CVE-2026-99141

A flaw was found in the Linux kernel's tracing subsystem. This vulnerability allows a local user with access to tracing controls to cause a Denial of Service DoS by triggering a kernel crash. When switching tracers, the kernel leaves trace flags unassigned if the new tracer lacks default flags. I...

CVE-2026-99143

A flaw was found in the Linux kernel's tracing subsystem. A local attacker could cause a Denial of Service DoS or memory corruption by exploiting an out-of-bounds memory access vulnerability during filter parsing. The predicate parsing mechanism improperly calculates boundary limits for event...

CVE-2026-99144

A flaw was found in the Linux kernel's schedext extensible scheduler component. A race condition during the destruction of a user dispatch queue allows a deferred task re-enqueue operation to access memory that has already been freed. A local user can exploit this use-after-free vulnerability to...

CVE-2026-99142

A flaw was found in the Linux kernel's tracing subsystem. In the event filter parser, insufficient boundary checks allow the operator stack to be written past its allocated limit. A local attacker could exploit this vulnerability by submitting a specially crafted trace filter expression, triggeri...

CVE-2026-99145

A flaw was found in the Linux kernel's Intel Xe graphics driver drm/xe. A local user could exploit this vulnerability by altering the memory state of a pinned graphics buffer object, causing the driver to unconditionally transfer pages between memory tracking pools. This issue triggers an integer...

CVE-2026-99146

A flaw was found in the Linux kernel's Intel i915 graphics driver. When parsing Display Microcontroller DMC firmware headers, the driver fails to validate the target load address against allowed memory ranges. An attacker capable of supplying a crafted firmware file could exploit this vulnerabili...

CVE-2026-99147

A flaw was found in the Linux kernel's Direct Rendering Manager DRM subsystem. A local user can exploit this vulnerability to cause a Denial of Service DoS or memory corruption. This issue arises during lock contention when the execution handler drmexec retains a pre-locked object that is about t...

CVE-2026-99139

A flaw was found in the Linux kernel's Transmission Control Protocol TCP subsystem. A race condition occurs when querying TCP congestion control settings without proper locking, which can allow dynamically allocated memory to be released while still being read. A local attacker can exploit this...

Important: Red Hat Security Advisory: java-21-openjdk security update for RHEL 10

An update for java-21-openjdk is now available for Red Hat Enterprise Linux 10.0 Extended Update Support and Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

CVE-2026-99138

A flaw was found in the Linux kernel. A local user could exploit this use-after-free vulnerability to escalate privileges or cause a Denial of Service DoS. The issue occurs when querying Transmission Control Protocol TCP socket options without proper locking, causing the kernel to access memory...

kernel: xfrm: ah6: validate routing header segments_left

A flaw was found in the Linux kernel's xfrm subsystem, specifically within the AH6 Authentication Header for IPv6 module. The ipv6rearrangerthdr function does not properly validate the segmentsleft field in routing headers when processing raw IPv6 HDRINCL packets. This oversight allows an attacke...

kernel: net: bridge: stop fast-leave after deleting a port group

A flaw was found in the Linux kernel's network bridge module. When handling multicast fast-leave, a vulnerability exists where the system may attempt to access a port group after it has been deleted. This can occur if multicast-to-unicast was previously enabled and then disabled, leading to a sta...

kernel: packet: use consistent hard_header_len in non-ring send paths

An out-of-bounds write problem was observed in packetsendmsgspkt in net/packet/afpacket.c in the Linux Kernel. In this flaw, AFPACKET hardheaderlen race may allow local privilege escalation...

kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite

A flaw was found in the Linux kernel's netfilter bridge ebtables SNAT Source Network Address Translation module. This vulnerability allows a local attacker on a system configured with specific bridge netfilter rules to improperly modify underlying memory pages during an ARP Address Resolution...

Important: Red Hat Security Advisory: kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, kpatch-patch-5_14_0-284_158_1, kpatch-patch-5_14_0-284_172_1, and kpatch-patch-5_14_0-284_188_1 security update

An update for multiple packages is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

kernel: pppoe: reload header pointer after dev_hard_header()

A flaw was found in the Linux kernel's PPPoE Point-to-Point Protocol over Ethernet implementation. This vulnerability occurs because a pointer to network packet data is not updated after memory is reallocated, leading to the use of an outdated memory address. An attacker with local access could...

CVE-2026-99148

A flaw was found in the Linux kernel's AMD GPU driver amdgpu. When closing a handle to a shared graphics buffer object, the driver prematurely detaches its eviction fence before verifying whether active references remain. A local user could exploit this vulnerability to trigger the premature...

wificurse

This program listens for beacons sent from wireless access points in the range of your wireless station. Once received the program extracts the BSSID of the AP and transmits deauthentication packets using the broadcast MAC address. This results to the disconnection of all clients connected to the...

Important: Red Hat Security Advisory: glycin-loaders security update

An update for glycin-loaders is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

lsm_bpf_check_argc0

Check ARGC0 LSM BPF Simple LSM BPF program to prevent program executions with argc == 0, e.g. pwnkit CVE-2021-4034. It does nothing more than a simple check that all exec system calls are called with argc = 1. The check is based on Ariadne Conill's patch. How to build On Ubuntu $ sudo apt-get...