kernel: ice: fix double-free of tx_buf skb

A flaw was found in the Linux kernel's ice network driver. An error in the driver's handling of network packet transmission, specifically when icetso or icetxcsum functions fail, can lead to a double-free of a network buffer skb. This occurs because a transmit buffer txbuf may still point to an...

CVE-2019-13272

CVE-2019-13272 Linux local root exploit Linux 4.10 5.1.17 PTRACETRACEME local root CVE-2019-13272 In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtai...

CVE-2022-20607

CVE-2022-20607 In the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with LTE authentication needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

GhostLock

GhostLock - CVE-2026-43499 Local Privilege Escalation Exploit Vulnerability Overview CVE ID: CVE-2026-43499 Vulnerability Type: futex PI priority inheritance stack UAF Use-After-Free Affected Range: Linux kernel 6.1 6.12 Android GKI Exploitation Impact: Local privilege escalation + SELinux disabl...

CVE-2026-43805-PoC

CVE-2026-43805: IODMACommand State Race Analysis and PoC This is an analysis that found the missing state lock in Apple IOKit's IODMACommand::PerformOperationImpl through a macOS 26.5/26.6 kernel binary diff. In the vulnerable build, while PerformOperation is using the ready state and memory...

CVE-2023-0386_POC

Team CVE-MD This repository provides a proof of concept for CVE-2023-0386: https://nvd.nist.gov/vuln/detail/CVE-2023-0386 Team members: Bǎnicǎ Dragoș-Marius and Borsos Matheas-Roland Here is the video: https://www.youtube.com/watch?v=Ikux1rjIYP0 CVE-2023-0386 — Linux OverlayFS Local Privilege...

Security update for the Linux Kernel (Live Patch 82 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.307 fixes various security issues: The following security issues were fixed: CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free i...

kernel-CTF

Kernel CTF Challenges A collection of Linux Kernel exploitation challenges for learning kernel security concepts. Requirements Linux system tested on Ubuntu Build essentials gcc, make Linux headers for your kernel version sudo apt-get update sudo apt-get install build-essential linux-headers-$una...

o3_finds_cve-2025-37899

based on How I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation target vuln ollama vuln CVE-2024-37032 https://github.com/ollama/ollama/releases/tag/v0.1.34 https://github.com/ollama/ollama/compare/v0.1.33...v0.1.34 commit: 2a21363 by using l...

Apple IOKit DriverKit Race Condition

Apple IOKit contains a race condition that may allow an app to cause unexpected system termination or write kernel memory. The supplied analysis includes a sanitizer-checked proof of concept model of the reported DriverKit RPC state-handling flaw...

Kernel Live Patch Security Notice LSN-0122-1

Ubuntu Linux kernel livepatch updates version 122.1, 122.2, and 122.4 fix multiple vulnerabilities affecting supported Ubuntu LTS releases...

PT-2026-107503

In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free of retransmit skb hint in tcp send synack When tcp send synack replaces the cloned SYN skb at the head of the retransmit queue with a copy, it frees the original with tcp rtx queue unlink and free and only...

PT-2026-107674

Five open directories exposed the full DarkSword/Coruna iOS exploit-and-harvest platform live, including a production server with 11 stolen BIP39 seed phrases, 179 victim loot directories, and a 75-account reseller roster. Key findings: - The five hosts 43.134.165.205:9999, 166.88.95.90:9999,...

SUSE SLES15 Security Update : kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:4516-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4516-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.121 fixes various security issues: The following security issues were fixed:...

SUSE SLES15 Security Update : kernel (Live Patch 58 for SUSE Linux Enterprise 15 SP4) (SUSE-SU-2026:4531-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4531-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.235 fixes various security issues: The following security issues were fixed:...

SUSE SLES15 Security Update : kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:4537-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4537-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.66 fixes various security issues: The following security issues were fixed: -...

Linux Distros Unpatched Vulnerability : CVE-2026-98373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/hugetlb: preserve mremap address delta when skipping page tables movehugetlbpagetables optimizes mremap by advancing to the last entry in the page table when...

SUSE SLES15 Security Update : kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP6) (SUSE-SU-2026:4540-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4540-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.130 fixes various security issues: The following security issues were fixed: -...

SUSE SLES15: kernel-livepatch-6_4_0-150600_23_92-default / etc (SUSE-SU-2026:4518-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4518-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.92 fixes various security issues: The following security issues were fixed: -...

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: vsock/vmci: fix UAF when peer resets connection during handshake CVE-2026-64115 kernel: packet: use consistent hardheaderlen in non-ring send paths kernel: packet: use consistent...