30 matches found
CVE-2026-89755
In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: clear stale mapping after freeing swapcache migratedevicepages reads the folio mapping before calling foliofreeswap. When foliofreeswap succeeds, the folio is removed from the swap cache, but the saved mapping...
EUVD-2026-76667
In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: clear stale mapping after freeing swapcache migratedevicepages reads the folio mapping before calling foliofreeswap. When foliofreeswap succeeds, the folio is removed from the swap cache, but the saved mapping...
CVE-2026-89755
CVE-2026-89755 affects the Linux kernel in the mm/migrate_device subsystem. The root cause is a stale folio mapping retained after folio_free_swap() succeeds: the mapping still points to swap_space, causing folio_migrate_mapping() to take the mapped-folio path and operate on swap_space.i_pages wi...
CVE-2026-89755 mm/migrate_device: clear stale mapping after freeing swapcache
In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: clear stale mapping after freeing swapcache migratedevicepages reads the folio mapping before calling foliofreeswap. When foliofreeswap succeeds, the folio is removed from the swap cache, but the saved mapping...
CVE-2026-43494-PinTheft-PoC
SLEY — PinTheft PoC CVE-2026-43494 概念验证 — uid=1000raken → uid=0root 在 WSL2 6.6.87.2-microsoft-standard-WSL2 上执行 ./sley 后 针对 CVE-2026-43494 （ PinTheft ）的单文件概念验证：一种 Linux 内核本地权限提升漏洞，它利用 RDS 零拷贝引用计数错误 与 iouring 固定缓冲区 链式攻击，覆写 SUID-root 二进制文件的页面缓存。 免责声明： 本仓库仅限 授权的安全研究、教育和防御性测试...
CVE-2026-43494-PinTheft-PoC
SLEY — PoC de PinTheft CVE-2026-43494 Prueba de concepto — uid=1000raken → uid=0root después de ./sley en WSL2 6.6.87.2-microsoft-standard-WSL2 Prueba de concepto en un solo archivo para CVE-2026-43494 PinTheft: una escalada de privilegios local del kernel de Linux que encadena un error de conteo...
Siemens RUGGEDCOM RST2428P Improper Update of Reference Count (CVE-2025-40251)
In the Linux kernel, the following vulnerability has been resolved: devlink: rate: Unset parent pointer in devlratenodesdestroy The function devlratenodesdestroy is documented to Unset parent for all rate objects. However, it was only calling the driver-specific rateleafparentset or...
CVE-2026-46048
CVE-2026-46048 relates to a leak in the Linux kernel ALSA caiaq driver. The issue arises because create_card() takes a usb_get_dev() reference to a USB device and stores the corresponding usb_put_dev() in card_free(), which is registered as snd_card’s private_free destructor. However, private_fre...
EUVD-2025-35073
In the Linux kernel, the following vulnerability has been resolved: netfs: fix reference leak Commit 20d72b00ca81 "netfs: Fix the request's work item to not require a ref" modified netfsallocrequest to initialize the reference counter to 2 instead of 1. The rationale was that the requet's "work"...
Linux Distros Unpatched Vulnerability : CVE-2022-50536
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix repeated calls to sockput when msg has moredata In tcpbpfsendverdict...
EUVD-2024-29818
Malicious code in bioql PyPI...
CVE-2023-53445 net: qrtr: Fix a refcount bug in qrtr_recvmsg()
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Fix a refcount bug in qrtrrecvmsg Syzbot reported a bug as following: refcountt: addition on 0; use-after-free. ... RIP: 0010:refcountwarnsaturate+0x17c/0x1f0 lib/refcount.c:25 ... Call Trace: refcountadd...
PT-2025-37550
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A race condition exists between coalescing and releasing SKBs Socket Buffer in the Linux kernel. A commit intended to fix coalescing for page pool fragment recycling inadvertently...
CVE-2024-31960
An issue was discovered in Samsung Mobile Processor Exynos 1480, Exynos 2400. The xclipse amdgpu driver has a reference count bug. This can lead to a use after free...
AZL-51408 CVE-2024-50012 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: cpufreq: Avoid a bad reference count on CPU node In the parseperfdomain function, if the call to ofparsephandlewithargs returns an error, then the reference to the CPU device node that was acquired at the start of the function...
CVE-2024-31960
An issue was discovered in Samsung Mobile Processor Exynos 1480, Exynos 2400. The xclipse amdgpu driver has a reference count bug. This can lead to a use after free...
CVE-2024-31960
An issue was discovered in Samsung Mobile Processor Exynos 1480, Exynos 2400. The xclipse amdgpu driver has a reference count bug. This can lead to a use after free...
kernel: vmwgfx: reference count issue leads to use-after-free in surface handling
The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user...
Linux kernel security vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a contention condition issue in the drm/lima component, where a rendering job may complete before the timeou...
