SUSE CVE-2026-99079

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on refill retry When an XDP redirect to an AFXDP socket fails because its RX ring is full, the XSK core frees the buffer. During the subsequent batched refill of a legacy cyclic RQ, mlx...

SUSE CVE-2026-99082

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Use active memslots for the per-vCPU MMIO cache KVM tags the per-vCPU MMIO cache with a memslot generation so that a memslot update invalidates cached MMIO information. Both the fill and validation paths use kvmmemslots...

SUSE CVE-2026-99084

In the Linux kernel, the following vulnerability has been resolved: readdir: take no inode lock on an immutable directory iteratedir takes the directory's irwsem shared and holds it across -iterateshared. For a directory that never has an entry and is never removed the lock keeps nothing still, i...

SUSE CVE-2026-99085

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF scheduler A CPU going down has to empty its own rq. Its hotplug thread waits in schedcpuwaitempty until nothing else is left, and the only thing that wakes it...

SUSE CVE-2026-99086

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: validate the superblock on resume dmintegrityresume re-reads the superblock from the device so that it picks up the flags and the recalculate position. It performs no validation on the result, while the constructor...

CVE-2026-89844

A flaw was found in the Linux kernel's qla2xxx SCSI driver. The qla24xxreportidacquisition function does not properly hold a lock vportslock when updating the host map btree. This oversight creates a race condition, allowing multiple concurrent updates to the host map. An attacker could exploit...

CVE-2026-89847

A flaw was found in the Linux kernel's qla2xxx SCSI driver. A double completion scenario can occur during the asynchronous I/O control block IOCB timeout handling. This can lead to a use-after-free vulnerability, where the system attempts to write to memory that has already been released. A local...

Exploit for CVE-2026-68136

CVE-2026-68136 / GHSA-p4gp-483j-wr28 — PoC: Linux kernel GRO d...

CVE-2026-89858

A flaw was found in the Linux kernel's qla2xxx driver. A local user could exploit this vulnerability by sending a specially crafted Block SCSI Generic BSG request with an excessively large image count. This could cause the system to read beyond the intended memory buffer, leading to the disclosur...

CVE-2026-89861

A flaw was found in the Linux kernel's qla2xxx SCSI driver. This vulnerability occurs in the qla24xxreportidacquisition function where a virtual port reference is not properly maintained. A local attacker could exploit this timing issue, allowing a concurrent operation to free the virtual port...

CVE-2026-89897

A flaw was found in the Linux kernel's media subsystem, specifically within the Consumer Electronics Control CEC framework. The cecreceivenotify function reads the exclusive follower pointer without proper locking, creating a race condition. This lack of serialization during exclusive follower...

CVE-2026-89892

A flaw was found in the Linux kernel's em28xx media driver. This vulnerability occurs because the audio-only path incorrectly registers extensions during device probing, leading to a duplicate device entry in an internal list. This duplicate entry can be freed while still being referenced,...

CVE-2026-98847

A flaw was found in the Linux kernel's SPEAr Real-Time Clock RTC driver. The driver requests and enables an alarm interrupt before completing device initialization, specifically prior to setting up the memory-mapped I/O MMIO address and spinlock. If an interrupt triggers while device probing is i...

CVE-2026-98846

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP subsystem. A race condition can occur when an SCTP socket is shut down concurrently while waiting for a connection, causing an association structure to be freed while still in use. A local user could exploit this fla...

CVE-2026-98845

A flaw was found in the Linux kernel's Trusted Platform Module TPM subsystem. This vulnerability allows an attacker to bypass TPM reset protections because the driver fails to disable the device when a null key integrity check fails. Consequently, the TPM continues serving requests and...

CVE-2026-89917

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for ARM64 architectures. A race condition exists between the Virtual Nested Cache Register VNCR Translation Lookaside Buffer TLB invalidation and the vcpuput function's unmapping of the VNCR page. This time-of-check to...

CVE-2026-98844

A flaw was found in the Linux kernel's network filesystem netfs subsystem. When a file is extended through write operations after previous writes were performed via memory mapping, the system fails to clear stale cache data located beyond the original end of the file. A local user could exploit...

Black-Angel-Rootkit

Black Angel Rootkit Black Angel is a Windows 11/10 x64 kernel mode rootkit. Rootkit can be loaded with enabled DSE while maintaining its full functionality. Designed for Red Teams. Rootkit Features Rootkit can be loaded with kdmapper to bypass DSE, Black Angel Loader may not be working properly...

CVE-2026-98843

A flaw was found in the Linux kernel's Network Filesystem netfs subsystem. When reading data gaps around modified memory regions during streaming write operations, truncated or incomplete read responses from a remote server fail to clear unread memory buffers. As a result, stale memory contents c...

CVE-2026-98842

A flaw was found in the Linux kernel's module loading subsystem. When an error occurs during module initialization, the kernel fails to propagate the error code and incorrectly reports a successful load after the module has already been cleaned up. A local privileged user could trigger this...