488938 matches found
EUVD-2026-67468
In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: fail early if address range parameters are invalid The comment on top of struct damonregion clearly says that For any use case, @ar should be non-zero positive size. which is now verified in...
CVE-2026-80592
This Linux kernel vulnerability affects the samples/damon/mtier sample module. If the module is enabled before its node{0,1}_{start,end}_addr parameters are properly initialized, or if detect_node_addresses is true and a node is memoryless, a zero-size address range is passed to damon_new_region(...
CVE-2026-80592
In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: fail early if address range parameters are invalid The comment on top of struct damonregion clearly says that For any use case, @ar should be non-zero positive size. which is now verified in...
CVE-2026-80593
In the Linux kernel, the following vulnerability has been resolved: hwmon: asusatk0110 Check package count before accessing element atkecpresent walks the management group package returned by the GGRP ACPI method and, for each sub-package, reads its first element: id = &obj-package.elements0; if...
CVE-2026-80593 hwmon: (asus_atk0110) Check package count before accessing element
In the Linux kernel, the following vulnerability has been resolved: hwmon: asusatk0110 Check package count before accessing element atkecpresent walks the management group package returned by the GGRP ACPI method and, for each sub-package, reads its first element: id = &obj-package.elements0; if...
CVE-2026-80593 hwmon: (asus_atk0110) Check package count before accessing element
In the Linux kernel, the following vulnerability has been resolved: hwmon: asusatk0110 Check package count before accessing element atkecpresent walks the management group package returned by the GGRP ACPI method and, for each sub-package, reads its first element: id = &obj-package.elements0; if...
EUVD-2026-67469
In the Linux kernel, the following vulnerability has been resolved: hwmon: asusatk0110 Check package count before accessing element atkecpresent walks the management group package returned by the GGRP ACPI method and, for each sub-package, reads its first element: id = &obj-package.elements0; if...
CVE-2026-80592 samples/damon/mtier: fail early if address range parameters are invalid
In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: fail early if address range parameters are invalid The comment on top of struct damonregion clearly says that For any use case, @ar should be non-zero positive size. which is now verified in...
CVE-2026-80593
CVE-2026-80593 affects the asus_atk0110 hardware monitoring driver in the Linux kernel. The function atk_ec_present() reads the first element of each ACPI sub-package returned by the GGRP method without first verifying that the sub-package is non-empty. Because ACPICA allocates the element array ...
CVE-2026-80591
This vulnerability affects the f2fs filesystem in the Linux kernel . The flaw resides in f2fs_listxattr(), which fails to validate xattr entries before reading their fields. When a corrupted entry lies outside the valid xattr storage area, the function returns a successful partial result instead ...
CVE-2026-80591 f2fs: fix listxattr handling of corrupted xattr entries
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before reading its fields in f2fslistxattr. Return -EFSCORRUPTED when the entry is outside the valid xattr storage area instead of returning a...
EUVD-2026-67467
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before reading its fields in f2fslistxattr. Return -EFSCORRUPTED when the entry is outside the valid xattr storage area instead of returning a...
CVE-2026-80590 inet: frags: strip GSO state from fragments before reassembly
In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtionethdr tun/tap, or AFPACKET with PACKETVNETHDR can mark an IPv4 or IPv6 fragment as GSO; nothing relates gsotype to fragoff...
CVE-2026-80590
CVE-2026-80590 is a Linux kernel vulnerability in the IP fragment reassembly code path (inet: frags ). A virtio_net_hdr (via tun/tap or AF_PACKET) can mark an IPv4/IPv6 fragment as GSO; after reassembly the reassembled skb retains this GSO state, and the subsequent call to skb_segment() — which a...
EUVD-2026-67580
In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtionethdr tun/tap, or AFPACKET with PACKETVNETHDR can mark an IPv4 or IPv6 fragment as GSO; nothing relates gsotype to fragoff...
CVE-2026-80590
In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtionethdr tun/tap, or AFPACKET with PACKETVNETHDR can mark an IPv4 or IPv6 fragment as GSO; nothing relates gsotype to fragoff...
CVE-2026-80590 inet: frags: strip GSO state from fragments before reassembly
In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtionethdr tun/tap, or AFPACKET with PACKETVNETHDR can mark an IPv4 or IPv6 fragment as GSO; nothing relates gsotype to fragoff...
how-to-bypass-aslr-on-linux-x86_64
Bypassare l'aslr a 64 bit su Linux x86-64 In questo articolo discuterò dell'applicazione della tecnica descritta da Samuel Groß nel suo Remote iPhone Exploitation Part 2: Bringing Light into the Darkness -- a Remote ASLR Bypass, per bypassare l'ASLR su Linux x8664. Per dimostrarlo, risolverò una...
process-injection-playground
Linux Process Injection Playground Una raccolta completa di tecniche di process injection per Linux, che dimostra vari metodi per iniettare codice in processi in esecuzione. Questi esempi sono pensati per scopi educativi, ricerca sulla sicurezza e comprensione della manipolazione dei processi Lin...
ghostrace
GhostRace: स्पेक्युलेटिव रेस कंडीशन्स का दोहन और शमन इस रिपॉजिटरी में शामिल हैं: एक न्यूनतम PoC जो स्पेक्युलेटिव रेस कंडीशन की अवधारणा को चरण-दर-चरण सिंगल-थ्रेडेड तरीके से प्रदर्शित करता है। Linux कर्नेल v5.15.83 को स्पेक्युलेटिव कंकरंट यूज़-आफ्टर-फ्री SCUAF गैजेट्स के लिए स्कैन करने हेतु उपयोग क...