CVE-2026-99203

A flaw was found in the Linux kernel's pipe subsystem. Improper error handling during asynchronous input/output I/O notification setup can leave freed file structures referenced after an allocation failure. A local, unprivileged attacker could exploit this condition under memory pressure to trigg...

kernel: pipe: wakeup wr_wait after setting max_usage

CVE-2023-52672 is a vulnerability in the Linux kernel's pipe subsystem caused by a regression in how pipes are resized. When a pipe is full and resized, incorrect handling of wakeups for writers can lead to deadlocks or system lockups. This issue has been resolved by ensuring that the pipe's usag...

"As Nasty as Dirty Pipe" — 8 Year Old Linux Kernel Vulnerability Uncovered

Details of an eight-year-old security vulnerability in the Linux kernel have emerged that the researchers say is "as nasty as Dirty Pipe." Dubbed DirtyCred by a group of academics from Northwestern University, the security weakness exploits a previously unknown flaw CVE-2022-2588 to escalate...