Lucene search
+L

415 matches found

Kitploit
Kitploit
added 2026/09/13 9:47 a.m.5 views

CVE-2023-3640

SCTF2023kernelpwn SCTF 2023 kernel pwn Off-topic: A little advertisement — the author is a 2024 undergraduate graduate student, participating in this year's autumn recruitment. Feel free to contact me sycrop This problem aims to test two points. 1. The starting points of the cpu entry area mappin...

7.8CVSS6.9AI score0.00761EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2026/09/12 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-89580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Disable preemption in bpfgetstack getperfcallchain returns a per-CPU perfcallchainentry buffer and releases its recursion slot via putcallchainentry before...

7.8CVSS0.00128EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/09/12 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2026-89581

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf, x86: Fix per-CPU address resolution into an extended register The destination of the per-CPU address MOV is encoded in ModRM.reg, which is extended by REX....

7.8CVSS0.00128EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/11 11:08 p.m.6 views

CVE-2026-80963

A flaw was found in the Linux kernel's dm-stats module. This vulnerability occurs when the allocation of per-CPU data fails, which can lead to a null pointer dereference during the subsequent cleanup operation. This issue can cause the system to crash, resulting in a Denial of Service DoS...

4.1CVSS0.00168EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2026/09/11 9:46 p.m.5 views

CVE-2026-89581

A flaw was found in the Linux kernel's handling of Berkeley Packet Filter BPF programs on x86 architecture. An issue with how per-CPU addresses are resolved into extended registers can lead to incorrect memory access. A local attacker could exploit this by running a specially crafted BPF program...

7.8CVSS0.00128EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2026/09/11 8:53 p.m.7 views

CVE-2026-89547

A flaw was found in the Linux kernel's SUNRPC component. A local administrator, under specific conditions of memory pressure or fault injection during RPC server startup, can trigger a failure in per-CPU counter allocation. This failure leads to uninitialized counters, which, when subsequently...

8.1CVSS0.00568EPSS
SaveExploits0References7
OSV
OSV
added 2026/09/11 8:19 p.m.5 views

DEBIAN-CVE-2026-89580

In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpfgetstack getperfcallchain returns a per-CPU perfcallchainentry buffer and releases its recursion slot via putcallchainentry before returning, so nothing keeps the entry reserved while bpfgetstack...

7.8CVSS0.00128EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/11 8:19 p.m.6 views

CVE-2026-89581

In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix per-CPU address resolution into an extended register The destination of the per-CPU address MOV is encoded in ModRM.reg, which is extended by REX.R, but the REX prefix is built with add1mod, which sets REX.B. REX.B...

7.8CVSS0.00128EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/11 8:19 p.m.5 views

DEBIAN-CVE-2026-89581

In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix per-CPU address resolution into an extended register The destination of the per-CPU address MOV is encoded in ModRM.reg, which is extended by REX.R, but the REX prefix is built with add1mod, which sets REX.B. REX.B...

7.8CVSS0.00128EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/11 8:19 p.m.6 views

CVE-2026-89580

In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpfgetstack getperfcallchain returns a per-CPU perfcallchainentry buffer and releases its recursion slot via putcallchainentry before returning, so nothing keeps the entry reserved while bpfgetstack...

7.8CVSS0.00128EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/11 8:19 p.m.7 views

CVE-2026-89459

In the Linux kernel, the following vulnerability has been resolved: s390/percpu: Fix MVIYPERCPU with older binutils Commit a737737cdb9c "s390/percpu: Infrastructure for more efficient thiscpu operations" introduced MVIYPERCPU, which stringifies arguments that are already C string literals. This...

7CVSS0.00108EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/11 8:19 p.m.6 views

CVE-2026-80963

In the Linux kernel, the following vulnerability has been resolved: dm-stats: fix a crash if allocation of per-cpu data fails If "dmkvzallocpercpuallocsize, cputonodecpu" fails, the code jumps to the "out" label and calls dmstatfree. dmstatfree does "foreachpossiblecpucpu...

0.00168EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/11 7:44 p.m.14 views

CVE-2026-89581

A BPF x86 JIT flaw in the Linux kernel causes incorrect per-CPU address resolution when the destination is an extended register (R5–R9). The root cause is an encoding error: the REX prefix is built with add_1mod() (setting REX.B) instead of add_2mod() (setting REX.R), so the high register bit is ...

7.8CVSS0.00128EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/11 7:44 p.m.6 views

EUVD-2026-76493

In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix per-CPU address resolution into an extended register The destination of the per-CPU address MOV is encoded in ModRM.reg, which is extended by REX.R, but the REX prefix is built with add1mod, which sets REX.B. REX.B...

0.00128EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/11 7:44 p.m.24 views

CVE-2026-89581 bpf, x86: Fix per-CPU address resolution into an extended register

In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix per-CPU address resolution into an extended register The destination of the per-CPU address MOV is encoded in ModRM.reg, which is extended by REX.R, but the REX prefix is built with add1mod, which sets REX.B. REX.B...

7.8CVSS0.00128EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/11 7:44 p.m.5 views

CVE-2026-89581 bpf, x86: Fix per-CPU address resolution into an extended register

In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix per-CPU address resolution into an extended register The destination of the per-CPU address MOV is encoded in ModRM.reg, which is extended by REX.R, but the REX prefix is built with add1mod, which sets REX.B. REX.B...

5.7AI score
SaveExploits0References7
Debian CVE
Debian CVE
added 2026/09/11 7:44 p.m.5 views

CVE-2026-89581

In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix per-CPU address resolution into an extended register The destination of the per-CPU address MOV is encoded in ModRM.reg, which is extended by REX.R, but the REX prefix is built with add1mod, which sets REX.B. REX.B...

7.8CVSS0.00128EPSS
SaveExploits0
EUVD
EUVD
added 2026/09/11 7:44 p.m.9 views

EUVD-2026-76492

In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpfgetstack getperfcallchain returns a per-CPU perfcallchainentry buffer and releases its recursion slot via putcallchainentry before returning, so nothing keeps the entry reserved while bpfgetstack...

0.00128EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/11 7:44 p.m.14 views

CVE-2026-89580

CVE-2026-89580 is a race condition in the Linux kernel's BPF subsystem , specifically in __bpf_get_stack. A preemptible BPF program (e.g., a non-sleepable raw tracepoint program on a PREEMPT kernel) can be scheduled out between obtaining a per-CPU perf_callchain_entry buffer and copying it. Anoth...

7.8CVSS0.00128EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/09/11 7:44 p.m.6 views

CVE-2026-89580

In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpfgetstack getperfcallchain returns a per-CPU perfcallchainentry buffer and releases its recursion slot via putcallchainentry before returning, so nothing keeps the entry reserved while bpfgetstack...

7.8CVSS0.00128EPSS
SaveExploits0
Rows per page
Query Builder