615279 matches found
Security update for the Linux Kernel (Live Patch 42 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.172 fixes various security issues: The following security issues were fixed: CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. CVE-2026-68426:...
Security update for the Linux Kernel (Live Patch 80 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.302 fixes various security issues: The following security issues were fixed: CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. CVE-2026-68426: xfrm: fix stale skb-prev after async crypto steals a GSO segment...
Cordon
Cordon ⚠️ PROJECT DEPRECATED Development on this project has been stopped because someone else was working on the same idea and built a better solution. We highly recommend checking out:Fence by Use-Tusk. Note: This repository was originally created forFOSS HACK 2026 , though we unfortunately...
Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.118 fixes various security issues: The following security issues were fixed: CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. CVE-2026-63968:...
Security update for the Linux Kernel (Live Patch 32 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.127 fixes various security issues: The following security issues were fixed: CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. CVE-2026-68426: xfrm: fix stale skb-prev after async crypto steals a GSO segment...
Exploit for CVE-2026-74583
CVE-2026-74583: use-after-free in Linux route4 classifier A r...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2026-43499 - Samsung 5.10 Kernel Devices IonStack https...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-scanner A single read-only bash script that checks...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2026-53157: use-after-free in Linux Phonet A use-after-fr...
util-linux: TOCTOU in the mount program when setting up loop devices
A flaw was found in util-linux. When an /etc/fstab entry is configured with the user,loop options, the mount program checks the file path with user permissions but later opens it with root privileges. This creates a brief Time-of-Check-Time-of-Use TOCTOU window where an attacker can substitute th...
util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority
The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve. Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an...
util-linux: util-linux: heap use-after-free in libblkid nested partition probing
A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition additions cause the array to be...
Important: Red Hat Security Advisory: util-linux security update
An update for util-linux is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes
A flaw was found in util-linux. When an /etc/fstab entry uses the user option together with X-mount.owner, X-mount.group, or X-mount.mode, mount8 changes ownership or permissions on the mount target after mounting without re-verifying the path. A local unprivileged user can exploit this...
util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser
A flaw was found in util-linux. An integer overflow vulnerability in the partition parsing library libblkid fails to properly enforce boundary checks on extended partition entries. A local attacker could exploit this flaw by presenting a crafted disk image or removable storage device for probing,...
util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks
When an external mount. helper runs but exits with a nonzero status, libmount still treats the helper invocation as successful and runs privileged post-mount hooks. A local unprivileged user with an /etc/fstab entry that uses the user option together with X-mount.idmap or X-mount.owner/group/mode...
util-linux: TOCTOU in the mount program via ancestor directory swap on target path
When an /etc/fstab entry is configured with the user or users option, mount8 validates the target path before performing the mount syscall, creating a Time-of-Check-Time-of-Use TOCTOU window. A local unprivileged user with write access to an ancestor directory of the mount target can swap that...
util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2
A flaw was found in util-linux. The mount8 SUID binary does not sanitize the LIBMOUNTFORCEMOUNT2 environment variable before use. A local unprivileged user can set this variable to force mount8 to use the legacy two-step mount2 code path, which applies security restrictions such as nosuid and...
util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection
A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount8 to bind another host directory. If the fst...