SUSE-SU-2026:5048-1 Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-68426: xfrm: fix stale skb-prev after async crypto steals a GSO segment...

CVE-2026-99233

A flaw was found in the Linux kernel's event tracing subsystem. The kernel fails to properly verify the unique identity of trace events when updating reference counters for histogram triggers, comparing only their names. A local user with access to the tracing interface can exploit this by...

CVE-2026-99231

A flaw was found in the Linux kernel's iouring subsystem. A race condition in the waitid operation allows a request to be completed and freed while a wake-up handler is still accessing it, leading to a use-after-free vulnerability. A local user could exploit this flaw to cause a system crash,...

defense-matrix

Defense Matrix Archived Project This project was an attempt to automate various aspects of Linux security auditing and hardening. As time passed, I K4YT3X found many of the methodologies used in this project to be unideal and obsolete. Therefore, I recommend not continuing using this project but...

Exploit for CVE-2026-98432

🔥 CVE-2026-98432 — Linux Kernel IPv4 Use-After-Free...

Security update for the Linux Kernel (Live Patch 54 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.219 fixes various security issues: The following security issues were fixed: CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. CVE-2026-68426:...

CVE-2026-99077

A flaw was found in the Linux kernel's IPv4 User Datagram Protocol UDP implementation. When handling Internet Control Message Protocol ICMP error messages, routing exceptions were only recorded in the cache if the quoted UDP packet matched an existing active socket. An off-path remote attacker...

CVE-2026-74564

A flaw was found in the Linux kernel, specifically within the netfilter xthashlimit module. Improper validation of the XTHASHLIMITRATEMATCH flag can lead to uninitialized access to memory. This occurs when multiple rules refer to the same hashtable or when the flag is used with an older revision,...

Important: Red Hat Security Advisory: ghostscript security update

An update for ghostscript is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

Important: Red Hat Security Advisory: Red Hat build of Quarkus 3.33.4.SP2 release and security update

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for the vulnerability. For more information...

Important: Red Hat Security Advisory: Red Hat build of Quarkus 3.27.6.SP2 release and security update

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for the vulnerability. For more information...

ivre-wizard

IVRE . \ ,/ \ |\ / | | //\ | \ /\ | | / | '/ | / /\oo/\ | |/ / | | | | | | /\ // |/,|| ,| By BitBurner ivre-wizard An interactive wizard front end for IVRE to make creating scans to the database easier. Why? I created this script for doing scans with IVRE https://ivre.rocks/ on Kali...

Exploit for CVE-2026-98432

CVE-2026-98432 CHECKER v1.0 Verifica si tu equipo Linux es...

kernel: ethtool: cmis: require exact CDB reply length

A flaw was found in the Linux kernel's ethtool CMIS Common Management Interface Specification module. A malicious SFP Small Form-Factor Pluggable module could provide a reply with a length longer than expected, leading to an out-of-bounds write. This vulnerability can result in memory corruption...

kernel: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES

A flaw was found in the Linux kernel's ethtool subsystem. The ethnlupdateprofile function, responsible for updating profile settings, does not properly validate user-controlled input when processing Netlink nest lists. This allows a local attacker to cause an out-of-bounds write, potentially...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2026-99071

A flaw was found in the Linux kernel's IPv4 networking subsystem. A local user with network administration privileges can trigger a race condition during concurrent routing table updates. This timing issue occurs when preparing route change notifications, generating an unexpected message size err...

CVE-2026-98275

A flaw was found in the Linux kernel's Cortina Ethernet driver. This flaw may result in a Denial of Service DoS when a network receive buffer overrun occurs. Due to an incorrect bit calculation, the interrupt service routine acknowledges the wrong register bit, leaving the overrun interrupt...

CVE-2026-98171

A flaw was found in the Linux kernel's Server Message Block SMB client. A malicious or compromised remote server can exploit this flaw by sending specially crafted compound encrypted network responses. Due to improper bounds validation and pointer lifecycle management, the client can encounter a...

DEBIAN-CVE-2026-99242

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix race between fallocate and mmap reads The fallocate implementation only takes invalidatelock for punch hole, collapse range, and insert range operations. For standard allocation modes mode == 0, FALLOCFLKEEPSIZE, the lo...