sysbox

Introducción Sysbox es un runtime de contenedores de código abierto y gratuito un "runc" especializado, desarrollado originalmente por Nestybox adquirida por Docker en 05/2022, que mejora los contenedores de dos maneras clave: Mejora el aislamiento de los contenedores: User-namespace de Linux en...

pspy

pspy - 无需特权的 Linux 进程窥探 pspy 是一款命令行工具，旨在无需 root 权限即可窥探进程。它允许你查看其他用户运行的命令、cron 作业等，在它们执行时实时观测。非常适合在 CTF 中对 Linux 系统进行枚举。同时也能向你的同事展示为什么在命令行参数中传递密码是个坏主意。 该工具通过扫描 procfs 获取信息。Inotify 监视器被放置在文件系统的选定部分，这些监视器触发扫描以捕捉短时进程。 快速开始 下载 将工具下载到你要检查的 Linux 机器上。先获取二进制文件。在此处下载发布版二进制文件： 32 位大型静态版本：pspy32 下载 64...

CVE-2026-69806

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-74735

CVE-2026-74735 affects the Linux kernel's L2TP (Layer 2 Tunneling Protocol) implementation. In pppol2tp_proc_open() and l2tp_dfs_seq_open(), iteration state (pd->tunnel and pd->session) is stored in seq_file private data to support multi-read() iteration. If a local user closes /proc/net/pp...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: bcm: Fixed a UAF in bcmprocshow. Bug: KASAN: A “slab-use-after-free” issue occurred in bcmprocshow+0x969/0xa80. A size 8 byte read was performed at address ffff888155846230 by the task cat/7862. CPU: 1; PID: 7862; Comm: cat; Not...

CVE-2026-49415 Local privilege escalation via execve(2) TOCTOU race

During execve2 of a SUID binary, the new virtual address space is installed before the process credentials are updated. During this window, a process running as the same user can access the target process's memory via procfs or linprocfs, because the kernel's debugging permission check still saw...

EUVD-2026-62236

During execve2 of a SUID binary, the new virtual address space is installed before the process credentials are updated. During this window, a process running as the same user can access the target process's memory via procfs or linprocfs, because the kernel's debugging permission check still saw...

CVE-2026-49415

FreeBSD kernel is affected by a TOCTOU race in execve(2): when executing a SUID binary, the new address space is installed before credentials are updated, so a same-user process can read or modify memory via procfs/linprocfs during the window. An unprivileged local user can exploit this to gain r...

CVE-2026-72118

A flaw was found in the Linux kernel's Controller Area Network CAN Broadcast Manager BCM module. A data race condition, occurring when multiple central processing units CPUs simultaneously process CAN frames, can lead to incorrect statistics being reported. This could result in a bogus or negativ...

UBUNTU-CVE-2026-74479

In the Linux kernel, the following vulnerability has been resolved: net: pktgen: fix proc entry use-after-free pktgenchangename replaces pktdev-entry while holding t-iflock. pktgenremovedevice removes the same entry before remdevfromiflist takes that lock. This allows the following interleaving:...

CVE-2026-72297 net: atm: reject out-of-range traffic classes in QoS validation

In the Linux kernel, the following vulnerability has been resolved: net: atm: reject out-of-range traffic classes in QoS validation Reject ATM traffic classes above ATMANYCLASS in checktp. SOATMQOS stores the supplied QoS after checkqos succeeds, so accepting larger values leaves invalid...

CVE-2026-72118

CVE-2026-72118 concerns a data race in the Linux kernel CAN subsystem (bcm) where two CPUs simultaneously receive CAN frames, triggering KCSAN complaints in bcm_rx_handler(). The fix uses atomic operations on statistics counters (signed long) in hot paths and refactors updates to bcm_update_rx_st...

EUVD-2026-59076

In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix CAN frame rx/tx statistics KCSAN detected a data race within the bcmrxhandler when two CAN frames have been simultaneously received and processed in a single rx op by two different CPUs. Use atomic operations with...

CVE-2026-72118 can: bcm: fix CAN frame rx/tx statistics

In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix CAN frame rx/tx statistics KCSAN detected a data race within the bcmrxhandler when two CAN frames have been simultaneously received and processed in a single rx op by two different CPUs. Use atomic operations with...

RLSA-2026:49871 Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown CVE-2025-68214 kernel: procfs: avoid fetching build ID while holding VMA lock CVE-2026-23199 Bug Fixes...

kernel: procfs: avoid fetching build ID while holding VMA lock

A deadlock vulnerability was found in the procfs PROCMAPQUERY ioctl handler. When fetching the optional build ID while holding the VMA lock mmaplock, a circular lock dependency can occur with the inode mutex, causing a system deadlock...

RHEL 10 : kernel (RHSA-2026:49871)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:49871 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Denial of...

CVE-2026-64371

A flaw was found in the Linux kernel's procfs a virtual filesystem that provides information about running processes. This vulnerability occurs because certain functions within procfs do not properly protect access to process memory information. A local attacker could exploit this missing...

AZL-93840 CVE-2026-64371 affecting package kernel for versions less than 6.6.145.2-1

In the Linux kernel, the following vulnerability has been resolved: proc: protect ptracemayaccess with execupdatelock part 1 Fix the easy cases where procfs currently calls ptracemayaccess without execupdatelock protection, where the fix is to simply add the extra lock or use mmaccess: -...

CVE-2026-64371

In the Linux kernel, the following vulnerability has been resolved: proc: protect ptracemayaccess with execupdatelock part 1 Fix the easy cases where procfs currently calls ptracemayaccess without execupdatelock protection, where the fix is to simply add the extra lock or use mmaccess: -...