cve-2022-22947

CVE-2022-22947 Poc for CVE-2022-22947 DnsLog When I was writing the PoC for xray, the reverse couldn't receive DNS requests. After debugging for a long time, I decided to write a Python version of the PoC…… root@kitploit: python3 poc-cve-2022-22947.py...

RowHammer-Exploit

RowHammer-Exploit Exploit basado en RowHammer backdoor de syssuid usando rowhammer Todavía necesita trabajo... averiguar por qué las cosas no funcionan correctamente... root@kitploit: Current stage... Denial fails with the following stack trace... UG: unable to handle kernel paging request at...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: cfg80211 – Fix for a memory leak in queryregdbfile In the function queryregdbfile, the alpha2 parameter is duplicated using kmemdup and then freed in regdbfwcb. However, requestfirmwarenowait may fail without calling...

CVE-2026-59295 Micrometer instrumentation of Apache HttpAsyncClient DoS vulnerability

It is possible for outbound HTTP requests using a Micrometer-instrumented client to cause a denial-of-service DoS condition due to an unbounded memory leak. Micrometer 1.17.0 Micrometer 1.16.0 - 1.16.6 Micrometer 1.15.0 - 1.15.12 Micrometer 1.14.0 - 1.14.16 Micrometer 1.9.18 and earlier...

CVE-2026-72439

The CVE-2026-72439 entry documents a Linux kernel vulnerability in the md/raid10 path where a writes_pending reference is leaked when write requests fail. Root cause: raid10_make_request() grabs writes_pending via md_write_start() and some raid10_write_request() failure paths skip md_write_end(),...

CVE-2026-67313 axios 0.28.0 before 1.18.0 Denial of Service via formDataToJSON

axios versions 0.28.0 and later contain uncontrolled recursion in formDataToJSON when processing FormData field names with deeply nested bracket segments. Attackers can supply FormData with field names containing thousands of nested brackets to exhaust the JavaScript call stack and trigger...

SUSE CVE-2026-64144

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: fix urb-setuppacket leak in error paths The setuppacket of control urb is not freed if usbsubmiturb fails or the submitted urb is killed. Add free in these two paths...

CVE-2026-45869

In the Linux kernel, the following vulnerability has been resolved: power: supply: wm97xx: Fix NULL pointer dereference in powersupplychanged In probe, requestirq is called before allocating/registering a powersupply handle. If an interrupt is fired between the call to requestirq and...

CVE-2026-43469 xprtrdma: Decrement re_receiving on the early exit paths

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Decrement rereceiving on the early exit paths In the event that rpcrdmapostrecvs fails to create a work request due to memory allocation failure, say or otherwise exits early, we should decrement ep-rereceiving before...

PT-2026-39130

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the xprtrdma component where the rpcrdma post recvs function fails to decrement the re receiving variable on early exit paths, such as during memory allocation failure...

Linux kernel 安全漏洞

The Linux kernel is a product of the Linux Foundation, as is the Linux operating system itself. Other products like “roc” are developed by individual developers. “req” is a simple Go HTTP client that uses Black Magic technology. “ClickHouse” is an open-source product; “ch” is a low-level Go clien...

EUVD-2026-5860

In the Linux kernel, the following vulnerability has been resolved: spi: tegra: Fix a memory leak in tegraslinkprobe In tegraslinkprobe, when platformgetirq fails, it directly returns from the function with an error code, which causes a memory leak. Replace it with a goto label to ensure proper...

CVE-2022-50836

The CVE-2022-50836 issue in the Linux kernel’s remoteproc: sysmon subsystem (qcom_add_sysmon_subdev) caused a memory leak. Root cause: kfree() was not invoked when of_irq_get_byname() or devm_request_threaded_irq() failed, leading to leaked memory. The fix adds a kfree() path to ensure proper cle...

net/mlx5: Clean up only new IRQ glue on request_irq() failure

...

SUSE CVE-2025-40250

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Clean up only new IRQ glue on requestirq failure The mlx5irqalloc function can inadvertently free the entire rmap and end up in a crash1 when the other threads tries to access this, when requestirq fails due to exhauste...

PT-2025-49080

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The mlx5 irq alloc function in the Linux kernel could inadvertently free the entire rmap, leading to a crash when request irq fails due to exhausted IRQ vectors. This issue occurs when...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989043)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989043 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix memory leak in queryregdbfile In the function queryregdbfile the alpha2...

EUVD-2017-10573

Malware in sbrugna...

PT-2025-18390 · Elastic · Apm Server

Name of the Vulnerable Software and Affected Versions: Elasticsearch APM Server affected versions not specified Description: The issue concerns the potential disclosure of sensitive information in APM Server error logs. This could happen when a bulk index request partially fails, causing parts of...

Linux Distros Unpatched Vulnerability : CVE-2024-40979

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath12k: fix kernel crash during resume Currently during resume, QMI target memory is not properly handled, resulting in kernel crash in case DMA remap is...