CVE-2026-65584 GPU DDK - Stack Buffer Overflow via undersized UFO address array in DumpStalledContextInfo

Software installed and run as a non-privileged user may conduct improper GPU system calls causing a stack overflow in the kernel. The overflow occurs when processing resolved Linux/Android fence synchronization checkpoints, while user checkpoints are excluded from the stack array. Successful...

CVE-2026-65584

A stack buffer overflow vulnerability exists in the GPU DDK when a non-privileged user makes improper GPU system calls. The issue occurs in the DumpStalledContextInfo function during the processing of resolved Linux/Android fence synchronization checkpoints , as user checkpoints are excluded from...

CVE-2026-99149

A flaw was found in the AMDGPU graphics driver within the Linux kernel. When memory allocation fails during user pointer memory validation in the amdgpugemuserptrioctl function, the driver immediately returns an error and bypasses required cleanup routines. This issue causes Graphics Execution...

CVE-2026-99140

A flaw was found in the Linux kernel's tracing subsystem. A local user with access to the tracing interface can cause a Denial of Service DoS due to a race condition when attaching histogram triggers to filtered events. Under specific timing conditions, buffered trace events are processed without...

CVE-2026-99137

In the Linux kernel, the following vulnerability has been resolved: cifs: don't update isize in cifsdotruncate without a cached handle If findwritablefile returns null, cifsfileflush will return 0 without issuing setfilesize, and the outer 'if !rc' block will set isize to 0 before telling the...

CVE-2026-99136

A flaw was found in the Linux kernel's dm-crypt subsystem. A race condition occurs during pending disk encryption request processing where the error status is read before reference counting is completed. During concurrent input/output I/O operations, this flaw causes failed read or write operatio...

frida-fuzzer

Frida API Fuzzer v1.4 Copyright C 2020 Andrea Fioraldi [email protected] Released under the Apache License v2.0 This experimental fuzzer is meant to be used for API in-memory fuzzing. The design is highly inspired and based on AFL/AFL++. ATM the mutator is quite simple, just the AFL's havoc...

eBPF-hid_guard

eBPF-hidguard See Why This Was Archived below. A Linux kernel-space security monitor for detecting and blocking HID injection attacks Rubber Ducky, O.MG Cable, ESP32-based keyboard emulators using eBPF HID-BPF structops. What This Does Malicious HID devices emulate keyboards and inject keystrokes...

Exploit for CVE-2026-98432

CVE-2026-98432: Linux kernel IPv4 TCP use-after-free Attack...

Exploit for CVE-2026-98432

CVE-2026-98432 research toolkit A small, tested laboratory to...

CVE-2026-99150

A flaw was found in the Linux kernel's AMD GPU driver. When an error occurs while copying register data to user space during a debugfs read operation, the driver improperly releases a runtime Power Management PM reference twice. A local user could exploit this flaw by providing an invalid memory...

CVE-2026-99151

A flaw was found in the Linux kernel's AMD display driver. This flaw allows a local user to cause a Denial of Service DoS through a system crash. The vulnerability occurs because the driver fails to properly validate display stream references before allocating or deallocating USB4 bandwidth,...

ignition security update

An update is available for ignition. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Ignition is a utility used to manipulate systems during the initramfs. This...

mod_auth_openidc:2.3 security update

An update is available for module.modauthopenidc, module.cjose, cjose, modauthopenidc. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The modauthopenidc is an...

CVE-2026-62847: Metalama: Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#

Metalama is a Roslyn-based open-source patterns and architecture toolkit for C. Prior to 2025.1.18, 2026.0.25 and 2026.1.19, Metalama.Framework and Metalama.Tool load and execute compile-time assemblies, auxiliary executable tools and embedded helper assemblies from predictable temporary...

Linux Distros Unpatched Vulnerability : CVE-2026-108275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - request-tracker5 - None CVE-2026-108275 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C...

Oracle Linux 9 : aspell (ELSA-2026-92458)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-92458 advisory. 12:0.60.8-9 - Backport fix for CVE-2026-103658 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note tha...

Linux Distros Unpatched Vulnerability : CVE-2026-108271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - request-tracker5 - None CVE-2026-108271 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C...

Amazon Linux 2023 : ecs-service-connect-agent (ALAS2023-2026-3355)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3355 advisory. Issue summary: A certificate with many nameRelativeToCRLIssuer CRLdistribution points causes disproportionate heap growth when OpenSSL cachesX.509 extensions. Impact summary: Receiving a crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-108363

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - request-tracker5 - None CVE-2026-108363 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C...