472788 matches found
CVE-2026-80780
A flaw was found in the Linux kernel's Human Interface Device HID pidff driver. A remote attacker, by plugging in a specially crafted malicious USB device, can trigger an out-of-bounds write in the hidpidffinitwithquirks function. This occurs because the function fails to validate if the input li...
CVE-2026-80848
A flaw was found in the xfrm: espintcp component of the Linux kernel. A race condition exists during the closure of espintcp sockets, where a memory buffer skb can be freed while still being accessed by another process. This Use-After-Free UAF vulnerability could allow a local attacker to cause...
CVE-2026-80849
A flaw was found in the Linux kernel's TCP Authentication Option TCP-AO implementation. When a network connection using TCP-AO is re-established with a different server, a timing issue can cause the system to attempt to use memory that has already been released. This 'use-after-free' vulnerabilit...
CVE-2026-80840
A flaw was found in the Linux kernel's IPv6 Segment Routing over IPv6 SRv6 implementation. A remote attacker can exploit this vulnerability by sending specially crafted IPv6 packets that are then decapsulated as IPv4 packets. Due to improper handling of data during this process, the system attemp...
CVE-2019-2215
CVE-2019-2215 CVE-2019-2215 POC pour le noyau 3.18 Basé sur le POC de Maddie Stone de https://bugs.chromium.org/p/project-zero/issues/detail?id=1942 Comment utiliser : adb push su98 /data/local/tmp adb push su98-memory-kallsyms /data/local/tmp adb shell G8231:/ $ cd /data/local/tmp G8231:/ $ chmo...
CVE-2026-80778
A flaw was found in the Linux kernel. A race condition exists in the futex/pi Fast Userspace Mutexes / Priority Inheritance subsystem. When a private futex key borrows a waiter's memory management mm structure without proper referencing, the attachtopiowner function can accept an owner from a...
CVE-2022-0847-dirty-pipe-checker
CVE-2022-0847-dirty-pipe-checker Script Bash pour vérifier la présence de CVE-2022-0847 Dirty Pipe Résumé Voici l'histoire de CVE-2022-0847, une vulnérabilité dans le noyau Linux depuis la version 5.8 qui permet de réécrire des données dans des fichiers en lecture seule arbitraires. Cela conduit ...
KDU
KDU 커널 드라이버 유틸리티 시스템 요구 사항 x64 Windows 7/8/8.1/10/11; 관리자 권한이 필요합니다. 목적 및 기능 이 도구의 목적은 광범위한 설정이나 로컬 디버거 없이 Windows 커널/구성 요소를 탐색할 수 있는 간단한 방법을 제공하는 것입니다. 다음 기능을 제공합니다: EPROCESS 객체 수정을 통한 임의 PPL 또는 임의 프로세스 핸들을 이용한 보호된 프로세스 하이재킹; 드라이버 서명 적용 우회 DSEFix와 유사; 드라이버 서명 적용을 우회하기 위한 드라이버 로더 TDL/Stryker와 유사;...
CVE-2026-72366
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfscreatewritereq to handle async cache object creation netfscreatewritereq will skip caching if the fscache cookie is disabled, but this is a problem because async cache object creation might not have got far enough...
CVE-2026-90202
A flaw was found in the Linux kernel's mpt3sas SCSI driver. The basereleasememorypools function attempts to free PCIe SGL Scatter-Gather List buffers that were never allocated, particularly after a partial setup failure. This can lead to a NULL pointer dereference, potentially causing a system...
CVE-2026-90136
A flaw was found in the Linux kernel's AMD HSMP Host System Management Port hardware monitoring hwmon driver. A local user can trigger an issue by attempting to set a negative power cap value. Due to an incorrect conversion of this negative input, a nonsensical, extremely high power limit is sent...
CVE-2026-80898
A flaw was found in the netfs component of the Linux kernel. When a copy-to-cache append operation fails, the PGprivate2 state and its associated reference are not properly released. This oversight can lead to a resource leak, potentially causing system instability or a denial of service DoS...
CVE-2026-80897
A flaw was found in the netfs component of the Linux kernel. When netfspreparereaditerator processes readahead folios, it may fail to release these folios if an error occurs during the rollingbufferloadfromra operation. This oversight can lead to a memory leak, potentially allowing a local attack...
CVE-2026-80727
A flaw was found in the Linux kernel's x86 Machine Check Exception MCE handling. During the discovery of Corrected Machine Check Interrupts CMCI, a timer used for storm detection is modified before it is properly initialized. This improper timer setup can lead to kernel warnings and system...
CVE-2026-92493
A flaw was found in the Linux kernel's amd-pstate-ut driver. A local user can trigger a kernel NULL pointer dereference by loading the amdpstateut module on a non-AMD platform, such as an Intel system. This can lead to a system crash, resulting in a Denial of Service DoS...
CVE-2026-89894
A flaw was found in the Linux kernel's cx231xx media driver. A local attacker can exploit this vulnerability by manipulating video and Vertical Blanking Interval VBI queue operations. This allows for a heap out-of-bounds write, which could lead to arbitrary code execution or a denial of service...
CVE-2026-89777
A flaw was found in the Linux kernel's vfio/pci component. During device initialization, a memory pointer is not properly cleared after being freed, leading to a use-after-free and double-free vulnerability. A local attacker could exploit this flaw to cause a system crash, resulting in a denial o...
CVE-2026-90111
A flaw was found in the Linux kernel's IPv6 multicast routing ip6mr component. This use-after-free vulnerability occurs when a non-refcounted destination entry is improperly handled after being freed. A remote attacker could potentially exploit this by sending specially crafted IPv6 multicast...
CVE-2026-89791
A flaw was found in the Linux kernel's perf subsystem. A race condition exists between the perf mmap revival and the last munmap operation. This allows a local unprivileged user to exploit a use-after-free vulnerability, leading to local privilege escalation to root...
CVE-2026-90049
A flaw was found in the Linux kernel's networking subsystem. When the skbzerocopy function fails to orphan fragments, it incorrectly calls skbtxerror on the source skbuff skb. This premature completion of the zerocopy user argument and clearing of the SKBFLSHAREDFRAG flag can lead to a condition...