hazel-cve-2026-43499

Hazel Fire TV temporary root Temporary root exploit for the Amazon hazel Fire TV platform, based on CVE-2026-43499. The exploit is is intended for the ARM32 Linux 4.9 firmware shared by Hazel televisions from several manufacturers. Profiles currently cover firmware from PS7657.3645N through...

Linux Distros Unpatched Vulnerability : CVE-2026-93137

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix use-after-free on mmstruct in bpffindvma bpffindvma reads task-mm and calls mmapreadtrylockmm without holding a reference on the mm. On a foreign task,...

AZL-102962 CVE-2026-93137 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free on mmstruct in bpffindvma bpffindvma reads task-mm and calls mmapreadtrylockmm without holding a reference on the mm. On a foreign task, a concurrent exitmm can free the mmstruct between the lockless read...

CVE-2026-93137

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free on mmstruct in bpffindvma bpffindvma reads task-mm and calls mmapreadtrylockmm without holding a reference on the mm. On a foreign task, a concurrent exitmm can free the mmstruct between the lockless read...

DEBIAN-CVE-2026-93137

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free on mmstruct in bpffindvma bpffindvma reads task-mm and calls mmapreadtrylockmm without holding a reference on the mm. On a foreign task, a concurrent exitmm can free the mmstruct between the lockless read...

EUVD-2026-82245

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free on mmstruct in bpffindvma bpffindvma reads task-mm and calls mmapreadtrylockmm without holding a reference on the mm. On a foreign task, a concurrent exitmm can free the mmstruct between the lockless read...

CVE-2026-93137

CVE-2026-93137 is a use-after-free in the Linux kernel's BPF subsystem, specifically in bpf_find_vma(). The function reads task->mm and calls mmap_read_trylock(mm) without holding a reference on the mm_struct. When operating on a foreign task , a concurrent exit_mm() can free the mm_struct bet...

CVE-2026-93137 bpf: Fix use-after-free on mm_struct in bpf_find_vma()

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free on mmstruct in bpffindvma bpffindvma reads task-mm and calls mmapreadtrylockmm without holding a reference on the mm. On a foreign task, a concurrent exitmm can free the mmstruct between the lockless read...

DEBIAN-CVE-2026-90045

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: ffs: fix mm lifetime handling iodata stores a pointer to the submitting task's mmstruct, but does not currently hold a reference to it while async requests are pending. This can result in a use-after-free if the task...

CVE-2026-90045

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: ffs: fix mm lifetime handling iodata stores a pointer to the submitting task's mmstruct, but does not currently hold a reference to it while async requests are pending. This can result in a use-after-free if the task...

EUVD-2026-80653

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: ffs: fix mm lifetime handling iodata stores a pointer to the submitting task's mmstruct, but does not currently hold a reference to it while async requests are pending. This can result in a use-after-free if the task...

CVE-2026-90045 USB: gadget: ffs: fix mm lifetime handling

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: ffs: fix mm lifetime handling iodata stores a pointer to the submitting task's mmstruct, but does not currently hold a reference to it while async requests are pending. This can result in a use-after-free if the task...

CVE-2026-90045

CVE-2026-90045 is a use-after-free vulnerability in the Linux kernel 's USB gadget FunctionFS (ffs) driver. The io_data structure stores a pointer to the submitting task's mm_struct but fails to hold a reference while asynchronous requests remain pending. If the task exits before completion handl...

CVE-2026-90045 USB: gadget: ffs: fix mm lifetime handling

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: ffs: fix mm lifetime handling iodata stores a pointer to the submitting task's mmstruct, but does not currently hold a reference to it while async requests are pending. This can result in a use-after-free if the task...

Linux Distros Unpatched Vulnerability : CVE-2026-90045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: gadget: ffs: fix mm lifetime handling iodata stores a pointer to the submitting task's mmstruct, but does not currently hold a reference to it while async...

Exploit for Use After Free in Linux Linux_Kernel

PS7716.5665N Hazel Fire TV temporary root Temporary root expl...

SUSE CVE-2026-74514

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix memory accounting for pinned/unpinned pages The accountmem and unaccountmem functions call getuid which increments the reference count of struct userstruct on every invocation. But we don't decrement the count...

CVE-2026-74514

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix memory accounting for pinned/unpinned pages The accountmem and unaccountmem functions call getuid which increments the reference count of struct userstruct on every invocation. But we don't decrement the count...

CVE-2026-74514

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix memory accounting for pinned/unpinned pages The accountmem and unaccountmem functions call getuid which increments the reference count of struct userstruct on every invocation. But we don't decrement the count...

CVE-2026-72357

In the Linux kernel, the following vulnerability has been resolved: uprobes/x86: Use proper mmstruct in inuprobetrampoline In the unregister path we use inuprobetrampoline check with current-mm for the VMA lookup, which is wrong, because we are in the tracer context, not the traced process. Add...