CVE-2026-98026

The Linux kernel contains a vulnerability in the net: bridge: mcast component where the br_multicast_del_port_group function unlists a port group without using the proper RCU helper to preserve the next pointer. Consequently, the port group is freed immediately without waiting for the RCU grace p...

Vulnerability-Disclosure-Policy

Vulnerability Disclosure Policy We believe that vulnerability disclosure is a two-way street. Vendors, as well as researchers, must participate in co-ordinated vulnerability disclosure. When Enable Security discovers vulnerabilities through its own research, it will notify vendors of these...

CVE-2026-93288

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinklog: wait for rcu grace period before freeing pernet state sashiko reports: "nfnllognetexit calls nflogunset, which clears the logger pointer without an RCU grace period. Immediately after, opsfreelist frees t...

CVE-2026-93288

The Linux kernel is affected by a vulnerability in the netfilter: nfnetlink_log component. The root cause involves nfnl_log_net_exit() calling nf_log_unset(), which clears the logger pointer without an RCU grace period . Consequently, ops_free_list() may free the per-net state while concurrent pa...

EUVD-2026-86167

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinklog: wait for rcu grace period before freeing pernet state sashiko reports: "nfnllognetexit calls nflogunset, which clears the logger pointer without an RCU grace period. Immediately after, opsfreelist frees t...

CVE-2026-93288 netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinklog: wait for rcu grace period before freeing pernet state sashiko reports: "nfnllognetexit calls nflogunset, which clears the logger pointer without an RCU grace period. Immediately after, opsfreelist frees t...

CVE-2026-93288

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinklog: wait for rcu grace period before freeing pernet state sashiko reports: "nfnllognetexit calls nflogunset, which clears the logger pointer without an RCU grace period. Immediately after, opsfreelist frees t...

cve-2026-52910-poc

CVE-2026-52910 — reproductor de use-after-free en cBPF de reuseport Un reproductor de condiciones de carrera y kit de estrés para CVE-2026-52910 , un use-after-free UAF en el manejo del kernel de Linux de los programas selectores de reuseport de BPF clásico cBPF , corregido en upstream por el...

CVE-2026-22009-Linux-eBPF-Map-Locking-Race-Use-After-Free

CVE-2026-22009 – Condición de carrera en el bloqueo de mapas eBPF de Linux → Use‑After‑Free Código del programa simulación en C root@kitploit: // ebpfmapuaf.c - Simulated concurrent map update/free include include include include void mapdata = NULL; int mapfreed = 0; void updatemapvoid arg //...

Linux Distros Unpatched Vulnerability : CVE-2026-90100

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ptp: netc: fix period truncation and potential divide-by-zero in PEROUT The maxperiod bound in nettimerenableperout was computed as: maxperiod =...

CVE-2026-90100

In the Linux kernel, the following vulnerability has been resolved: ptp: netc: fix period truncation and potential divide-by-zero in PEROUT The maxperiod bound in nettimerenableperout was computed as: maxperiod = u64NETCTMRDEFAULTFIPER + integralperiod; which exceeds U32MAX when integralperiod 0...

CVE-2026-90100

CVE-2026-90100 affects the Linux kernel PTP (Precision Time Protocol) netc driver. The root cause is a period truncation in net_timer_enable_perout(): a u64 max_period bound exceeds U32_MAX when integral_period > 0, allowing a period_ns value to pass the range check but be silently truncated t...

CVE-2026-90100 ptp: netc: fix period truncation and potential divide-by-zero in PEROUT

In the Linux kernel, the following vulnerability has been resolved: ptp: netc: fix period truncation and potential divide-by-zero in PEROUT The maxperiod bound in nettimerenableperout was computed as: maxperiod = u64NETCTMRDEFAULTFIPER + integralperiod; which exceeds U32MAX when integralperiod 0...

CVE-2026-89972

In the Linux kernel, the following vulnerability has been resolved: nvme: add missing SRCU grace period in error path nvmeallocns error path at outunlinkns removes ns from the namespace head siblings list with listdelrcu&ns-siblings but does not wait for SRCU readers before freeing the namespace...

CVE-2026-89972 nvme: add missing SRCU grace period in error path

In the Linux kernel, the following vulnerability has been resolved: nvme: add missing SRCU grace period in error path nvmeallocns error path at outunlinkns removes ns from the namespace head siblings list with listdelrcu&ns-siblings but does not wait for SRCU readers before freeing the namespace...

CVE-2026-89972

CVE-2026-89972 is a use-after-free vulnerability in the Linux kernel NVMe subsystem . The error path in nvme_alloc_ns() removes a namespace from the siblings list via list_del_rcu() but fails to call synchronize_srcu() before freeing the namespace struct. Concurrent readers in nvme_find_path() an...

EUVD-2026-80572

In the Linux kernel, the following vulnerability has been resolved: nvme: add missing SRCU grace period in error path nvmeallocns error path at outunlinkns removes ns from the namespace head siblings list with listdelrcu&ns-siblings but does not wait for SRCU readers before freeing the namespace...

CVE-2026-89972 nvme: add missing SRCU grace period in error path

In the Linux kernel, the following vulnerability has been resolved: nvme: add missing SRCU grace period in error path nvmeallocns error path at outunlinkns removes ns from the namespace head siblings list with listdelrcu&ns-siblings but does not wait for SRCU readers before freeing the namespace...

Linux Distros Unpatched Vulnerability : CVE-2026-89972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme: add missing SRCU grace period in error path nvmeallocns error path at outunlinkns removes ns from the namespace head siblings list with...

School Registration and Fee System SQL Injection Vulnerability (CNVD-2026-37879)

School Registration and Fee System is a school registration and fee management software developed by the SourceCodester community. The system has a SQL injection vulnerability, which stems from incorrect handling of the period parameter in the file bilal/normal/payreport.php. Attackers can exploi...