DirtyCred

DirtyCred: повышение привилегий в ядре Linux DirtyCred — это концепция эксплуатации ядра, которая подменяет непривилегированные учётные данные ядра привилегированными для повышения привилегий. Вместо перезаписи критически важных полей данных в куче ядра DirtyCred использует механизм...

CVE-2026-98036

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve special fields in recycled rhtab elements rhtabmapupdateelem initializes special fields after obtaining an element from bpfmemcachealloc. The allocator can return a fresh, zeroed unit, or recycle one from its...

The vulnerability of the mpc52xx_spiRemove() function in the driver/spi/spi-mpc52xx.c file of the Linux operating system’s SPI device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mpc52xxspiRemove function in the driver/spi/spi-mpc52xx.c file of the Linux operating system’s SPI device driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the `of_unittest_changeset()` function in the `drivers/of/unittest.c` module of the Linux operating system’s device and open-source driver tree allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ofunittestchangeset function in the drivers/of/unittest.c module of the Linux device and open-source kernel tree driver framework is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the `addrconf_permanent_addr()` function in the `net/ipv6/addrconf.c` module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the addrconfpermanentaddr function in the net/ipv6/addrconf.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

The vulnerability of the as102_usb_probe() function in the drivers/media/usb/as102/as102_usb_drv.c driver for Linux-based USB multimedia devices allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the as102usbprobe function in the drivers/media/usb/as102/as102usbdrv.c file of the Linux multimedia device driver module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the iommu_sva_unbind_device() function in the drivers/iommu/iommu-sva.c file of the Linux operating system’s IOMMU driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iommusvaunbinddevice function in the drivers/iommu/iommu-sva.c module of the Linux IOMMU driver relates to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...

The vulnerability of the xe_sriov_packet_write_single() function in the drivers/gpu/drm/xe/xe_sriov_packet.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the xesriovpacketwritesingle function in the drivers/gpu/drm/xe/xesriovpacket.c module of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to...

The vulnerability in the driver module/video/fbdev/smscufx.c of the Linux operating system’s kernel-based video buffer device allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the driver module/video/fbdev/smscufx.c driver for kernel-based Linux device buffer devices is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the `panthor_kernel_bodestroy()` function in the `drivers/gpu/drm/panthor/panthor_gem.c` file of the Panthor driver (which provides DRM support for ARM Mali CSF-based graphics processors) in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the panthorkernelbodestroy function in the drivers/gpu/drm/panthor/panthorgem.c file of the Panthor driver which provides DRM support for ARM Mali CSF-based graphics processors in the Linux operating system is related to the reutilization of previously freed memory. Exploitin...

The vulnerability of the perf_mmap_rb() function in the kernel/events/core.c module, which manages kernel events in Linux operating systems, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the perfmmaprb function in the kernel/events/core.c module, which handles kernel event management in Linux operating systems, is related to the reuse of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability in the bindertransaction() function of the drivers/android/binder.c module of the Linux kernel-based Android communication driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bindertransaction function in the drivers/android/binder.c module of the Linux kernel communication driver with the Android kernel involves the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

The vulnerability of the ocfs2_fault() function in the fs/ocfs2/mmap.c file of the Ocfs2 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ocfs2fault function in the fs/ocfs2/mmap.c file of the Ocfs2 file system in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the tcf_ct_init() function in the net/sched/act_ct.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tcfctinit function in the net/sched/actct.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux Distros Unpatched Vulnerability : CVE-2026-77220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the...

The vulnerability of the atmel_hlcdc_plane_atomic_duplicate_state() function in the driver/gpu/drm/atmel-hlcdc/atmel_hlcdc_plane.c driver of the Direct Rendering Infrastructure (DRI) infrastructure of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the atmelhlcdcplaneatomicduplicatestate function in the drivers/gpu/drm/atmel-hlcdc/atmelhlcdcplane.c driver of the Direct Rendering Infrastructure DRI infrastructure of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this...

The vulnerabilities of the functions ksmbd_tree_conn_connect(), ksmbd_tree_connect PUT(), and ksmbd_tree_conn_disconnect() in the module fs/smb/server/mgmt/tree_connect.c, as well as the function smb2_tree_disconnect() in the module fs/smb/server/smb2pdu.c, allow attackers to compromise the confidentiality, integrity, and accessibility of protected information within the SMB server framework of the Linux operating system.

The vulnerabilities of the functions ksmbdtreeconnconnect, ksmbdtreeconnect PUT, and ksmbdtreeconndisconnect in the module fs/smb/server/mgmt/treeconnect.c, as well as the function smb2treedisconnect in the module fs/smb/server/smb2pdu.c, are related to the reuse of previously freed memory due to...

The vulnerability of the fore200e_shutdown() function in the drivers/atm/fore200e.c module of the Linux network adapter driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fore200eshutdown function in the drivers/atm/fore200e.c module of the Linux network adapter driver relates to the reutilization of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability of the `fst_remove_one()` function in the `drivers/net/wan/farsync.c` file of the Linux kernel network device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fstremoveone function in the drivers/net/wan/farsync.c file of the Linux kernel network device driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...