CVE-2026-93322

The buildkitd daemon is vulnerable to a Denial of Service (DoS) condition where a malicious frontend can submit a malformed LLB definition (specifically involving a malformed MergeOp ). This input causes the daemon to panic and terminate , which interrupts all active builds running on that daemon...

CVE-2026-93319 A malicious frontend can cause a daemon panic

A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to panic...

CVE-2026-93319 A malicious frontend can cause a daemon panic

A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to panic...

EUVD-2026-92534

A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to panic...

CVE-2026-93319 A malicious frontend can cause a daemon panic

A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to panic...

CVE-2026-93319

The BuildKit daemon is vulnerable to a data race condition when a malicious external BuildKit frontend sends requests using the internal API. This vulnerability (classified as CWE-567 ) can lead to a panic of the BuildKit daemon, impacting availability. Remediation information is provided in the ...

CVE-2026-93316 Starting daemon with --cdi-disabled flag can lead to panic on specific builds

If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident...

CVE-2026-93316 Starting daemon with --cdi-disabled flag can lead to panic on specific builds

If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident...

CVE-2026-93316

The BuildKit daemon is vulnerable to a daemon panic when it is started with the --cdi-disabled flag and subsequently processes builds that attempt to use CDI devices . This issue, categorized as a NULL Pointer Dereference (CWE-476) , can occur either accidentally or maliciously. The impact is a h...

EUVD-2026-92527

If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident...

CVE-2026-93316 Starting daemon with --cdi-disabled flag can lead to panic on specific builds

If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident...

CVE-2026-43499

CVE-2026-43499 — Linux 内核 Futex PI 释放后使用 漏洞 kernel/locking/rtmutex.c 中的 removewaiter 被慢速锁路径使用，同时也在 futexrequeue 调用 rtmutexstartproxylock 时用于代理锁回滚。 在代理锁场景下，waiter::task 并不是 current，但 removewaiter 错误地对 current 进行操作。这会导致三个问题： 1. rbtree 出队时没有持有 waiter::task::pilock。 2. 等待者任务的 piblockedon...

CVE-2026-90404

A flaw was found in the Linux kernel. The crosecdebugfs component registers a panic notifier but does not unregister it when the component is removed. This oversight allows a subsequent system panic to attempt to call into the removed instance, leading to access of previously released memory. Suc...

CVE-2019-8852

CVE-2019-8852 一个适用于 macOS 10.15.1 及更低版本的 tfp0 漏洞。 免责声明 使用风险自负。这会导致你的 macOS 崩溃。 我仅为安全研究人员构建此工具。 当前状态 只是一个 PoC，将该漏洞转化为有用的 UAF。 已在 macOS 10.14.6 18G103 ，配备 16 GB RAM 的 MacBook Pro 上测试。 致谢 几乎一切都始于 oobtimestamp：Brandon Azad @bazad 许可证 GPL-3.0 License 其他 我的推特 @patternF 英语对我来说太难了... 英语太难了...

kernel: Linux kernel: Denial of Service in RDMA/bnxt_re driver due to race condition during QP destruction

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA bnxtre driver. A local user could exploit a race condition that occurs when a Queue Pair QP is destroyed, but completion queue CQ polling continues. This can lead to a kernel panic, resulting in a Denial of Service DoS on the...

CVE-2022-25636

CVE-2022-25636 这是我的针对 CVE-2022-25636 的漏洞利用代码。 我在 Ubuntu 21.10 上（内核 5.13.0-30）进行了测试。 成功率约为 40%，其他情况下很可能导致内核崩溃。 该漏洞利用代码可能会破坏堆上的重要数据，在尝试失败后最好重启。...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: wlcore – Ensure skbheadroom before calling skbpush. This fix prevents occasional skbunderpanic errors in wl1271txwork. In this case, the allocated headroom is less than necessary typically 110 – 94 = 16 bytes...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Use memcpy for BIOS version The strlcat function with FORTIFY support triggers a panic because it assumes that the target buffer will overflow, even though the correct target buffer size is provided. In any case,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: af-alg – Fix NULL pointer dereference in scatterwalk The AFALG interface fails to unmark the end of a Scatter/Gather List SGL when chaining a new afalgtsgl structure. If a sendmsg function fills an SGL exactly up to...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: stmmac: Clearing the variable when destroying the workqueue Currently, when suspending the driver and stopping the workqueue, it is checked whether workqueue is not NULL. If it is NULL, the workqueue is destroyed. The function...