CVE-2026-98038

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. When validating programs that manage shared reference-counted objects, the BPF verifier incorrectly treats borrowed references as always valid and fails to require null-pointer checks. A local user can exploit this...

CVE-2026-97546

A flaw was found in the Linux kernel's XFS file system. A local user could trigger this vulnerability by mounting or repairing a corrupted file system containing zero-length directory entries. When salvaging these malformed entries during directory repair operations, the kernel fails to advance a...

CVE-2026-97542

A flaw was found in the Linux kernel's XFS file system. When performing online repair of an allocation group free list AGFL, the kernel fails to check return values during bitmap processing, silently ignoring errors. A local user capable of triggering file system repair operations could cause the...

CVE-2026-98037

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. An improper validation check fails to reject untrusted allocated-object pointers after their protection scope expires, incorrectly recognizing them as valid live objects. A local user with permissions to load BPF programs...

CVE-2026-98034

A flaw was found in the Linux kernel's eBPF Extended Berkeley Packet Filter verifier. This flaw allows a local user to achieve privilege escalation by submitting a specially crafted eBPF program. Because the verifier fails to properly track register precision when writing to kernel pointers, it...

CVE-2026-98035

A flaw was found in the Linux kernel's BPF subsystem. When updating or deleting elements in resizable hash tables, the kernel directly releases special object fields rather than safely deferring their cancellation, which is not safe when running in Non-Maskable Interrupt NMI context. A local user...

CVE-2022-29597

CVE-2022-29597: Local File Inclusion in RSS v500 The RRS v500 application by Solutions Atlantic is vulnerable to a Local File Inclusion LFI vulnerability. Any authenticated user has the ability to reference internal system files within requests made to the...

CVE-2026-98031

A flaw was found in the Linux kernel. When removing a nexthop routing group entry, an error path fails to properly initialize an error-reporting pointer, causing the kernel to dereference uninitialized stack memory. A local user with network administration privileges could exploit this flaw durin...

CVE-2026-97540

A flaw was found in the Linux kernel's Pegasus USB Ethernet driver. This vulnerability can lead to a Denial of Service DoS through a system crash. When dynamic device identifiers are configured, the driver improperly uses pointer calculations on heap memory instead of referencing its static devic...

CVE-2026-98028

A flaw was found in the Linux kernel's Netronome Flow Processor NFP network driver. When replacing an existing flow steering rule fails during hardware reprogramming, the driver fails to remove the old rule from its internal list, creating an inconsistency with the active rule counter. A local us...

CVE-2024-42002

A code injection vulnerability has been discovered in the Robot Operating System 2 ROS 2 'ros2topic' command-line tool, affecting all ROS 2 distributions from Crystal Clemmys up to and including Lyrical Luth and Rolling Ridley. The vulnerability lies in the 'hz' verb, which reports the publishing...

CVE-2025-60710

CVE-2025-60710 This is PoC for local privilege escalation vulnerability in \Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration scheduled task. When this scheduled task is started the taskhostw.exe process whill try to open the C:\Users%username%\AppData\Local\CoreAIPlatform.00\UKP directory...

CVE-2026-46215-POC

CVE-2026-46215: DRM GEM changehandle Use-After-Free unprivileged LPE Local privilege escalation via a use-after-free in the DRM core ioctl DRMIOCTLGEMCHANGEHANDLE drmgemchangehandleioctl, ioctl nr 0xD2. Reachable by any user with access to a render node /dev/dri/renderD, granted to the active...

CVE-2023-1326-PoC

CVE-2023-1326-PoC A proof of concept for CVE-2023–1326 in apport-cli 2.26.0 This vulnerability is privilege escalation in apport-cli 2.26.0, similar to CVE-2023–26604, this vulnerability only works if assign in sudoers: A privilege escalation attack was found in apport-cli 2.26.0 and earlier whic...

CVE-2025-27591-Below

CVE-2025-27591-Below 📌 Description This is a proof-of-concept PoC exploit for CVE-2025-27591 , a local privilege escalation vulnerability in the below system monitor tool. The issue arises from unsafe handling of log files /var/log/below/errorroot.log when executed with elevated privileges. By...

CVE-2026-97539

A flaw was found in the Linux kernel's xusbatm USB driver. When dynamic device identifiers are configured, the driver improperly performs pointer arithmetic on heap-allocated identifiers, resulting in an out-of-bounds array access. A local user could exploit this flaw to cause a Denial of Service...

CVE-2026-98022

A flaw was found in the Linux kernel. Multiple network subsystems allocate memory buffers based on the transmit queue length without enforcing an upper bound. A local unprivileged user can exploit this vulnerability by configuring an excessively large queue length on network devices, exhausting...

CVE-2026-97536

A flaw was found in the qla2xxx driver within the Linux kernel. A local user with administrative privileges could trigger a Denial of Service DoS or cause memory corruption during device or queue teardown. This issue occurs because background response queue tasks are not properly canceled before...

CVE-2026-97535

A flaw was found in the Linux kernel's qla2xxx driver. A local user can cause a Denial of Service DoS via a system crash by triggering an out-of-bounds memory write during virtual port management. This issue occurs because the driver fails to validate virtual port index numbers against the fixed...

CVE-2026-46242

🚨 CVE-2026-46242 - BadEpoll A high-severity Use-After-Free vulnerability affecting the Linux Kerneleventpoll subsystem that may allow local privilege escalation, memory corruption, or denial of service. 📖 Overview CVE-2026-46242 is a Use-After-Free UAF vulnerability in the Linux Kernel's eventpol...