CVE-2025-21333-POC

CVE-2025-21333-POC Доказательство концепции, эксплуатирующее CVE-2025-21333 в vkrnlintvsp.sys не очень надежно, см. раздел Требования и ограничения. В разделе Ссылки находятся очень полезные ресурсы для тех, кто хочет поиграться с эксплойтом. Подробный анализ уязвимости и эксплойта доступен здесь...

CVE-2026-97953

A flaw was found in the Linux kernel's stmmac network driver. An attacker can cause a Denial of Service DoS by transmitting highly fragmented network packets that use TCP Segmentation Offload TSO. Due to an improper calculation of required transmit descriptors, the driver writes past available...

SUSE CVE-2026-97617

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Check resizedisabled before publishing the new subbuf order ringbuffersubbuforderset stores the new order and only then walks the CPUs, returning -EBUSY if any of them has resizing disabled. A user mapped buffer has...

CVE-2026-97617

A flaw was found in the Linux kernel's ring buffer subsystem. A race condition occurs when updating the buffer configuration concurrently with memory mapping operations. Because the kernel applies the new buffer order before verifying that resizing is permitted across all processors, the system c...

CVE-2026-97573

A flaw was found in the Linux kernel's Broadcom NetXtreme-E bnxten network driver. The driver fails to verify memory allocation success during receive ring buffer resets, ignoring failure responses when memory is low. A local user or network event that triggers a reset under memory exhaustion can...

CVE-2026-97572

A flaw was found in the Linux kernel's Broadcom NetXtreme bnxten network driver. This flaw can result in a Denial of Service DoS or memory corruption when the device is initialized or reset under low-memory conditions. The driver ignores memory allocation errors during receive ring buffer setup a...

CVE-2026-98057

A flaw was found in the Linux kernel's tracing ring buffer. The persistent ring buffer validation logic fails to verify that the recorded sub-buffer count matches the expected page count in the metadata. A local attacker capable of manipulating persistent memory metadata could exploit this issue ...

CVE-2020-11179-Adreno-Qualcomm-GPU

Mon travail indépendant à partir du POC créé par le chercheur de P0 Ben Hawkes Article original: https://googleprojectzero.blogspot.com/2020/09/attacking-qualcomm-adreno-gpu.html Mon objectif est de convertir son POC en C, et de continuer là où il s'est arrêté et de transformer le POC en un shell...

CVE-2021-4204

CVE-2021-4204 Китайский разбор: https://tr3e.ee/posts/cve-2021-4204-linux-kernel-ebpf-lpe.txt Только для образовательных/исследовательских целей. Используйте на свой страх и риск. Сборка и запуск $ sh buildandrun.sh Build from source... cc -I include -static -w -o exploit exploit.c Start exploit!...

DEBIAN-CVE-2026-98057

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Add checking nrsubbufs to persistent ring buffer validation Sashiko reported that the code was using meta-nrsubbufs without making sure that it matched the nrpages + 1 on data that was assuming the two were the same...

CVE-2026-98057

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Add checking nrsubbufs to persistent ring buffer validation Sashiko reported that the code was using meta-nrsubbufs without making sure that it matched the nrpages + 1 on data that was assuming the two were the same...

CVE-2026-97617

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Check resizedisabled before publishing the new subbuf order ringbuffersubbuforderset stores the new order and only then walks the CPUs, returning -EBUSY if any of them has resizing disabled. A user mapped buffer has...

DEBIAN-CVE-2026-97617

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Check resizedisabled before publishing the new subbuf order ringbuffersubbuforderset stores the new order and only then walks the CPUs, returning -EBUSY if any of them has resizing disabled. A user mapped buffer has...

UBUNTU-CVE-2026-98057

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Add checking nrsubbufs to persistent ring buffer validation Sashiko reported that the code was using meta-nrsubbufs without making sure that it matched the nrpages + 1 on data that was assuming the two were the same...

UBUNTU-CVE-2026-97617

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Check resizedisabled before publishing the new subbuf order ringbuffersubbuforderset stores the new order and only then walks the CPUs, returning -EBUSY if any of them has resizing disabled. A user mapped buffer has...

EUVD-2026-86710

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Add checking nrsubbufs to persistent ring buffer validation Sashiko reported that the code was using meta-nrsubbufs without making sure that it matched the nrpages + 1 on data that was assuming the two were the same...

CVE-2026-98057 ring-buffer: Add checking nr_subbufs to persistent ring buffer validation

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Add checking nrsubbufs to persistent ring buffer validation Sashiko reported that the code was using meta-nrsubbufs without making sure that it matched the nrpages + 1 on data that was assuming the two were the same...

CVE-2026-98057

The Linux kernel contains a vulnerability in the ring-buffer component. The issue arises because the code utilized meta->nr_subbufs without verifying that it correctly matched nr_pages + 1, despite the system assuming these two values were identical. To resolve this, a check was added to the p...

CVE-2026-98057 ring-buffer: Add checking nr_subbufs to persistent ring buffer validation

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Add checking nrsubbufs to persistent ring buffer validation Sashiko reported that the code was using meta-nrsubbufs without making sure that it matched the nrpages + 1 on data that was assuming the two were the same...

CVE-2026-98057

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Add checking nrsubbufs to persistent ring buffer validation Sashiko reported that the code was using meta-nrsubbufs without making sure that it matched the nrpages + 1 on data that was assuming the two were the same...