CVE-2026-89824

A flaw was found in the drm/panel-edp component of the Linux kernel. This vulnerability occurs due to an i2c adapter reference leak during probe failure or driver unbind, especially when a device tree redundantly uses the 'ddc-i2c-bus' property. This resource leak could potentially lead to system...

CVE-2026-31431---Copy-Fail-PoC

Описание Этот репозиторий содержит анализ CVE-2026-31431 Copy Fail в ядре Linux. Он нацелен на локальное повышение привилегий LPE через манипуляцию page cache. Правовое уведомление Этот проект предназначен только для образовательных и тестовых целей. Любое несанкционированное использование являет...

CVE-2026-89837

A flaw was found in the Linux kernel's f2fs filesystem. The findinlevel function, responsible for managing file system entries, fails to release a memory reference dentry folio when an internal error occurs during a call to findinblock. This oversight leads to a memory leak, which can be exploite...

CVE-2026-89996

A flaw was found in the Linux kernel's dma-buf subsystem. A local attacker can exploit a race condition during the DMAHEAPIOCTLALLOC operation. If the copytouser function fails after a file descriptor fd has been installed, the fd is leaked for the lifetime of the process. This continuous leaking...

CVE-2026-93102

A flaw was found in the Linux kernel's RDMA/hfi1 driver. During a late probe failure, the hfi1initdd function allocates shared RX support, but if subsequent initialization or device registration fails, the allocated memory is not properly freed. This oversight can lead to a memory leak, potential...

CVE-2026-93083

A flaw was found in the armscmi firmware component of the Linux kernel. When the mailboxchansetup function attempts to set up a unidirectional transmit TX receiver channel, it may fail to properly release the primary channel if the secondary channel request fails. This resource leak can leave the...

CVE-2026-90188

A flaw was found in the Linux kernel's nullblk module. When sharedtags is enabled and device creation fails after allocating a global tag set, the global tag set is not properly freed. This oversight leads to a permanent memory leak, which could potentially result in a Denial of Service DoS due t...

CVE-2026-90424

A flaw was found in the Linux kernel, specifically within the iommu/tegra241-cmdqv driver. This vulnerability involves a resource leak during the initialization process of a component called VINTF0. If certain initialization steps fail, the VINTF0 resource is not properly released, leading to its...

CVE-2026-90378

A flaw was found in the Linux kernel's mt76 wireless driver, specifically in the mt792x SDIO TX path. When the txprepareskb function fails to prepare a socket buffer skb for transmission, the skb is not properly released. This memory leak can lead to resource exhaustion, potentially causing a...

CVE-2026-93059

A flaw was found in the drm/msm component of the Linux kernel. This vulnerability occurs due to a missing reference count decrement in the recoverworker function during GPU hang recovery. This oversight leads to a taskstruct reference leak, which can accumulate over time and potentially cause a...

CVE-2026-92519

A flaw was found in the Linux kernel. When the BPF Just-In-Time JIT compiler processes subprograms, a memory leak can occur. If JIT compilation fails for a subprogram, the bpfjitfree function does not properly free the associated memory for the JIT context offsets array. This can lead to a gradua...

CVE-2026-90384

A flaw was found in the Linux kernel's iomap subsystem. This issue arises when iomap callback functions, specifically -iomapbegin, fail to release a "folio batch" of memory pages during certain error conditions. This resource management oversight, particularly when used by filesystems like XFS,...

CVE-2026-93090

A flaw was found in the Linux kernel's ARM System Control and Management Interface SCMI firmware. During the setup of SCMI channels, a failure can occur where previously registered resources are not properly released. This oversight can lead to resource exhaustion, potentially causing system...

CVE-2026-93185

A flaw was found in the Linux kernel's audio subsystem, specifically within the SoundWire SDW driver for the rt700 codec. This vulnerability arises when a SoundWire device is removed, as the system may fail to properly cancel all pending tasks associated with the device. Consequently, an active...

dirtyclone-CVE-2026-43503

CVE-2026-43503 — DirtyClone Локальное повышение привилегий в Linux. Клонированный skbuff теряет флаг SKBFLSHAREDFRAG, поэтому дешифрование ESP на месте записывает в файловую память page-cache. PoC патчит /etc/passwd в кэше для внедрения учетной записи с uid-0 и даёт root shell. Диск никогда не...

dirtyfrag-arm64

dirtyfrag-arm64 arm64/aarch64 порт V4bel/dirtyfrag CVE-2026-43284, CVE-2026-43500. Протестировано на Ubuntu 24.04.4 LTS с linux-aws 6.17.0-1013-aws на AWS Graviton самая новая доступная на момент написания. Полный разбор с анализом обхода AppArmor, рекомендациями по усилению защиты и обнаружению:...

CVE-2026-90077

A flaw was found in the Linux kernel's network net subsystem. An issue in the copynetns error handling path allows for resources allocated during network namespace creation to leak. This occurs because the preinitnet function returns prematurely, preventing proper resource deallocation. A local...

CVE-2026-90390

A flaw was found in the Linux kernel's md/bitmap component. When the backlogstore function is called, it suspends the array before verifying the existence of a write-mostly device. If such a device is not found, the error handling path fails to resume the array, leaving it in a suspended state...

CVE-2026-90126

A flaw was found in the Linux kernel's Real-Time Clock RTC pcf8563 driver. The pcf8563clkoutregisterclk function registers a clock provider without properly unregistering it when the device is unbound or the module is reloaded. This oversight causes a continuous leak of memory and object...

CVE-2026-90194

A flaw was found in the Linux kernel's Advanced Configuration and Power Interface ACPI scan module. When a device fails to add, the system's rollback process does not properly clean up allocated bus IDs and instance numbers. This oversight can lead to a resource leak, potentially causing a Denial...