attr security update

An update is available for attr. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The attr packages provide extended attributes, which can be used to store system...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

kernel-rt security, bug fix, and enhancement update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

RLSA-2026:59737 Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: sctp: purge outqueue on stale COOKIE-ECHO handling CVE-2026-52924 kernel: scsi: target: iscsi: Validate CHAPR length before base64...

CVE-2026-80563

A flaw was found in the Linux kernel's gpio: sloppy-logic-analyzer component. A local attacker with root privileges can exploit a race condition during the unbinding of a platform device. This vulnerability allows writing into memory that has already been freed, which can lead to system instabili...

CVE-2026-74746

A flaw was found in the netfilter flowtable component of the Linux kernel. This vulnerability occurs due to a timing issue where the system's garbage collection can free a network flow while it is still being set up. This can lead to a 'use-after-free' condition, where the system attempts to acce...

CVE-2026-80583

A flaw was found in the Linux kernel, specifically within the lpass-tx-macro audio codec driver. This vulnerability arises from the driver's incorrect handling of certain control values, where it uses an improper data type for accessing enumerated kernel controls. This error can lead to a system...

CVE-2026-80573

A flaw was found in the Linux kernel's iforce driver, which handles input devices such as joysticks and wheels. This vulnerability occurs because the iforceprocesspacket function processes incoming data packets without adequately validating their lengths. A local attacker could exploit this by...

CVE-2026-74747

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. A local attacker can manipulate the IP Header Length ihl field within network packets. This manipulation can lead to an out-of-bounds access when the kernel attempts to revalidate embedded headers, potentially causing system...

cryptovenom

CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...

CVE-2026-74741

A flaw was found in the Linux kernel's ngbe network driver. In systems configured for non-MSI-X interrupt handling, such as legacy INTx or single MSI modes, a missing initialization of a pointer can lead to a NULL pointer dereference. This vulnerability can cause the system to crash, resulting in...

RingReaper

RingReaper RingReaper è un agente di post-esplorazione per Linux progettato per chi ha bisogno di operare in modo stealth, riducendo al minimo le possibilità di essere rilevato da soluzioni EDR. L'idea alla base di questo progetto era sfruttare iouring , la nuova interfaccia I/O asincrona del...

CVE-2016-5195

记录仅以学习为目的，禁止用于非法用途 原理 该漏洞的原理是依靠并发刷写脏页，使原本只读权限的文件内容发生变更 如果被修改的文件为root所属且具备SUID权限，那么就可以利用其进行提权 影响范围 在2016年10月前被编译的且版本在2.6.22 到 4.8.3之间的内核，因为2016年10月后的大概率被打补丁了 务必是Ext文件系统，如果是XFS文件系统，就会触发xfs只读页断言，而后系统重启，变成DDos攻击了 工具代码（dirtycowfilepayload.c） root@kitploit: include include include include include inclu...

CVE-2019-18634-writeup

Análise do CVE-2019-18634 https://www.exploit-db.com/exploits/47995 Sudo 1.8.25p - 'pwfeedback' Buffer Overflow PoC A opção pwfeedback do sudo pode ser usada para fornecer feedback visual quando o usuário está digitando sua senha. Para cada tecla pressionada, um asterisco é impresso. Esta opção f...

CVE-2026-80578

A flaw was found in the Linux kernel's fbdev core. A local user could trigger an out-of-bounds read vulnerability in the fbioread function. This occurs due to a pointer desynchronization when handling partial copies from a faulty user buffer, allowing the system to read beyond intended memory...

CVE-2026-80521

A flaw was found in the Linux kernel's afunix component. A race condition during concurrent send and close operations can lead to the garbage collector GC partially freeing a Strongly Connected Component SCC. This inconsistent state may cause subsequent GC operations to iterate over a partially...

f_hid-4.14-backports

Backports de fhid para Linux 4.14.190 SM-A525F Três correções para drivers/usb/gadget/function/fhid.c, aplicadas manualmente a um kernel Android de fornecedor 4.14.190 e verificadas no dispositivo em que rodam. 4.14 está em fim de vida. Não existe backport estável para nenhuma destas correções, e...

CVE-2026-53613-poc

CVE-2026-53613 PoC Vulnerabilidade TOCTOU no mount8 que permite escalonamento local de privilégios para root. Versões Vulneráveis util-linux 2.41.0 até 2.41.4 util-linux 2.42.0 até 2.42.1 Exploits Arquivo| Método| Alvo ---|---|--- exploitshell.sh| Extração de chave SSH| /root exploitdirectshell.s...

Copy-Fail_Detect_and_mitigate_CVE-2026-31431

Copy Fail – CVE-2026-31431-Erkennungs- und Minderungstool Erkennen der Exposition gegenüber CVE-2026-31431 Copy Fail und optionales Anwenden einer Host-Minderung durch Deaktivieren des Kernel-Moduls algifaead auf betroffenen Systemen. Was dieses Repository bietet copyfail-check.sh – prüft den...

CVE-2026-31431-Checker-Mitigator

Checker e Mitigatore CVE-2026-31431 Uno scanner di vulnerabilità e strumento di mitigazione semplice e sicuro per CVE-2026-31431 noto anche come "Copy Fail", una vulnerabilità di escalation dei privilegi locale nell'interfaccia crittografica AFALG del kernel Linux. Nota - È uno script completamen...