CVE-2026-53365

CVE-2026-53365 — VsockDrop: subdesbordamiento del contador de referencias en iouring + AFVSOCK zero-copy, escalada de privilegios mediante reescritura de Page-Cache Imagen de distribución de HackSpeak. Este repositorio es un espejo de distribución de MaherAzzouzi/vsockdrop , con el código idéntic...

Rocky Linux 8 [CIQ] Security Update: libwayland-client / libwayland-client-debuginfo / libwayland-cursor / etc (crlsa-2023_2786)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20232786 advisory. wayland: libwayland-server wlshm reference-count overflow CVE-2021-3782 Tenable has extracted the preceding description block directly from the CIQ security advisor...

Rocky Linux 9.6 [TuxCare] Security Update: poppler / poppler-cpp / poppler-cpp-devel / poppler-devel / etc (ALMALINUX9.6:CLSA-2026:1775817651)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1775817651 advisory. - Poppler is a PDF rendering library. Versions prior to 25.06.0 use std::atomicint for reference counting. Because std::atomicint is only 3...

cve-2026-23111-poc

CVE-2026-23111 For more details, see notes.md Description CVE Description from NIST An inverted logical check in nftmapcatchallactivate causes nftchain-use reference count to not be restored when a DELSET operation is aborted. This allows triggering UAF, and can be abused to obtain local privileg...

CVE-2026-43494-PinTheft-PoC

SLEY — PinTheft PoC CVE-2026-43494 Proof of concept — uid=1000raken → uid=0root after ./sley on WSL2 6.6.87.2-microsoft-standard-WSL2 Single-file proof-of-concept for CVE-2026-43494 PinTheft: a Linux kernel local privilege escalation that chains an RDS zerocopy reference-count bug with iouring...

CVE-2026-97972

A flaw was found in the Linux kernel's Cadence MACB ethernet driver. During network interface initialization, the driver fails to properly release a device tree node reference upon successful registration. Repeated device probe or bind cycles can result in a reference count leak and progressive...

CVE-2026-97440

A flaw was found in the Linux kernel's Qualcomm IPC Router QRTR networking subsystem. When processing resume transmission requests, a failure during control packet memory allocation does not properly release an acquired network node reference. A local user could exploit this condition under syste...

CVE-2026-97426

A flaw was found in the Linux kernel's AMDGPU driver. When processing input for the SmartShift bias sysfs configuration interface, an input parsing failure causes the driver to release power management access without having first acquired it. A local user with write access to this interface could...

CVE-2026-43494-PinTheft-PoC

SLEY — PinTheft PoC CVE-2026-43494 Proof of concept — uid=1000raken → uid=0root after ./sley on WSL2 6.6.87.2-microsoft-standard-WSL2 Single-file proof-of-concept for CVE-2026-43494 PinTheft: a Linux kernel local privilege escalation that chains an RDS zerocopy reference-count bug with iouring...

CVE-2026-98054

A flaw was found in the Linux kernel's Intel Audio Voice Speech AVS sound driver. When an error occurs while opening the driver's debugfs trace interface, the kernel fails to release a previously acquired module reference count. A local user with access to the interface can exploit this issue by...

CVE-2026-98054

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix unbalanced module reference count straceopen invokes trymoduleget which on success takes the module reference. If any follow up operation causes straceopen to fail, the refcount shall be put down...

DEBIAN-CVE-2026-98054

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix unbalanced module reference count straceopen invokes trymoduleget which on success takes the module reference. If any follow up operation causes straceopen to fail, the refcount shall be put down...

UBUNTU-CVE-2026-98054

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix unbalanced module reference count straceopen invokes trymoduleget which on success takes the module reference. If any follow up operation causes straceopen to fail, the refcount shall be put down...

CVE-2026-98144 accel/amdxdna: put the chained BO when its mapping fails

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: put the chained BO when its mapping fails amdxdnacmdseterror looks up the first BO of a command chain, which takes a reference, and drops it at the end of the function. The mapping of that BO is established in...

CVE-2026-98054

The Linux kernel contains a vulnerability within the ASoC: Intel: avs component. The root cause is an unbalanced module reference count in the strace_open() function. Specifically, while strace_open() successfully invokes try_module_get() to take a module reference, it fails to release that refer...

CVE-2026-98054

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix unbalanced module reference count straceopen invokes trymoduleget which on success takes the module reference. If any follow up operation causes straceopen to fail, the refcount shall be put down...

CVE-2026-98054 ASoC: Intel: avs: Fix unbalanced module reference count

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix unbalanced module reference count straceopen invokes trymoduleget which on success takes the module reference. If any follow up operation causes straceopen to fail, the refcount shall be put down...

CVE-2026-98054 ASoC: Intel: avs: Fix unbalanced module reference count

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix unbalanced module reference count straceopen invokes trymoduleget which on success takes the module reference. If any follow up operation causes straceopen to fail, the refcount shall be put down...

EUVD-2026-86707

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix unbalanced module reference count straceopen invokes trymoduleget which on success takes the module reference. If any follow up operation causes straceopen to fail, the refcount shall be put down...

CVE-2026-97969 watchdog: msc313e: Fix clock leak and spurious timer in settimeout()

In the Linux kernel, the following vulnerability has been resolved: watchdog: msc313e: Fix clock leak and spurious timer in settimeout msc313ewdtsettimeout unconditionally calls msc313ewdtstart which introduces two severe bugs: 1. If the watchdog is already active, calling start again will increa...