XNUTest

xnutesting Research & Education Only — Proof-of-concept...

EUVD-2026-16154

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in meshmatcheslocal meshmatcheslocal unconditionally dereferences ie-meshconfig to compare mesh configuration parameters. When called from meshrxcsaframe, the parsed action-frame elements may not...

UBUNTU-CVE-2026-23398

In the Linux kernel, the following vulnerability has been resolved: icmp: fix NULL pointer dereference in icmptagvalidation icmptagvalidation unconditionally dereferences the result of rcudereferenceinetprotosproto without checking for NULL. The inetprotos array is sparse -- only about 15 of 256...

CVE-2026-23398

In the Linux kernel, the following vulnerability has been resolved: icmp: fix NULL pointer dereference in icmptagvalidation icmptagvalidation unconditionally dereferences the result of rcudereferenceinetprotosproto without checking for NULL. The inetprotos array is sparse -- only about 15 of 256...

EUVD-2026-16132

Each RPCSECGSS data packet is validated by a routine which checks a signature in the packet. This routine copies a portion of the packet into a stack buffer, but fails to ensure that the buffer is sufficiently large, and a malicious client can trigger a stack overflow. Notably, this does not...

CVE-2026-4747 Remote code execution via RPCSEC_GSS packet validation

Each RPCSECGSS data packet is validated by a routine which checks a signature in the packet. This routine copies a portion of the packet into a stack buffer, but fails to ensure that the buffer is sufficiently large, and a malicious client can trigger a stack overflow. Notably, this does not...

PT-2026-36373

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vxlan na create function where ND options are processed based on lengths provided within the options. A malformed option can cause the parser to advance beyond the...

Linux kernel fbdev lcd mipid Heap Buffer Overflow DoS

The vulnerability of the mipidspiprobe function in the drivers/video/fbdev/omap/lcdmipid.c file of the kernel graphics buffer device driver in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Remote Processor Buffer Overflow DoS

The vulnerability of the rproccoredumpwrite function in the drivers/remoteproc/remoteprocdebugfs.c driver of the Linux kernel’s remote processor subsystem is related to a numerical order loss or cyclic shift. Exploiting this vulnerability could allow an attacker to compromise the integrity of...

Linux kernel serial8250_register_ports() Buffer Overflow DoS

The vulnerability of the serial8250registerports function in the driver/tty/serial/8250/8250core.c file of the console support driver for the serial port in the Linux kernel relates to the exposure of confidential information. Exploiting this vulnerability could allow an attacker to cause a servi...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the ubifssysfsinit function in the fs/ubifs/sysfs.c file of the Linux kernel file system is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel RCU Heap Buffer Overflow DoS

The vulnerability of the rcuscalecleanup function in the kernel/rcu/rcuscale.c module of the synchronization subsystem in Linux multi-threaded kernel systems is related to the execution of operations outside of memory buffers. Exploiting this vulnerability can allow an attacker to cause a service...

Linux kernel DMI Sysfs Register Handle Buffer Overflow DoS

The vulnerability of the dmisysfsregisterhandle function in the drivers/firmware/dmi-sysfs.c module of the Linux kernel’s firmware driver lies in the access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a system failure...

Linux MPTCP Heap Buffer Overflow DoS

The vulnerability of the mptcpclosessk function in the net/mptcp/protocol.c module of the Linux kernel is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

kvm_arch_vcpu_ioctl() ARM64 Kernel DoS

The vulnerability of the kvmarchvcpuioctl function in the arch/arm64/kvm/arm.c module of the virtualization subsystem on the 64-bit ARM-based Linux operating system is related to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

Btrfs close_ctree Heap Buffer Overflow DoS

The vulnerability of the closectree function in the fs/btrfs/disk-io.c file of the Btrfs file system in the Linux kernel leads to mutual locking issues. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the skbtstamptx function in the net/core/skbuff.c module, which supports kernel network functions in the Linux operating system, is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

drivers/clk/clk.c Heap Buffer Overflow DoS

The vulnerability of the devmclknotifierregister function in the drivers/clk/clk.c module of the Samsung Exynos CPU driver for Linux operating systems is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

vme_fake Heap Buffer Overflow DoS

The vulnerability of the fakeinit function in the drivers/staging/vmeuser/vmefake.c module, which supports additional devices in the Linux operating system’s kernel, is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel memory management Heap Buffer Overflow DoS

The vulnerability of the secretmemfilecreate function in the mm/secretmem.c module of the Linux kernel’s memory management subsystem is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...