CVE-2017-16994

/ disablemapminadd.c / / / include include include include include include include / offsets might differ, kernel was custom compiled you can read vmlinux and caculate the offset when testing / / define OFFSETKERNELBASE 0x000000 / define MMAPMINADDR 0x1101de8 define DACMMAPMINADDR 0xe8e810 / get...

OHTS

OHTS Microsoft Windows - 'afd.sys' Local Kernel Privilege Escalation Exploit Report CVE-2011-1249...

CVE-2019-13272

CVE-2019-13272 PTRACETRACEME CVE-2019-13272 local privilege escalation vulnerability analysis PTRACETRACEME is a privilege escalation vulnerability in the Linux Kernel discovered by Jann Horn in July 2019. Vulnerability Analysis: Ptrace is a system call that provides a method allowing a process...

CVE-2026-99087

A flaw was found in the Linux kernel's device-mapper integrity dm-integrity subsystem. A local user with administrative privileges can cause a Denial of Service DoS by activating a storage device in read-only mode when dirty journal bitmap flags are set. This issue occurs because the driver...

CVE-2026-98911

A flaw was found in the Linux kernel's dpaa2-switch network driver. When an error occurs during frame reception, the driver improperly invokes a cleanup routine intended for transmit buffers that expects a valid socket buffer structure. An attacker capable of sending traffic that triggers an erro...

CVE-2026-99086

A flaw was found in the Linux kernel's dm-integrity subsystem. When resuming a suspended integrity device, the kernel re-reads the storage metadata superblock without verifying that its layout matches the initial configuration. A local attacker with access to the underlying storage device could...

CVE-2026-98907

A flaw was found in the Linux kernel's Btrfs file system. A race condition exists in the sbwritepointer function due to missing locking synchronization when reading superblock metadata from the cache while block size settings are concurrently modified. A local user could exploit this flaw to caus...

CVE-2017-5487

CVE-2017-5487 is a vulnerability in the Linux kernel that was discovered and disclosed in 2017. The vulnerability allows a local attacker to gain root access to a system by exploiting a race condition in the key management subsystem of the kernel. The vulnerability can be exploited by a user with...

CVE-2026-98905

A flaw was found in the Linux kernel's AMD GPU driver. This vulnerability allows a local user to cause a denial of service DoS and crash the system during Checkpoint/Restore In Userspace CRIU operations. The issue occurs because the driver fails to properly acquire and initialize queue buffers wh...

CVE-2026-99085

A flaw was found in the Linux kernel's extensible scheduler schedext. When a central processing unit CPU is taken offline while tasks remain managed by the scheduler, the inactive CPU stops dispatching those tasks, preventing the shutdown thread from finishing. A local attacker could exploit this...

CVE-2026-98906

A flaw was found in the Linux kernel's LAN966x network driver. When an attempt to reconfigure the Maximum Transmission Unit MTU fails, the driver does not properly restore its receive buffer settings. This inconsistency causes subsequent packet processing routines to assume larger buffer sizes th...

CVE-2026-99084

A flaw was found in the Linux kernel. A local user can cause a Denial of Service DoS by stalling lock acquisition on a shared nullfs directory. Because root inodes in empty mount namespaces are shared across independent users and kernel threads, delaying directory iteration blocks subsequent file...

CVE-2026-98904

A flaw was found in the Linux kernel's i.MX mailbox driver. The driver prematurely registers the mailbox controller before completing runtime power management setup during device probing. A local user could exploit this race condition by interacting with the incompletely initialized device,...

CVE-2026-88781

Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to subsequent system information being tampered with or causing a system crash. Refer to the 'Security Update for Multiple...

CVE-2026-99056

A flaw was found in the Linux kernel's stream parser component. A race condition occurs when stopping the stream parser while socket receive operations are still actively executing. A local attacker could exploit this timing issue to cause a use-after-free memory error, potentially leading to...

CVE-2026-88781

Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to subsequent system information being tampered with or causing a system crash. Refer to the 'Security Update for Multiple...

CVE-2026-88781

An Untrusted Pointer Dereference vulnerability exists in the firmware of certain ASUS motherboards . A user with kernel-level privileges can supply an arbitrary memory address via an I/O command , which may result in tampered system information or a system crash . Remediation details are availabl...

SUSE CVE-2026-98598

In the Linux kernel, the following vulnerability has been resolved: ipv6: Prevent rt6insertexception for dying fib6info. Before the cited commit, fib6nhflushexceptions always set from-exceptionbucketflushed = 1 under rt6exceptionlock to prevent rt6insertexception from inserting a new exception fo...

SUSE CVE-2026-98601

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintelpcie: validate device-supplied DMA indices In btintelpciemsixrxhandle, the driver processes RX completion descriptors urbd1 written by the PCIe device into DMA-coherent memory. urbd1-frbdtag a 16-bit field fully...

SUSE CVE-2026-98602

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough Fix multiple out-of-bounds reads in Bluetooth BNEP frame processing: 1. In bneprxframe and bnepctrlframe net/bluetooth/bnep/core.c, use...