sysbox

Introduction Sysbox is an open-source and free container runtime a specialized "runc", originally developed by Nestybox acquired by Dockerdocker-acquisition on 05/2022, that enhances containers in two key ways: Improves container isolation: Linux user-namespace on all containers i.e., root user i...

pspy

pspy - unprivileged Linux process snooping pspy is a command line tool designed to snoop on processes without need for root permissions. It allows you to see commands run by other users, cron jobs, etc. as they execute. Great for enumeration of Linux systems in CTFs. Also great to demonstrate you...

kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat()

A flaw was found in the Linux kernel's procfs component. When reading /proc/pid/stat, the dotaskstat function accesses task-realparent without proper Read-Copy-Update RCU protection. This missing protection creates a race condition, which can lead to a Use-After-Free UAF vulnerability. A local...

UBUNTU-CVE-2026-99280

In the Linux kernel, the following vulnerability has been resolved: ksmbd: drain session procfs readers before dropping table references Session registration failure and connection cleanup can drop the table reference while the per-session procfs entry is still accessible. If a reader holds the...

CVE-2026-99277

In the Linux kernel, the following vulnerability has been resolved: ksmbd: hold a connection reference for each session channel ksmbdsessionunregister removes a session from the global and per- connection tables before dropping the table reference. A concurrent reference holder can keep the sessi...

UBUNTU-CVE-2026-99277

In the Linux kernel, the following vulnerability has been resolved: ksmbd: hold a connection reference for each session channel ksmbdsessionunregister removes a session from the global and per- connection tables before dropping the table reference. A concurrent reference holder can keep the sessi...

CVE-2026-99279

In the Linux kernel, the following vulnerability has been resolved: ksmbd: reclaim ended sessions on logoff and expiration LOGOFF and previous-session replacement leave sessions Expired with a zero credential expiry. Ended sessions can retain their memory and connection slots when no further setu...

CVE-2026-99280

In the Linux kernel, the following vulnerability has been resolved: ksmbd: drain session procfs readers before dropping table references Session registration failure and connection cleanup can drop the table reference while the per-session procfs entry is still accessible. If a reader holds the...

CVE-2026-99280

A flaw was found in the Linux kernel's ksmbd. Session registration failures and connection cleanups can drop internal session references while the per-session procfs process information pseudo-filesystem entry is still accessible. A local user reading these entries during concurrent session...

CVE-2026-99277

In the Linux kernel, the following vulnerability has been resolved: ksmbd: hold a connection reference for each session channel ksmbdsessionunregister removes a session from the global and per- connection tables before dropping the table reference. A concurrent reference holder can keep the sessi...

DEBIAN-CVE-2026-99277

In the Linux kernel, the following vulnerability has been resolved: ksmbd: hold a connection reference for each session channel ksmbdsessionunregister removes a session from the global and per- connection tables before dropping the table reference. A concurrent reference holder can keep the sessi...

CVE-2026-99280

In the Linux kernel, the following vulnerability has been resolved: ksmbd: drain session procfs readers before dropping table references Session registration failure and connection cleanup can drop the table reference while the per-session procfs entry is still accessible. If a reader holds the...

EUVD-2026-119282

In the Linux kernel, the following vulnerability has been resolved: ksmbd: drain session procfs readers before dropping table references Session registration failure and connection cleanup can drop the table reference while the per-session procfs entry is still accessible. If a reader holds the...

CVE-2026-99280

The Linux kernel contains a vulnerability in ksmbd where session registration failures or connection cleanups could drop table references while per-session procfs entries remained accessible. This occurs because if a reader held the last reference, the final put call would trigger a callback whil...

CVE-2026-99280 ksmbd: drain session procfs readers before dropping table references

In the Linux kernel, the following vulnerability has been resolved: ksmbd: drain session procfs readers before dropping table references Session registration failure and connection cleanup can drop the table reference while the per-session procfs entry is still accessible. If a reader holds the...

CVE-2026-99280 ksmbd: drain session procfs readers before dropping table references

In the Linux kernel, the following vulnerability has been resolved: ksmbd: drain session procfs readers before dropping table references Session registration failure and connection cleanup can drop the table reference while the per-session procfs entry is still accessible. If a reader holds the...

CVE-2026-99277 ksmbd: hold a connection reference for each session channel

In the Linux kernel, the following vulnerability has been resolved: ksmbd: hold a connection reference for each session channel ksmbdsessionunregister removes a session from the global and per- connection tables before dropping the table reference. A concurrent reference holder can keep the sessi...

CVE-2026-99277 ksmbd: hold a connection reference for each session channel

In the Linux kernel, the following vulnerability has been resolved: ksmbd: hold a connection reference for each session channel ksmbdsessionunregister removes a session from the global and per- connection tables before dropping the table reference. A concurrent reference holder can keep the sessi...

CVE-2026-99277

The Linux kernel 's ksmbd in-kernel SMB server contains a flaw where ksmbd_session_unregister() removes sessions from global and per-connection tables before dropping the table reference. This improper reference counting allows a concurrent reference holder to keep a session and its channel list ...

EUVD-2026-119285

In the Linux kernel, the following vulnerability has been resolved: ksmbd: hold a connection reference for each session channel ksmbdsessionunregister removes a session from the global and per- connection tables before dropping the table reference. A concurrent reference holder can keep the sessi...