Linux Distros Unpatched Vulnerability : CVE-2026-98355

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/rtrs: guard against null kobj name In the client, if initpath errors, the callee tries to clean up with rtrscltcloseconns. However, this can lead to callin...

F5 Networks BIG-IP : Linux kernel vulnerability (K000163557)

"The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000163557 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Fix NULL-pointer dereference in...

Linux Distros Unpatched Vulnerability : CVE-2026-98285

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: bridge: vlan: fix bugs caused by switchdev deletion errors Allowing switchdev to prevent vlan deletion and error out in vlandel could cause multiple...

PT-2026-106572

In the Linux kernel, the following vulnerability has been resolved: dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3 The patch "dma-buf: dma-fence: Fix potential NULL pointer dereference" changed the check to test for the ops pointer instead of the signaled bit to avo...

PT-2026-106507

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip KFD mapping clear before initialization amdgpu amdkfd clear kfd mapping assumes that a non-NULL kfd dev has a fully populated node array. This is not true when KFD device initialization fails after probe. For...

Linux Distros Unpatched Vulnerability : CVE-2026-98218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: atr: fix dangling adapter pointer on add failure i2catraddadapter stores atr-adapterchanid before i2caddadapter so that the I2C bus notifier can match chil...

CVE-2026-98220: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix NULL sched deref in kfunc sub-sched error paths When the root scheduler has sub-scheds attached, the COMPAT kfunc wrappers scxbpfselectcpuand and scxbpfdsqinsertvtime refuse the call and report to @p's scheduler:...

Linux Distros Unpatched Vulnerability : CVE-2026-98302

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: fddi: skfp: fix NULL deref when setting the MAC address while down skfpctlsetmacaddress calls ResetAdapter unconditionally, without checking netifrunning...

CVE-2026-49933

In handlelemonitordeviceevent of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized pointer dereference. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

EUVD-2026-92603

In handlelemonitordeviceevent of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized pointer dereference. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2026-49933

In handlelemonitordeviceevent of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized pointer dereference. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2026-49933

In handlelemonitordeviceevent of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized pointer dereference. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2026-49933

A vulnerability exists in the msft.cc component within the handle_le_monitor_device_event function. An uninitialized pointer dereference allows for a potential control-flow hijack within a privileged Bluetooth process. This flaw could enable a local escalation of privilege without requiring addit...

CVE-2026-62737

CVE-2026-62737 — ExecutionContext.sys Arbitrary Kernel Call Proof of concept for CVE-2026-62737: ExecutionContext.sys invokes a user-controlled TaskFn pointer in kernel mode without validation, producing a controlled kernel crash. Validated on stock Windows 11 25H2 build 26200.8655, ARM64: 0x7E...

HVCIPwned

CVE-2024-35250 تصعيد صلاحيات محلي عبر إلغاء مرجع مؤشر غير موثوق في برنامج تشغيل Kernel Streaming الخاص بنظام Windows ks.sys. استغلال يعتمد على البيانات فقط — يتجاوز حماية تكامل الكود المحمية بواسطة Hypervisor HVCI. الملخص الحقل| التفاصيل ---|--- CVE| CVE-2024-35250 المكوّن| ks.sys Kernel Streamin...

Urgent11-Suricata-LUA-scripts

Urgent11-Suricata-LUA-scripts نصوص Suricata LUA لكشف الثغرات CVE-2019-12255 وCVE-2019-12256 وCVE-2019-12258 وCVE-2019-12260 CVE-2019-12255 يتحقق النص من الثغرة CVE-2019-12255، حيث يجب أن تحتوي الحزمة التي يتم فحصها على العلامات PSH وACK وURG وأن يتجاوز حجم الحمولة 1500 بايت. ثم يتحقق مما إذا كانت...

Security Bulletin: IBM Security QRadar Log Management AQL Plugin contains components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. IBM Security QRadar Log Management AQL Plugin has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-76905 DESCRIPTION: kin-opena...

CVE-2026-50416-writeup-and-poc

CVE-2026-50416: كلمة QWORD واحدة زائدة في الكومة المكتبية Desktop Heap على إصدار Windows 11 Insider 10.0.28020.2149، كشف تعيين وضع المستخدم للكومة المكتبية Win32k عن مؤشر خام لجلسة النواة عند الإزاحة 0x100. القراءة نفسها صغيرة بشكل شبه هجومي: ULONG64 leaked = ULONG64 desktopheap + 0x100; في جلسة...

cve-2014-0038

Local root exploit for CVE-2014-0038 الخلل: استدعاء النظام recvmmsg الخاص بـ X86X32 لا يعقّم مؤشر المهلة المُمرَّر من مساحة المستخدم بشكل صحيح. أساس الاستغلال: مرّر مؤشرًا إلى عنوان نواة كمهلة لـ recvmmsg، إذا كانت البايتة الأصلية في ذلك العنوان معروفة، يمكن استبدالها ببيانات معروفة. إذا كانت...

cve-2016-0040

cve-2016-0040 إثبات المفهوم PoC للثغرة cve-2016-0040 التي تم اكتشافها واستغلالها بواسطة Meysam Firozi @R00tkitSmm يساعد هذا PoC في كتابة بيانات عشوائية إلى عنوان عشوائي في نواة ويندوز لمزيد من المعلومات، راجع مدونتي : http://ioctl.ir/index.php/2016/02/13/cve-2016-0040-story-of-uninitialized-point...