CVE-2026-64436 net: af_key: initialize alg_key_len for IPComp states

In the Linux kernel, the following vulnerability has been resolved: net: afkey: initialize algkeylen for IPComp states pfkeymsg2xfrmstate handles the IPComp SADBXSATYPEIPCOMP case by allocating x-calg and copying only the algorithm name: x-calg = kmallocobjx-calg; if !x-calg err = -ENOMEM; goto...

CVE-2026-64416 mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host

In the Linux kernel, the following vulnerability has been resolved: mm: swapcgroup: fix NULL deref in lookupswapcgroupid on swapless host lookupswapcgroupid passes swapcgroupctrltype.map to swapcgroupidlookup without checking that the type was ever registered via swapcgroupswapon. On a swapless...

CVE-2026-64416 mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host

In the Linux kernel, the following vulnerability has been resolved: mm: swapcgroup: fix NULL deref in lookupswapcgroupid on swapless host lookupswapcgroupid passes swapcgroupctrltype.map to swapcgroupidlookup without checking that the type was ever registered via swapcgroupswapon. On a swapless...

CVE-2026-64416

CVE-2026-64416 is a Linux kernel vulnerability affecting the memory management subsystem (mm) where a NULL dereference can occur in swap_cgroup handling on swapless hosts. The root cause is that lookup_swap_cgroup_id() may pass swap_cgroup_ctrl[type].map to __swap_cgroup_id_lookup() without verif...

CVE-2026-64416

In the Linux kernel, the following vulnerability has been resolved: mm: swapcgroup: fix NULL deref in lookupswapcgroupid on swapless host lookupswapcgroupid passes swapcgroupctrltype.map to swapcgroupidlookup without checking that the type was ever registered via swapcgroupswapon. On a swapless...

EUVD-2026-48960

In the Linux kernel, the following vulnerability has been resolved: mm: swapcgroup: fix NULL deref in lookupswapcgroupid on swapless host lookupswapcgroupid passes swapcgroupctrltype.map to swapcgroupidlookup without checking that the type was ever registered via swapcgroupswapon. On a swapless...

CVE-2026-64347

The CVE-2026-64347 issue affects the Linux kernel USB gadget subsystem, specifically the composite driver handling USB_DT_OTG. The OTG branch of composite_setup() could fall back to the first configuration when none is selected and use config pointer dereferencing with list_first_entry(), which i...

CVE-2026-64347

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: composite: fix dead empty check in the USBDTOTG handler The OTG branch of compositesetup falls back to the first configuration when none is selected: if cdev-config config = cdev-config; else config =...

CVE-2026-64347 usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: composite: fix dead empty check in the USBDTOTG handler The OTG branch of compositesetup falls back to the first configuration when none is selected: if cdev-config config = cdev-config; else config =...

CVE-2026-64347 usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: composite: fix dead empty check in the USBDTOTG handler The OTG branch of compositesetup falls back to the first configuration when none is selected: if cdev-config config = cdev-config; else config =...

EUVD-2026-48891

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: composite: fix dead empty check in the USBDTOTG handler The OTG branch of compositesetup falls back to the first configuration when none is selected: if cdev-config config = cdev-config; else config =...

Exploit for Improper Authentication in Sonicwall Directory_Services_Connector

CVE-2020-5148 Forced Authentication in the SonicWall UTM SS...

Exploit for SQL Injection in Trispark Novusedu

CVE-2021-3262 SQL Injection in TripSpark VEO Transportation...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

🚀 CVE-2026-31431 – Advanced Linux Kernel Exploit "From...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock — OnePlus 15T !中文https://img.shields.io/badge/语...

PT-2026-64657

In the Linux kernel, the following vulnerability has been resolved: net: af key: initialize alg key len for IPComp states pfkey msg2xfrm state handles the IPComp SADB X SATYPE IPCOMP case by allocating x-calg and copying only the algorithm name: x-calg = kmalloc objx-calg; if !x-calg err = -ENOME...

Linux Distros Unpatched Vulnerability : CVE-2026-50713

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - mbedtls - None Ubuntu Linux - Unknown description CVE-2026-50713 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2026-50580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - mbedtls - None Ubuntu Linux - Unknown description CVE-2026-50580 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2026-58264

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - fluidsynth - None Ubuntu Linux - heap-based buffer overrun in command handler CVE-2026-58264 Note that Nessus relies on the presence of the packa...

Linux Distros Unpatched Vulnerability : CVE-2026-50585

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - mbedtls - None Ubuntu Linux - Unknown description CVE-2026-50585 Note that Nessus relies on the presence of the package as reported by the vendor...