CVE-2026-99190: Linux: In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix memory leak in…

In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix memory leak in gpiodsetarrayvaluecomplex on error paths A drive-by review by Sashiko reports that, after a failed call to gpiochipsetmultiple, gpiodsetarrayvalue returns abruptly, bypassing the freeing of possibly...

honeybits

Honeybits A simple PoC tool designed to enhance the effectiveness of your traps by spreading breadcrumbs & honeytokens across your production servers and workstations to lure the attacker toward your honeypots. Author: Adel "0x4D31" Karimi. The Windows version of this project: honeybits-win...

CVE-2026-98974

A flaw was found in the Linux kernel's XFS file system. This vulnerability allows a local user to cause unauthorized data modification or potential privilege escalation by bypassing Copy-on-Write CoW protections. When exchanging file data ranges up to the end of a file, the file system incorrectl...

StegoCracker

Stegocracker !GitHub Repo starshttps://img.shields.io/g...

netgraph

Netgraph Netgraph is a packet sniffer tool that captures all HTTP requests/responses, and display them in web page. You can run Netgraph in your linux server without desktop environment installed, and monitor http requests/responses in your laptop's browser. Compile, Install, Run 1. go get...

wi-fi-fortress-auditor

SentinelDrift Audit wireless network resilience through passive signal intelligence, decoy trap synthesis, and predictive key-space analysis—all wrapped in a visual command deck for Linux security researchers. Overview Wireless networks are invisible rivers of data flowing through every office,...

Important: Red Hat Security Advisory: java-25-openjdk security update

An update for java-25-openjdk is now available for Red Hat Enterprise Linux 9 and Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Critical: Red Hat Security Advisory: ca-certificates and nss security update

An update for multiple packages is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

kernel: ipv4: validate checksum_start before completing checksum

A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

MGASA-2026-0560 Updated util-linux package fixes security vulnerabilities

Additional fix for CVE-2024-28085. Local Privilege Escalation via TOCTOU in mount8 hookowner.c chmod/chown. CVE-2026-53612 Local Privilege Escalation via TOCTOU in mount8 — Target Path Redirection. CVE-2026-53613 Local Privilege Escalation via LIBMOUNTFORCEMOUNT2 Environment Variable —...

Updated util-linux package fixes security vulnerabilities

Additional fix for CVE-2024-28085. Local Privilege Escalation via TOCTOU in mount8 hookowner.c chmod/chown. CVE-2026-53612 Local Privilege Escalation via TOCTOU in mount8 — Target Path Redirection. CVE-2026-53613 Local Privilege Escalation via LIBMOUNTFORCEMOUNT2 Environment Variable —...

panopticon

DEPRECATED The Panopticon project moved toGitlab and was restructed into multiple crates. The Qt GUI was replaced with Verso. I will merge PRs but won't do any substantial work on this version. Most links below are dead. Panopticon - A Libre Cross Platform Disassembler Panopticon is a cross...

CVE-2026-53359-Kernel-Fix

中文 | English 中文 升级 Linux Kernel 7.1.3 修复 CVE-2026-53359 教程 声明： 本文仅记录本人服务器环境下的修复过程，并非安全专业分析。如有不当之处，欢迎指正。 验证说明： 经源码比对确认，Linux Kernel 7.1.3 已包含修复 commit 81ccda30b4e8（"KVM: x86: Fix shadow paging use-after-free due to unexpected role"），该补丁在 arch/x86/kvm/mmu/mmu.c 的 kvmmmugetchildsp 函数中增加了 role.word...

Exploit for CVE-2026-111497

brotli-k8s-scan !testshttps://github.com/depuschm/brotli-...

SUSE CVE-2026-98889

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix sched scan IE sizing Scheduled scan built the probe request before iwlmvmscanfits, so oversized IEs could be copied into the fixed preq buffer before length validation. Move iwlmvmbuildscanprobe after the...

SUSE CVE-2026-98898

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized When DPM is turned off with the amdgpu.dpm=0 module parameter, the thermal work queue isn't initialized so we shouldn't schedule any work on it. cherry picke...

SUSE CVE-2026-98901

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix lease break and ack state handling Do not skip valid lease states containing WRITECACHING when breaking level-II/read leases for writes and truncates. Handle lease break acknowledgments according to the SMB2 rule that...

SUSE CVE-2026-98905

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Properly acquire queue buffers in CRIU restore When kfdqueueacquirebuffers was split off from setqueuepropertiesfromuser, setqueuepropertiesfromcriu was missed. Thus, setqueuepropertiesfromcriu is not filling out the...

SUSE CVE-2026-98907

In the Linux kernel, the following vulnerability has been resolved: btrfs: protect sbwritepointer with invalidate lock sbwritepointer reads the super block from the block device page cache using readcachepagegfp. This has the same race with BLKBSZSET as the one fixed by commit 3f29d661e568 "btrfs...