213 matches found
CVE-2025-40271
CVE-2025-40271 — procreaddirde rb-tree UAF LPE Proof-of-Concept für eine lokale Privilegieneskalations-Schwachstelle im Linux-Kernel-Dateisystem proc. Der Fehler ist ein Use-After-Free in procreaddirde, verursacht durch rberase ohne RBCLEARNODE, wodurch veraltete Rot-Schwarz-Baum-Verknüpfungen...
pipe_finder
Pipe Finder 1.0 Automated script to search in SMB protocol for availables pipe names Screenshots Requirements metasploit-framework wget locate pipeauditv2.rb module https://github.com/peterpt/pipeauditorfb - It will be installed on first run Install Requirements apt-get install metasploit-framewo...
Linux Distros Unpatched Vulnerability : CVE-2026-74355
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/vt-d: Fix RB-tree corruption in probe error path The info-node RB-tree member is zero-initialized via kzalloc. If a device does not support ATS, the...
CVE-2026-74355
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix RB-tree corruption in probe error path The info-node RB-tree member is zero-initialized via kzalloc. If a device does not support ATS, the devicerbtreeinsert call is skipped. If a subsequent probe step fails, the...
CVE-2026-74344
In the Linux kernel, the following vulnerability has been resolved: bpf: Clear rb node linkage when freeing bpfrbroot bpfrbrootfree detaches the root by copying the current rbrootcached and then replacing the live root with RBROOTCACHED. It then walks the copied root and drops each object contain...
CVE-2026-74344
In the Linux kernel, the following vulnerability has been resolved: bpf: Clear rb node linkage when freeing bpfrbroot bpfrbrootfree detaches the root by copying the current rbrootcached and then replacing the live root with RBROOTCACHED. It then walks the copied root and drops each object contain...
CVE-2026-74355
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix RB-tree corruption in probe error path The info-node RB-tree member is zero-initialized via kzalloc. If a device does not support ATS, the devicerbtreeinsert call is skipped. If a subsequent probe step fails, the...
UBUNTU-CVE-2026-74355
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix RB-tree corruption in probe error path The info-node RB-tree member is zero-initialized via kzalloc. If a device does not support ATS, the devicerbtreeinsert call is skipped. If a subsequent probe step fails, the...
EUVD-2026-59502
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix RB-tree corruption in probe error path The info-node RB-tree member is zero-initialized via kzalloc. If a device does not support ATS, the devicerbtreeinsert call is skipped. If a subsequent probe step fails, the...
CVE-2026-74355
In the Linux kernel vulnerability CVE-2026-74355, the issue occurs in iommu/vt-d where the info->node RB-tree is zero-initialized via kzalloc. If ATS is not supported, device_rbtree_insert() is skipped, and on a later failed probe step, device_rbtree_remove() can misinterpret the zeroed node a...
CVE-2026-74355 iommu/vt-d: Fix RB-tree corruption in probe error path
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix RB-tree corruption in probe error path The info-node RB-tree member is zero-initialized via kzalloc. If a device does not support ATS, the devicerbtreeinsert call is skipped. If a subsequent probe step fails, the...
CVE-2026-74355 iommu/vt-d: Fix RB-tree corruption in probe error path
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix RB-tree corruption in probe error path The info-node RB-tree member is zero-initialized via kzalloc. If a device does not support ATS, the devicerbtreeinsert call is skipped. If a subsequent probe step fails, the...
CVE-2026-74344 bpf: Clear rb node linkage when freeing bpf_rb_root
In the Linux kernel, the following vulnerability has been resolved: bpf: Clear rb node linkage when freeing bpfrbroot bpfrbrootfree detaches the root by copying the current rbrootcached and then replacing the live root with RBROOTCACHED. It then walks the copied root and drops each object contain...
CVE-2026-74344
CVE-2026-74344 affects the Linux kernel BPF RB-tree code. The vulnerability arises in bpf_rb_root_free() when detaching the root: the function copies rb_root_cached, replaces the live root with RB_ROOT_CACHED, and then walks the copied tree to drop objects. If a dropped object is refcounted and s...
CVE-2026-74344 bpf: Clear rb node linkage when freeing bpf_rb_root
In the Linux kernel, the following vulnerability has been resolved: bpf: Clear rb node linkage when freeing bpfrbroot bpfrbrootfree detaches the root by copying the current rbrootcached and then replacing the live root with RBROOTCACHED. It then walks the copied root and drops each object contain...
PT-2026-72791
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix RB-tree corruption in probe error path The info-node RB-tree member is zero-initialized via kzalloc. If a device does not support ATS, the device rbtree insert call is skipped. If a subsequent probe step fails, th...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: fs/proc: fixed a UAF in procreaddirde. The pde is erased from the subdir rbtree through rberase, but the node is not set to EMPTY, which may lead to UAF access. We should use RBCLEARNODE to set the erased node to EMPTY. Then,...
UBUNTU-CVE-2026-64300
In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix page UAF in maprange maprange reads rb-auxpages, rb-auxnrpages and rb-auxpgoff via perfmmaptopage while holding only event-mmapmutex. Those fields are serialized by rb-auxmutex, and mmapmutex is per event. Thus, two...
CVE-2026-64300
CVE-2026-64300 (Linux kernel, perf/aux): Concrete details across connected docs show a page-use-after-free (UAF) in map_range() due to reading rb->aux_pages[], rb->aux_nr_pages, and rb->aux_pgoff under the wrong mutex, enabling a race between rb_alloc_aux() and map_range() when PERF_EVEN...
PT-2026-64521
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the map range function where it accesses rb-aux pages, rb-aux nr pages, and rb-aux pgoff via perf mmap to page while holding only the event-mmap mutex. Because these...