Linux Distros Unpatched Vulnerability : CVE-2026-98503

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - packet: use ubufinfo completion for TXRING packets tpacketsnd sends skbs with frags pointing into its ring slots. Slots are released when skb-destructor is...

CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2024:1705927008)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2024:1705927008 advisory. - It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2025:1742469561)

"The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2025:1742469561 advisory. - In the Linux kernel, the following vulnerability has been resolved: tun: avoid double free in tunfreenetdev Avoid double free in...

PT-2026-116700

In the Linux kernel, the following vulnerability has been resolved: nfc: port100: reject frames whose declared length exceeds the received data port100 recv response passes the URB transfer buffer to port100 rx frame is valid, which checksums le16 to cpuframe-datalen bytes of frame-data. datalen ...

PT-2026-116708

In the Linux kernel, the following vulnerability has been resolved: net: atl1c: fix soft lockup on out-of-range tpd cons read The hardware can report an out-of-range tpd cons seen as 0xffff while the PCIe link/MAC is resetting. An out-of-range value can never be reached and the loop below would...

PT-2026-116705

In the Linux kernel, the following vulnerability has been resolved: net: ena: fix MMIO read buffer leak on probe failure ena device init initializes the MMIO read mechanism with ena com mmio reg read request init, which allocates a coherent DMA buffer for MMIO read responses. The normal removal...

Linux Distros Unpatched Vulnerability : CVE-2026-98711

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: cw1200: fix TX padding OOB read leaking heap data to device The TX path rounds the transfer size up to the bus alignment alignsize, up to 511 bytes for...

PT-2026-116697

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Keep internal commands dispatchable during error handling Commit 08b12cda6c44 "scsi: ufs: core: Switch to scsi get internal cmd" switched UFS internal commands to allocate requests on hba-host-pseudo sdev-request...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2023:1690294029)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2023:1690294029 advisory. - A vulnerability was found in the fs/inode.c:inodeinitowner function logic of the LInux kernel that allows local users to create...

CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2023:1690287378)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2023:1690287378 advisory. - A vulnerability was found in the fs/inode.c:inodeinitowner function logic of the LInux kernel that allows local users to create...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2023:1686651204)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2023:1686651204 advisory. - A flaw in the processing of received ICMP errors ICMP fragment needed and ICMP redirect in the Linux kernel functionality was foun...

CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2023:1686585068)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2023:1686585068 advisory. - The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require tha...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2024:1722977984)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2024:1722977984 advisory. - In the Linux kernel, the following vulnerability has been resolved: i2c: Fix a potential use after free Free the adap structure on...

AlmaLinux 10 : kernel (ALSA-2026:83207)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:83207 advisory. kernel: netfilter: nfnetlinkqueue: do shared-unconfirmed check before segmentation CVE-2026-45859 kernel: net/sched: actct: Only release RCU read lock...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2024:1731431059)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2024:1731431059 advisory. - A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way...

xattr-oob-swap

xattr-oob-swap CVE-2020-27904: a tfp0 bug for macOS 10.15.x and below. Demo exploit code for my talk at BlackHat ASIA 2021. The vulnerability has been fixed in macOS Big Sur 11.0, and the latest 10.15&10.14 security update. Warranty Use it on your own risk. This will make you macOS panic. I build...

CVE-2023-1829

CVE-2023-1829 The exploitation is tested on Ubuntu22.04 official source code 5.15.0-25.25 Installing dependences for some netlink filter functions sudo apt install libnftnl-dev libmnl-dev Building step: make References https://github.com/randorisec/CVE-2022-34918-LPE-PoC/tree/main...

CVE-2026-80844

🔥 CVE-2026-80844 - DirtyAH6 Linux Kernel IPv6 AH6 Local Privilege Escalation CVE-2026-80844 is a Linux kernel vulnerability affecting the IPv6 Authentication Header AH6 / XFRM subsystem. The vulnerability is caused by insufficient validation of the IPv6 Routing Header segmentsleft field,...

CVE-2026-74469

⚡ CVE-2026-74469 — DiagSpill Linux Kernel SCTP Peer Transport Count Overflow A Linux kernel SCTP vulnerability caused by a 16-bit peer transport counter overflow , allowing the counter to wrap from 65535 to 0. During an SCTP diagnostic dump, the wrapped value can cause insufficient skb payload...

CVE-2026-68121

⚡ CVE-2026-68121 - PPPoEject Linux Kernel PPPoE Use-After-Free → Local Privilege Escalation A Linux kernel memory-corruption vulnerability in the PPPoE transmit path , caused by a stale pointer to an skbuff header after a device header callback reallocates the skb head. ⚠️ Disclaimer This...