Linux Distros Unpatched Vulnerability : CVE-2026-80896

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mshv: Fix race in mshvirqfddeassign mshvirqfddeactivate and the hlist traversal of ptirqfdslist require pt-ptirqfdslock to be held, but mshvirqfddeassign omits...

Linux Distros Unpatched Vulnerability : CVE-2026-80777

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - futex/pi: Plug private futex exec race The check for private futexes whether the waiter's mm, which is stored in the futexkey and copied into the pistate, is t...

Linux Distros Unpatched Vulnerability : CVE-2026-80775

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - futex: Fix race on the initial mm-futex.phash.ref allocation futexhashallocate allocates mm-futex.phash.ref without any locking. Commit d9b05321e21e futex: Move...

Linux Distros Unpatched Vulnerability : CVE-2026-80758

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - futex: Avoid private hash use-after-free on final put futexprivatehashput drops the reference to fph before evaluating fph-mm for wakeupvar. futexrefput enables...

Linux Distros Unpatched Vulnerability : CVE-2026-86469

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GLib2. When gfilereplace is used with GFILECREATEREPLACEDESTINATION and creating the .goutputstream-XXXXXX temporary file fails, the library...

CVE-2026-76925

A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU r...

Linux Distros Unpatched Vulnerability : CVE-2026-80871

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: xilinx-trng - Remove cryptorng interface Implementing the cryptorng interface has no purpose, as it isn't used in practice. It's being removed from othe...

PT-2026-86788

ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by exploiting symlink race conditions. Attackers can swap symlinks between policy validation and file access to read or...

Linux Distros Unpatched Vulnerability : CVE-2026-80776

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - futex: Fix race in futexpivotpending during private hash resize A task performing a custom private hash resize can remain blocked in uninterruptible sleep...

MiracleLinux 8 : kernel-4.18.0-553.157.1.el8_10 (AXSA:2026-1779:74)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1779:74 advisory. kernel: net: ieee802154: do not leave a dangling sk pointer in ieee802154create CVE-2024-56602 kernel: ip6gre: Use cached t-net in ip6erspanchangeli...

Linux Distros Unpatched Vulnerability : CVE-2026-80886

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: msm: Disable DMA for kernel console UART At the moment, concurrent writes from userspace and the kernel to the console can trigger a race condition that...

PT-2026-86651

Interesting GitHub Security Lab disclosure: same-second TOCTOU in jupyterlab/maintainer-tools update-snapshots-checkout CVE-2026-84973. Race between checkout and snapshot update. Window is measured in the same second the workflow runs. Classic TOCTOU, but in a maintainer tooling path that many...

Linux Distros Unpatched Vulnerability : CVE-2026-80889

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: isotp: fix timer drain order, wakeup handling and txgen ordering This patch is a follow-up to commit cf070fe33bfb can: isotp: serialize TX state transition...

Linux Distros Unpatched Vulnerability : CVE-2026-80895

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mshv: Order ptvparray publish against irqfd assertion path mshvpartitionioctlcreatevp initialises a VP struct allocations, mutexinit, initwaitqueuehead, page...

Linux Distros Unpatched Vulnerability : CVE-2026-80778

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - futex/pi: Reject cross-mm private futex owners A private futex key borrows the waiter's mm without taking an mmusers reference. Nevertheless, attachtopiowner...

CVE-2025-32421---Race-Condition-Vulnerability---Next.js

CVE-2025-32421---Race-Condition-Vulnerability---Next.js CVE-2025-32421 – Next.js 레이스 컨디션 캐시 포이즈닝 시뮬레이션 PoC 랩 CVE-2025-32421 랩 – Next.js 레이스 컨디션 캐시 포이즈닝 이 실습 랩은 CVE-2025-32421에 설명된 동작을 다음 간의 레이스 컨디션 + 캐시 포이즈닝 시뮬레이션을 통해 재현합니다: / /?nextDataRequest=1 에서 x-now-route-matches 헤더 사용 포함 사항: 취약한 백엔드 Next.j...

CVE-2025-27591-Meta-below-LPE

CVE-2025-27591 — Meta below — повышение локальных привилегий через симлинк Обзор Поле| Подробности ---|--- CVE| CVE-2025-27591 Программное обеспечение| Meta below монитор системных ресурсов Затронутые версии| 0.9.0 Уязвимость| Следование за симлинком → произвольная перезапись файла от root...

dirtycaw-projet

Dirty COW - 권한 상승 CVE-2016-5195 이 프로젝트는 Ubuntu Server 16.04.1과 커널 4.4.0-31-generic을 실행하는 가상 머신에서 Dirty COW 취약점을 이용한 권한 상승을 시연합니다. 🔧 환경 피해 머신 : 취약한 Ubuntu 16.04.1 student, 권한 없음 공격 머신 : Docker가 설치된 Kali Linux 🐮 취약점 Dirty COWCVE-2016-5195는 Linux 커널의 메모리 하위 시스템에서 발생하는 경쟁 조건race condition입니다. 권한이 없는...

CVE-2025-70341

CVE-2025-70341: 안전하지 않은 권한 + App-Auto-Patch에서의 임의 코드 실행 요약 App-Auto-Patch v3.4.2는 작업 디렉토리를 전 세계에 쓰기 가능한 권한chmod 777으로 생성하여, 로컬 TOCTOU time-of-check-time-of-use 경쟁 조건을 가능하게 합니다. 권한이 없는 로컬 공격자는 이를 악용하여 설치 전에 검증된 패키지를 악성 패키지로 교체하고, 루트 권한으로 임의 코드를 실행할 수 있습니다. 또한, 악의적인 Installomator 레이블 조각은 레이블 파싱 중에...

CVE-2025-62215_analysis

Анализ уязвимости CVE-2025-62215 Проект по исследованию уязвимости Windows Kernel Race Condition / Double-Free Privilege Escalation. Обзор Элемент| Детали ---|--- CVE| CVE-2025-62215 Компонент| Windows Kernel ntoskrnl.exe Тип| Состояние гонки CWE-362 / Двойное освобождение CWE-415 Воздействие|...