalation using the Dirty Cow Kernel Exploit By...

The vulnerability of the joycon_set_rumble() function in the drivers/hid/hid-nintendo.c module of the input device subsystem of the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the joyconsetrumble function in the drivers/hid/hid-nintendo.c module of the Linux kernel subsystem for user interface devices is related to pointer manipulation. Exploiting this vulnerability could allow a attacker to cause a system failure...

The vulnerability of the nfs_sysfs_link_rpc_client() function in the fs/nfs/sysfs.c module, which is part of the Linux operating system’s NFS client support mechanism, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the nfssysfslinkrpcclient function in the fs/nfs/sysfs.c module, which is part of the NFS client support in Linux kernel, involves copying buffers without checking their size—a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromise...

The vulnerability of the `security_read_state_kernel()` function in the `security/selinux/ss/services.c` module of the Linux kernel’s security subsystem allows a attacker to trigger a service failure.

The vulnerability of the securityreadstatekernel function in the security/selinux/ss/services.c module of the Linux kernel’s security subsystem is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the DRM/Radeon kernel component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the DRM/Radeon kernel component in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability could allow a hacker to cause a service failure...

Exploit for CVE-2024-14027

CVE-2024-14027 - SlopSploit The exploits were tested on 6.6...

ROS-20260313-73-0036

A vulnerability in the drmcrtchandlevblank function of the Linux kernel is related to null pointer dereferencing. Exploitation of the vulnerability may allow an attacker to cause a denial of service...