CVE-2026-80628

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Serialize readq reset state with q-lock sndseqossreadqclear resets qlen, head, and tail without q-lock even though the normal reader and producer paths serialize the same ring state under that spinlock. A reset ca...

CVE-2026-80622

CVE-2026-80622 is a use-after-free and race condition in the Linux kernel's tlclk driver . Two defects contribute: the file_operations structure lacks the .owner field, permitting module unload while user-space processes still interact with the device; and tlclk_cleanup() frees alarm_events memor...

CVE-2026-80622 char: tlclk: fix use-after-free in tlclk_cleanup()

In the Linux kernel, the following vulnerability has been resolved: char: tlclk: fix use-after-free in tlclkcleanup This patch improves the module cleanup process in the tlclk driver to prevent potential use-after-free and race conditions. Currently, the fileoperations structure does not specify...

CVE-2026-80622 char: tlclk: fix use-after-free in tlclk_cleanup()

In the Linux kernel, the following vulnerability has been resolved: char: tlclk: fix use-after-free in tlclkcleanup This patch improves the module cleanup process in the tlclk driver to prevent potential use-after-free and race conditions. Currently, the fileoperations structure does not specify...

EUVD-2026-67498

In the Linux kernel, the following vulnerability has been resolved: char: tlclk: fix use-after-free in tlclkcleanup This patch improves the module cleanup process in the tlclk driver to prevent potential use-after-free and race conditions. Currently, the fileoperations structure does not specify...

CVE-2026-80614 net: emac: Fix NULL pointer dereference in emac_probe

In the Linux kernel, the following vulnerability has been resolved: net: emac: Fix NULL pointer dereference in emacprobe Move devmrequestirq after devmplatformioremapresource so that dev-emacp is mapped before the interrupt handler can fire. An early interrupt hitting emacirq would dereference th...

CVE-2026-80608

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix iommu domain lifetime race during device removal When forceiova mode is enabled, amdxdnaremove frees xdna-domain. If amdxdnagemobjfree is called after device removal, it may attempt to access xdna-domain,...

CVE-2026-80608 accel/amdxdna: Fix iommu domain lifetime race during device removal

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix iommu domain lifetime race during device removal When forceiova mode is enabled, amdxdnaremove frees xdna-domain. If amdxdnagemobjfree is called after device removal, it may attempt to access xdna-domain,...

CVE-2026-80608

This Linux kernel vulnerability affects the accel/amdxdna driver (AMD XDNA accelerator). When force_iova mode is enabled, a race condition exists during device removal: amdxdna_remove() frees the xdna->domain IOMMU domain, and a subsequent call to amdxdna_gem_obj_free() may access that freed m...

EUVD-2026-67484

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix iommu domain lifetime race during device removal When forceiova mode is enabled, amdxdnaremove frees xdna-domain. If amdxdnagemobjfree is called after device removal, it may attempt to access xdna-domain,...

ghostrace

GhostRace: स्पेक्युलेटिव रेस कंडीशन्स का दोहन और शमन इस रिपॉजिटरी में शामिल हैं: एक न्यूनतम PoC जो स्पेक्युलेटिव रेस कंडीशन की अवधारणा को चरण-दर-चरण सिंगल-थ्रेडेड तरीके से प्रदर्शित करता है। Linux कर्नेल v5.15.83 को स्पेक्युलेटिव कंकरंट यूज़-आफ्टर-फ्री SCUAF गैजेट्स के लिए स्कैन करने हेतु उपयोग क...

mindmanager-poc

mindmanager-poc Betroffene Anwendung: MindManager23setup.exe Plattform: Windows Problem: Lokale Privilegienerweiterung über den Reparaturmodus des MSI-Installers EXE-Hijacking-Race-Condition Entdeckt und gemeldet von: Pawel Karwowski und Julian Horoszkiewicz Eviden Red Team Vorgeschlagene...

symboliclink-testing-tools

symboliclink-testing-tools c Google Inc. 2015 Sviluppato da James Forshaw Questa è una piccola suite di strumenti per testare vari tipi di collegamenti simbolici di Windows. È composta dai seguenti strumenti: BaitAndSwitch : Crea un collegamento simbolico e usa un OPLOCK per vincere una TOCTOU...

Linux Distros Unpatched Vulnerability : CVE-2026-80653

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: hisisas: Add slavedestroy interface for v3 hw WARNING is triggered when executing link reset of remote PHY and rmmod SAS driver simultaneously. Following ...

Linux Distros Unpatched Vulnerability : CVE-2026-80668

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nfconntrackexpect: use conntrack GC to reap expectations This patch replaces the timer API by GC worker approach for expectations, as it already...

PT-2026-82977

In the Linux kernel, the following vulnerability has been resolved: driver core: use READ ONCE for dev-driver in dev has sync state dev has sync state reads dev-driver twice without holding device lock -- once for the NULL check and once to dereference -sync state. Some callers only hold device...

PT-2026-83369

Name of the Vulnerable Software and Affected Versions free5GC versions 1.4.4 and earlier Description The AUSF component stores per-subscriber authentication state in a global sync.Map named AUSFContext.UePool within internal/context/context.go, using only the SUPI as a key. Requests processed by...

Linux Distros Unpatched Vulnerability : CVE-2026-80678

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: imx: Fix slave registration race and error handling In i2cimxregslave, the slave pointer was assigned before pmruntimeresumeandget. If pmruntimeresumeandge...

Linux Distros Unpatched Vulnerability : CVE-2026-80628

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: seq: oss: Serialize readq reset state with q-lock sndseqossreadqclear resets qlen, head, and tail without q-lock even though the normal reader and produce...

Linux Distros Unpatched Vulnerability : CVE-2026-80655

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - soc: xilinx: Fix race condition in event registration The zynqmppower driver registers handlers for suspend and subsystem restart events using registerevent...