SUSE-SU-2026:4687-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2022-50645: EDAC/i10nm: fix refcount leak in pcigetdevwrapper bsc1254633. - CVE-2026-31663: xfrm: hold device only for the asynchronous decryption bsc1263133. -...

EUVD-2026-66584

In the Linux kernel, the following vulnerability has been resolved: scsi: core: pair EH runtime PM get and put shost-ehnoresume is currently consulted twice in one error handling iteration: once before scsiautopmgethost and once again before scsiautopmputhost. That is racy when a PM-triggered err...

EUVD-2026-66458

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Pad trailing CCA or EP11 message with zeros The both functions xcrbmsgtotype6cprbmsgx and xcrbmsgtotype6ep11cprbmsgx copy the user space message into a kernel buffer based on the message length. But on further...

EUVD-2026-66590

In the Linux kernel, the following vulnerability has been resolved: optee: ffa: Add NULL check in opteeffalendprotmem Sashiko locally reports a possible null dereference under memory pressure due to the lack of validation of the allocated pointer. Fix that by adding the missing check...

CVE-2026-31431-Linux-Copy-Fail

🛡️ CVE-2026-31431-Linux-Copy-Fail - Execute Custom Shellcode With Ease 📌 Project Overview This software provides a tool to test the Linux CVE-2026-31431 vulnerability. It uses the Rust programming language to interact with system files. The program allows users to run custom shellcode on targeted...

CVE-2026-98402

A flaw was found in the Linux kernel. An attacker could cause a Denial of Service DoS or system instability by triggering network error events while kernel event tracing is active. When recording Internet Control Message Protocol ICMP messages, the kernel attempts to read transport header...

CVE-2026-98386

A flaw was found in the Linux kernel's qla2xxx storage driver. When preparing request queues for specific storage adapters, the driver improperly uses standard memory operations instead of dedicated device input/output I/O functions to zero memory. On certain processor architectures, such as ARM6...

CVE-2026-99999 ipv4: validate checksum_start before completing checksum

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...

CVE-2026-99999 ipv4: validate checksum_start before completing checksum

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...

EUVD-2026-102044

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...

CVE-2026-99999 ipv4: validate checksum_start before completing checksum

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...

CVE-2026-99999

The Linux kernel contains a vulnerability in the IPv4 stack where the skb_checksum_help() function fails to validate the csum_start metadata before completing a checksum. This allows a packet with malformed metadata to cause the kernel to perform an out-of-bounds memory write , potentially corrup...

-Kernel-ptrace-c-mishandles-vulnerability-CVE-2019-13272

-CVE-2019-13272...

CVE-2026-31431

CVE-2026-31431 Vulnerability Overview CVE ID：CVE-2026-31431 Alias：Copy Fail Severity：High CVSS v3 Score 7.8 Vulnerability Type：Local Privilege Escalation LPE Affected Component：The algifaead module AFALG cryptographic interface of the Linux kernel Prerequisites：The attacker only needs a normal us...

CVE-2026-98432 ipv4: free inet_opt and ireq_opt after an RCU grace period

In the Linux kernel, the following vulnerability has been resolved: ipv4: free inetopt and ireqopt after an RCU grace period tcpv4synrecvsock transfers ownership of ireq-ireqopt to the child socket newinet-inetopt without copying it. Another cpu can concurrently process a retransmitted SYN for th...

EUVD-2026-102025

In the Linux kernel, the following vulnerability has been resolved: ipv4: free inetopt and ireqopt after an RCU grace period tcpv4synrecvsock transfers ownership of ireq-ireqopt to the child socket newinet-inetopt without copying it. Another cpu can concurrently process a retransmitted SYN for th...

CVE-2026-98432 ipv4: free inet_opt and ireq_opt after an RCU grace period

In the Linux kernel, the following vulnerability has been resolved: ipv4: free inetopt and ireqopt after an RCU grace period tcpv4synrecvsock transfers ownership of ireq-ireqopt to the child socket newinet-inetopt without copying it. Another cpu can concurrently process a retransmitted SYN for th...

CVE-2026-98432

The Linux kernel contains a use-after-free vulnerability in its IPv4 networking stack. The root cause is that tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to a child socket without copying it. Due to the removal of listener locks in certain commits, a child socket can be freed ...

CVE-2024-50251-PoC

CVE-2024-50251-PoC Just a local Dos bug in Linux kernel...

cve-2017-16995

CVE-2017-16995 Writeup The folder containes a line-by-line source code analysis for CVE-2017-16995 Linux BPF local privilege escalation. Exploit and patch tested on kernel 4.4.0.116. Credits Special thanks to difengtang who has also contributed this writeup. Exploit scripts was created by @iBearc...