kernel: xfrm: hold dev ref until after transport_finish NF_HOOK

A flaw was found in the Linux kernel's xfrm IP eXtensible FRamework subsystem. This vulnerability involves a race condition where a network device's reference is released too early during packet processing after asynchronous cryptography. This premature release can lead to the system attempting t...

kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface vti6 component. An unprivileged local user, particularly within a user namespace, could exploit a vulnerability related to incorrect network namespace handling during the movement of a vti6 tunnel. This issue can lead to a kerne...

kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface VTI module. When a VTI tunnel device is moved to a different network environment, an unprivileged user in a separate user space can manipulate tunnel parameters. This manipulation could allow the user to intercept or redirect...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

kernel: zram: fix use-after-free in zram_bvec_write_partial()

A flaw was found in the Linux kernel, specifically within the zram module. This vulnerability is a use-after-free error, where the system attempts to use a piece of memory after it has been freed. This occurs when the zrambvecwritepartial function allows an asynchronous read to write into a page...

kernel: ice: fix double-free of tx_buf skb

A flaw was found in the Linux kernel's ice network driver. An error in the driver's handling of network packet transmission, specifically when icetso or icetxcsum functions fail, can lead to a double-free of a network buffer skb. This occurs because a transmit buffer txbuf may still point to an...

Important: Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

kernel: netfilter: conntrack: remove sprintf usage

A flaw was found in the Linux kernel's netfilter conntrack module. This vulnerability arises from the use of sprintf and insufficient buffer sizing in the manglecontentlen function, which can lead to a stack-out-of-bounds write. An attacker could potentially exploit this memory corruption issue t...

kernel: ip6_gre: Use cached t->net in ip6erspan_changelink()

A flaw was found in the Linux kernel's ip6gre module. An unprivileged user could exploit this vulnerability by migrating a network device, causing the ip6erspanchangelink function to incorrectly handle network namespace references. This error leads to a use-after-free condition when the original...

kernel: ALSA: 6fire: fix use-after-free on disconnect

A flaw was found in the Linux kernel's ALSA 6fire USB audio device driver. During the disconnection process of a 6fire USB audio device, a use-after-free vulnerability occurs. This happens when the system attempts to write to memory that has already been deallocated, which can lead to memory...

kernel: net: qrtr: restrict socket creation to the initial network namespace

A flaw was found in the Linux kernel's QRTR Qualcomm IPC Router networking component. An unprivileged local attacker can create a QRTR socket in a separate network namespace. Due to improper handling of global state variables, this allows the attacker to send datagrams and control-plane messages ...

kernel: sctp: purge outqueue on stale COOKIE-ECHO handling

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. This vulnerability, a use-after-free, occurs when the system processes a Stale Cookie ERROR during the setup or reconfiguration of an SCTP association. A remote attacker could exploit this by sending...

CVE-2019-13272

CVE-2019-13272 استغلال الجذر المحلي لنظام لينكس Linux 4.10 5.1.17 PTRACETRACEME جذر محلي CVE-2019-13272 In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to...

CVE-2022-20607

CVE-2022-20607 في البرنامج الثابت للخلوي في Pixel، توجد احتمالية لحدوث كتابة خارج الحدود بسبب غياب فحص الحدود. قد يؤدي ذلك إلى تنفيذ تعليمات برمجية عن بُعد مع الحاجة إلى مصادقة LTE. لا يلزم تفاعل المستخدم للاستغلال. المنتج: Android الإصدارات: نواة Android معرف Android: A-238914868 المراجع: غير مت...

GhostLock

GhostLock - Exploitation d'élévation de privilèges locale CVE-2026-43499 Aperçu de la vulnérabilité Identifiant CVE : CVE-2026-43499 Type de vulnérabilité : UAF Use-After-Free de la pile futex PI héritage de priorité Versions concernées : Noyau Linux 6.1 6.12 Android GKI Résultat de l'exploitatio...

CVE-2026-43805-PoC

CVE-2026-43805 : analyse de la condition de course sur l'état de IODMACommand et PoC Cette analyse identifie le verrou d'état manquant dans IODMACommand::PerformOperationImpl d'Apple IOKit, découvert par diff des binaires du noyau macOS 26.5/26.6. Dans les versions vulnérables, CompleteDMA peut...

CVE-2023-0386_POC

فريق CVE-MD يقدم هذا المستودع دليلاً على المفهوم لـ CVE-2023-0386: https://nvd.nist.gov/vuln/detail/CVE-2023-0386 أعضاء الفريق: Bǎnicǎ Dragoș-Marius و Borsos Matheas-Roland إليكم الفيديو: https://www.youtube.com/watch?v=Ikux1rjIYP0 CVE-2023-0386 — تصعيد الامتيازات المحلية في Linux OverlayFS إثبات...

Security update for the Linux Kernel (Live Patch 82 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.307 fixes various security issues: The following security issues were fixed: CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free i...

kernel-CTF

Défis CTF sur le noyau Une collection de défis d'exploitation du noyau Linux pour apprendre les concepts de sécurité du noyau. Prérequis Système Linux testé sur Ubuntu Outils de compilation essentiels gcc, make En-têtes Linux correspondant à votre version de noyau sudo apt-get update sudo apt-get...

o3_finds_cve-2025-37899

d'après Comment j'ai utilisé o3 pour trouver CVE-2025-37899, une vulnérabilité zero-day distante dans l'implémentation SMB du noyau Linux vuln cible vulnérabilité Ollama CVE-2024-37032 https://github.com/ollama/ollama/releases/tag/v0.1.34 https://github.com/ollama/ollama/compare/v0.1.33...v0.1.34...