PT-2026-136085

In the Linux kernel, the following vulnerability has been resolved: pid namespace: make zap pid ns processes freezable When the init of a pid namespace exits, zap pid ns processes waits until all other pids in the namespace are freed. A tracer outside the namespace that does not reap its traced...

PT-2026-136080

In the Linux kernel, the following vulnerability has been resolved: pid namespace: prevent TIF NOTIFY SIGNAL from interrupting the reaper Since commit 7fea700e04bd "zap pid ns processes: clear TIF NOTIFY SIGNAL along with TIF SIGPENDING" zap pid ns processes clears TIF NOTIFY SIGNAL before every...

PT-2026-136104

In the Linux kernel, the following vulnerability has been resolved: io uring: wake ring pollers for local task work With IORING SETUP DEFER TASKRUN completions are queued as local work, and only become CQEs when the submitter enters the kernel to wait for events. For an application that finds out...

PT-2026-136095

In the Linux kernel, the following vulnerability has been resolved: soc/tegra: pmc: Fix uninitialised clock rate For legacy 32-bit Tegra devices, the warning in the tegra pmc enter suspend mode function is being triggered because the early pmc-rate variable is never configured and hence, always 0...

PT-2026-136096

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix resident conversion in ntfs new attr flags When setting sparse/compressed flags on a resident attribute, the function skipped the resident-to-non-resident conversion and terminated...

PT-2026-136079

In the Linux kernel, the following vulnerability has been resolved: io-wq: order the exit bit against worker creation task work io wq exit workers cancels task work for queued worker creation with task work cancel match. That has a plain load of task-task works. io queue worker create adds the ne...

PT-2026-136102

In the Linux kernel, the following vulnerability has been resolved: io uring/zcrx: fix buffer offsets in areas above 4GB io zcrx queue cqe computes the offset of the buffer in its area from net iov idx, which is an unsigned int, so the shift is done in 32 bits and only the result is widened to th...

PT-2026-136103

In the Linux kernel, the following vulnerability has been resolved: io uring/napi: make stale entries time out after 60s With dynamic tracking a NAPI id that hasn't been seen for a minute is meant to be dropped from the list the ring busy polls. The timeout is added to jiffies, but it is defined ...

PT-2026-136084

In the Linux kernel, the following vulnerability has been resolved: i2c: xiic: restore non-managed runtime PM to fix clk WARN flood The devres conversion replaced manual pm runtime enable/disable with devm pm runtime set active enabled and dropped the remove-time runtime PM teardown. The managed...

Sinister

Sinister This small python script can do really awesome work. Sinister is Keylogger Generator for Windows/Linux, which sends key-logs & screenshot via email with other juicy target info written in Python 3. Disclaimer :computer: This project was created only for good purposes and personal use. TH...

Espionage

Espionage - A Network Traffic Interceptor For Linux Featured In About Espionage Espionage is a network packet sniffer that intercepts large amounts of data being passed through an interface. The tool allows users to to run normal and verbose traffic analysis that shows a live feed of traffic,...

applepie

applepie, a hypervisor implementation for Bochs Hello! Welcome to applepie! This is a tool designed for fuzzing, introspection, and finding bugs! This is a hypervisor using the Windows Hypervisor Platform API present in recent versions of Windows specifically this was developed and tested on...

kernel: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer

A flaw was found in the Linux kernel's libiscsitcp component. A remote attacker, acting as a malicious iSCSI target, could send a specially crafted iSCSI SCSI Command Response ISCSIOPSCSICMDRSP with an oversized data segment. This could lead to a buffer overflow in a fixed-size buffer, potentiall...

kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change

In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Always remove class from active list before deleting in etsqdiscchange [email protected] says: The vulnerability is a race condition between etsqdiscdequeue and etsqdiscchange. It leads to UAF on stru...

kernel: net: bridge: use a stable FDB dst snapshot in RCU readers

A flaw was found in the Linux kernel. Inconsistent handling of local Forwarding Database FDB entries in the bridge networking component's RCU Read-Copy-Update readers can lead to a null-pointer dereference. A local attacker could exploit this by triggering a concurrent update to an FDB entry,...

kernel: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error

A flaw was found in the Linux kernel's Bluetooth Host Controller Interface HCI Universal Asynchronous Receiver/Transmitter UART driver. When the hciregisterdev function fails, a flag indicating protocol initialization is not properly cleared. This oversight allows incoming UART data to be process...

Critical: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq

A flaw was found in the Linux kernel's Wacom Human Interface Device HID driver. This vulnerability allows a remote attacker to trigger an out-of-bounds read by sending a specially crafted, short Bluetooth HID report. This can lead to the disclosure of sensitive information from the system's memor...

kernel: sctp: validate embedded INIT chunk and address list lengths in cookie

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. Specifically, improper validation of embedded INIT chunk and address list lengths in SCTP cookies could allow a remote attacker to trigger out-of-bounds reads. This could lead to information disclosur...

kernel: arm64: tlb: Flush walk cache when unsharing PMD tables

A flaw was found in the Linux kernel, specifically within the arm64 architecture's Translation Lookaside Buffer TLB management. When a Page Middle Directory PMD table was unshared, the TLB flush operation did not correctly invalidate entries in the walk cache. This oversight could leave stale PMD...