DirtyCred

DirtyCred: Escalating Privilege in Linux Kernel DirtyCred is a kernel exploitation concept that swaps unprivileged kernel credentials with privileged ones to escalate privilege. Instead of overwriting any critical data fields on kernel heap, DirtyCred abuses the heap memory reuse mechanism to get...

CVE-2026-99288

In the Linux kernel, the following vulnerability has been resolved: inet: reject unhashed sockets during established lookups TCP established ehash lookups are lockless. The socket caches involved use SLABTYPESAFEBYRCU, so memory can be reused before an RCU reader that retained its old address has...

WinPR Kerberos SSPI RDP Client DoS

The vulnerability in the retrieveSomeTgt function of the WinPR Kerberos SSPI RDP client FreeRDP is related to a memory reuse error. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

CVE-2026-99169

A flaw was found in the Linux kernel's futex fast userspace mutex subsystem. A local user can cause a Denial of Service DoS by exploiting improper handling of shared waiters when memory is reused. By requeuing synchronization waiters across different memory contexts, a waiter tied to freed memory...

AZL-111317 CVE-2026-99169 affecting package kernel for versions less than 6.6.161.1-1

In the Linux kernel, the following vulnerability has been resolved: futex: Fix mm reuse handling for FUTOFFMMSHARED A FUTOFFMMSHARED futex is a shared futex that refers to an MM. It is possible for a process to wait on a shared futex with a different MM because a FUTOFFINODE waiter can be requeue...

PS5-14.00-14.10-Jailbreak-PoC

PS5 14.00 / 14.10 Jailbreak Proof of Concept Experimental P...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.8 has a security vulnerability. This vulnerability arises from the fact that the function ipv6findhdr does not verify whether the length of the extended header exceeds the end of the packet. As a result, the offset may point outside the packet’s end. In this case,...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from the use of meshfasttxcache, which stores original meshpath pointers. After deleting and clearing the cache, searches for existing paths may still insert new cache entries, causing the cache to point to...

CVE-2026-98036

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve special fields in recycled rhtab elements rhtabmapupdateelem initializes special fields after obtaining an element from bpfmemcachealloc. The allocator can return a fresh, zeroed unit, or recycle one from its...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from the fact that the pdscteardown function does not disable bus master control when releasing the DMA buffer. As a result, devices can still perform DMA operations and write data to the released memory...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the use of device management memory allocation by the gpio chip, which is registered in an unmanaged manner. When the driver is uninstalled as a module, it leads to reusing memory after it has been released...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability that arises from accessing the matrixdev-mdevlist list without holding the guestslock mutex. This may lead to kernel memory corruption or reuse of memory after release...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the fact that nlmsvcops is declared by nfsdlockdinit, and normal storage is used during the cleanup of nfsdlockdshutdown. However, lockd unreleases this pointer without protection at the distribution point in...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.3 contains security vulnerabilities. These vulnerabilities stem from the qcombattmgrpdrnotify function, which queues enablework when the PMIC GLINK service starts. The worker retrieves battmgr through containerof, sends a firmware request, and the PDR notification allow...

Linux kernel SPI driver Heap Buffer Overflow DoS

The vulnerability in the mpc52xxspiremove function within the drivers/spi/spi-mpc52xx.c file of the Linux kernel’s SPI driver is related to the reuse of previously freed memory. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability...

device tree driver Heap Buffer Overflow DoS

The vulnerability in the ofunittestchangeset function within the drivers/of/unittest.c module of the device tree driver and the open-source kernel firmware for Linux is related to the reuse of previously freed memory. Exploitation of this vulnerability could allow an attacker to compromise the...

Linux net/ipv6/addrconf Heap Buffer Overflow DoS

The vulnerability in the addrconfpermanentaddr function within the net/ipv6/addrconf.c module of the Linux kernel operating system is related to the reuse of previously freed memory. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and...

Direct Rendering Infrastructure Heap Buffer Overflow DoS

The vulnerability of the xesriovpacketwritesingle function in the drivers/gpu/drm/xe/xesriovpacket.c module of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to...

Linux USB Multimedia Driver Use-After-Free

The vulnerability in the as102usbprobe function within the drivers/media/usb/as102/as102usbdrv.c file of the Linux kernel-based USB multimedia driver is related to the reuse of previously freed memory. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality,...

Linux IOMMU Heap Buffer Overflow DoS

The vulnerability of the iommusvaunbinddevice function in the drivers/iommu/iommu-sva.c module of the Linux IOMMU driver relates to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...