like-dbg

LIKE-DBG LIKE-DBG LI nux-KE rnel-D e B u G ger zielt darauf ab, die langweiligen Schritte zu automatisieren, die beim Einrichten einer Linux-Kernel-Debugging-Umgebung anfallen. Ich habe mich auf den Weg gemacht, in die Kernel-Exploitation-Forschung einzutauchen, und fand bestehende Lösungen nicht...

SUSE-SU-2026:3694-1 Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.51 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024. -...

SUSE-SU-2026:3698-1 Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.44 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024. -...

SUSE CVE-2026-74581

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: clear suppressed fib6 rule result fib6rulesuppress drops a suppressed route with ip6rtputflags, but leaves res-rt6 pointing at the released rt6info. If no later rule supplies a replacement, fib6rulelookup still sees...

PT-2026-79625

In the Linux kernel, the following vulnerability has been resolved: net/sched: act gact, act police: range check the fallback control action tcf action check ctrlact range checks the primary control action: if !opcode ret = action TC ACT VALUE MAX ? -EINVAL : 0; TC ACT VALUE MAX is TC ACT TRAP, s...

PT-2026-79730

In the Linux kernel, the following vulnerability has been resolved: enic: fix tx hang reset use-after-free on device removal enic remove cancels the reset and change mtu work items but does not cancel tx hang reset. A TX timeout that fires while the device is being removed can schedule enic tx ha...

PT-2026-79719

In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: Fix use-after-free in bpf iter tcp established batch reqsk queue hash req publishes a TCP NEW SYN RECV request sock onto the ehash chain, drops the bucket lock, and only afterwards sets rsk refcnt to 3. Lockless readers...

PT-2026-79737

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check for tg ops in dce110 set avmute Some older DCE timing generators do not implement is tg enabled in their ops table. Calling it unconditionally when waiting for AV mute frames causes a NULL pointer dereferen...

PT-2026-79677

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: acquire init mm lock on huge vmap to avoid ptdump UAF Patch series "mm: fix UAF caused by race between ptdump and vmap pgtable freeing", v6. Kernel page table walkers fall into two broad categories - those ranges wher...

PT-2026-79727

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leak in btrfs do encoded write Local fuzzing of 6.12.94 has found the following memory leak: Unreferenced object 0xffff888018050a80 size 64: comm "syz.0.17", pid 10297, jiffies 4294953601 hex dump first 32 bytes...

PT-2026-79701

In the Linux kernel, the following vulnerability has been resolved: tcp: fix TFO max qlen accounting across reuseport migration A listener's TCP FASTOPEN max qlen stops being accurate and lets through far more pending Fast Open requests than it was configured for. This only shows up with SO...

PT-2026-79591

In the Linux kernel, the following vulnerability has been resolved: sctp: clear new transport when removing a peer sctp process asconf param stores a newly added peer transport in asoc-new transport. After all parameters in the ASCONF chunk have been processed, sctp sf do asconf uses this pointer...

PT-2026-79618

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: avoid refilling the RX queue after teardown Commit b917507e5ad9 "vsock/virtio: stop workers during the .remove" made the RX worker jump to its common exit when rx run is clear. That exit still refills the RX queue...

PT-2026-79603

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information option length validation rt6 route rcv validates the Route Information option RFC 4191 length against the prefix length, but both checks are off by one. rinfo-length is the ND option length in units of...

PT-2026-79738

In the Linux kernel, the following vulnerability has been resolved: gpio: pca953x: fix pca953x irq bus sync unlock regmap lock Locking is disabled in the regmap config as this driver uses its own lock. This means that all calls to regmap functions read or write must hold the i2c lock. The functio...

PT-2026-79606

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Use current context for safe per-CPU buffer swap The ring buffer swap cpu function currently checks the per-CPU committing counter to determine if a buffer is actively being written to before performing the swap...

PT-2026-79710

In the Linux kernel, the following vulnerability has been resolved: udp: fix potential use-after-free in tunnel segmentation skb udp tunnel segment gets the UDP header before ensuring the tunnel header is in the skb head. If the pull reallocates skb-head, the saved UDP header pointer is no longer...

PT-2026-79700

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf flow table: drop existing skb dst before skb dst set noref Incoming skbs passing through netfilter flowtable offload hooks or XFRM offload path might already carry a ref-counted dst entry assigned during earlier RX ...

PT-2026-79728

In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject inline extents without valid headers BUG For a crafted btrfs image, the following KASAN can be triggered when reading an inline lzo compressed file extent: BUG: KASAN: slab-out-of-bounds in lzo...

PT-2026-79599

In the Linux kernel, the following vulnerability has been resolved: sched/psi: Shut down rtpoll timer in psi cgroup free psi schedule rtpoll work is called locklessly from the scheduler hotpath and can race psi trigger destroy taking down the last rtpoll trigger under rtpoll trigger lock: psi...