DirtyCred

DirtyCred: Escalating Privilege in Linux Kernel DirtyCred is a kernel exploitation concept that swaps unprivileged kernel credentials with privileged ones to escalate privilege. Instead of overwriting any critical data fields on kernel heap, DirtyCred abuses the heap memory reuse mechanism to get...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.4 contains security vulnerabilities. These vulnerabilities stem from the use of meshfasttxcache, which stores original meshpath pointers. After deleting and clearing the cache, searches for existing paths may still insert new cache entries, causing the cache to point to...

CVE-2026-98036

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve special fields in recycled rhtab elements rhtabmapupdateelem initializes special fields after obtaining an element from bpfmemcachealloc. The allocator can return a fresh, zeroed unit, or recycle one from its...

Linux device driver framework Heap Buffer Overflow DoS

The vulnerability of the ofunittestchangeset function in the drivers/of/unittest.c module of the Linux device and open-source kernel tree driver framework is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

Linux SPI Device Driver Heap Buffer Overflow DoS

The vulnerability of the mpc52xxspiRemove function in the driver/spi/spi-mpc52xx.c file of the Linux operating system’s SPI device driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Linux net/ipv6/addrconf.c Heap Buffer Overflow DoS

The vulnerability of the addrconfpermanentaddr function in the net/ipv6/addrconf.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

Linux net/sched/act_ct.c Function Heap Buffer Overflow DoS

The vulnerability of the tcfctinit function in the net/sched/actct.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux IOMMU Heap Buffer Overflow DoS

The vulnerability of the iommusvaunbinddevice function in the drivers/iommu/iommu-sva.c module of the Linux IOMMU driver relates to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...

Direct Rendering Infrastructure Heap Buffer Overflow DoS

The vulnerability of the xesriovpacketwritesingle function in the drivers/gpu/drm/xe/xesriovpacket.c module of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to...

Linux USB Driver Heap Buffer Overflow DoS

The vulnerability of the as102usbprobe function in the drivers/media/usb/as102/as102usbdrv.c file of the Linux multimedia device driver module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Ocfs2 File System Heap Buffer Overflow DoS

The vulnerability of the ocfs2fault function in the fs/ocfs2/mmap.c file of the Ocfs2 file system in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the perfmmaprb function in the kernel/events/core.c module, which handles kernel event management in Linux operating systems, is related to the reuse of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux Android Binder Transaction Buffer Overflow DoS

The vulnerability of the bindertransaction function in the drivers/android/binder.c module of the Linux kernel communication driver with the Android kernel involves the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

Linux kernel cryptographic accelerator driver Heap Buffer Overflow DoS

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

Linux kernel video buffer driver Heap Buffer Overflow DoS

The vulnerability of the driver module/video/fbdev/smscufx.c driver for kernel-based Linux device buffer devices is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Panthor driver Kernel Buffer Overflow

The vulnerability of the panthorkernelbodestroy function in the drivers/gpu/drm/panthor/panthorgem.c file of the Panthor driver which provides DRM support for ARM Mali CSF-based graphics processors in the Linux operating system is related to the reutilization of previously freed memory. Exploitin...

Linux Distros Unpatched Vulnerability : CVE-2026-77220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the...

ksmbd_tree_conn_connect ksmbd_tree_connect ksmbd_tree_conn_

The vulnerabilities of the functions ksmbdtreeconnconnect, ksmbdtreeconnect PUT, and ksmbdtreeconndisconnect in the module fs/smb/server/mgmt/treeconnect.c, as well as the function smb2treedisconnect in the module fs/smb/server/smb2pdu.c, are related to the reuse of previously freed memory due to...

sound/usb/mixer parse_audio_unit USB Audio

The vulnerability of the parseaudiounit function in the sound/usb/mixer.c module, which supports USB audio devices in Linux operating systems, is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

atmel_hlcdc_plane_atomic_duplicate_state Heap Buffer Overflow DoS

The vulnerability of the atmelhlcdcplaneatomicduplicatestate function in the drivers/gpu/drm/atmel-hlcdc/atmelhlcdcplane.c driver of the Direct Rendering Infrastructure DRI infrastructure of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this...