CVE-2023-20938

CVE-2023-20938 English Analyse de la vulnérabilité 1. Le client A et le client B établissent une connexion Binder via le gestionnaire de contexte servicemanager. 2. A crée le nœud 0xbeef node = bindernewnodeproc, fp;, B le référence via ref-targetnode node 0xbeef. 3. B traite d'abord correctement...

CVE-2026-97946

A flaw was found in the Linux kernel. Improper reference counting during AMD PCI root device initialization and caching in the amdsmninit function fails to properly track device lifecycles. Under certain conditions, this flaw may allow a local attacker to cause a Denial of Service DoS or system...

CVE-2026-43494

🛠️ PinTheft — CVE-2026-43494 Escalade de privilèges locale dans le noyau Linux via RDS + iouring Page Cache Overwrite 📌 Aperçu PinTheft est un exploit de root local sophistiqué pour CVE-2026-43494 , un bug de comptage de références dans le sous-système Reliable Datagram Sockets RDS du noyau Linux...

CVE-2026-93795

A flaw was found in the Linux kernel's block control group blk-cgroup subsystem, which can lead to a Denial of Service DoS. When an insertion failure occurs during the creation of a block group structure, the error-handling path fails to properly shut down reference counting. A local user can...

CVE-2026-43494-PinTheft-PoC

SLEY — PinTheft PoC CVE-2026-43494 Proof of concept — uid=1000raken → uid=0root после ./sley на WSL2 6.6.87.2-microsoft-standard-WSL2 Однофайловый proof-of-concept для CVE-2026-43494 PinTheft: локальное повышение привилегий в ядре Linux, которое объединяет ошибку подсчёта ссылок при zerocopy в RD...

UBUNTU-CVE-2026-97946

In the Linux kernel, the following vulnerability has been resolved: x86/amdnode: Fix PCI device reference counting in amdsmninit The local "root" pointer is a temporary variable used during the device search. Therefore, refcount related to the search iterators should be cleaned up after the searc...

CVE-2026-97946

The Linux kernel contains a flaw in the x86/amd_node architecture involving incorrect PCI device reference counting within the amd_smn_init() function. The issue stems from a local "root" pointer used as a temporary variable during device searching, where refcounts related to search iterators wer...

CVE-2026-97946

In the Linux kernel, the following vulnerability has been resolved: x86/amdnode: Fix PCI device reference counting in amdsmninit The local "root" pointer is a temporary variable used during the device search. Therefore, refcount related to the search iterators should be cleaned up after the searc...

CVE-2026-97946 x86/amd_node: Fix PCI device reference counting in amd_smn_init()

In the Linux kernel, the following vulnerability has been resolved: x86/amdnode: Fix PCI device reference counting in amdsmninit The local "root" pointer is a temporary variable used during the device search. Therefore, refcount related to the search iterators should be cleaned up after the searc...

PT-2026-97891

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the svcrdma component where svc rdma accept fails to correctly handle the error path when rpcrdma rn register does not succeed. In this scenario, the cleanup block...

CVE-2026-93181

CVE-2026-93181 affects the Linux kernel in the perf/x86/intel/uncore subsystem. The root cause is an incorrect call ordering: in the CPU online path, uncore_box_ref() was invoked before uncore_change_context(), so the gate on box->cpu >= 0 always failed and the uncore box was never initiali...

CVE-2026-90291: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: module/dups: Fix use-after-free in kmoddupreq lifetime handling The kmod dups code uses RCU to ensure that a kmoddupreq instance is freed only after it is no longer referenced. When releasing an instance, the kmodduprequestdelete...

CVE-2026-89841 f2fs: only redirty pinned folios in redirty_blocks

In the Linux kernel, the following vulnerability has been resolved: f2fs: only redirty pinned folios in redirtyblocks redirtyblocks pins folios with readcachefolio and then walks the same range again with filemaplockfolio to redirty them and drop the references it took. Commit 5951fee46bef "f2fs:...

PT-2026-93526

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mtk-mdp3 platform media component regarding SCP device reference counting. The mdp probe function attempts to obtain an SCP handle using scp get. If this fails, it...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: - For the media module, in the mtk-mdp component, error handling in the probe function has been fixed. - The function mtkmdpunregisterm2mdevice has been added to the error handling path to prevent resource leaks. - A check for...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-pci: A possible memory leak caused by the missing pcidevput has been fixed. pcigetdevice will increase the reference count of the returned pcidev. We need to use pcidev PUT to decrease the reference count before amdpro...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: smb: Client side – fixed a potential deadlock that could occur when releasing mids. All callers of releasemid seem to hold a reference to @mid. Therefore, there is no need to call krefput&mid-refcount, releasemid under...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drbd: Added krefget to the handlewriteconflicts function. With “two-primaries” enabled, DRBD attempts to detect “concurrent” writes and handle write conflicts. This ensures that even if you write to the same sector simultaneously...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: PID: Taking a reference when initializing cadpid During boot, kernelinitfreeable initializes cadpid to the struct pid of the init task. Later, we may change cadpid via sysctl. When this happens, procdocadpid will increment the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net/smc: fixed a kernel panic caused by a race condition involving smcsock. A crash occurs when smccdctxhandler attempts to access smcsock, but smcrelease has already freed it. 4570.695099 BUG: Unable to handle a page fault for...