EUVD-2026-85307

Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to an albatross-console loop with no recognized termination condition. This is only exploitable by users who can send console subscription commands to unikernels that produce sufficient log output to fil...

CVE-2026-96609

Robur Albatross versions 1.0.0 through 2.x before 2.7.2 are vulnerable to a memory exhaustion denial of service. The albatross-console component fails to properly terminate when looping over its internal ring buffer (default 1024 lines). A user with permissions to send console subscription comman...

CVE-2025-21333-POC

CVE-2025-21333-POC 利用 vkrnlintvsp.sys 中的 CVE-2025-21333 的概念验证（不太可靠，请参阅“要求与限制”部分）。参考章节中提供了一些非常有用的资源，适合想要研究该漏洞的人。 漏洞及利用的详细分析可见此处。 该漏洞已被检测到被威胁行为者积极利用。 已在 Windows 11 23h2 上测试。 也可能在 Windows 11 24h2 上工作，但我没有测试。 以下是用于测试 POC 的 ntoskrnl.exe 和 vkrnlintvsp.sys 的哈希值。 root@kitploit: PS...

CVE-2020-11179-Adreno-Qualcomm-GPU

Mi trabajo independiente a partir del poc creado por el investigador de P0 Ben Hawkes Artículo original: https://googleprojectzero.blogspot.com/2020/09/attacking-qualcomm-adreno-gpu.html Mi objetivo es convertir su poc a C, y continuar desde donde él lo dejó y convertir el poc en una shell root, ...

CVE-2021-4204

CVE-2021-4204 Writeup en chino: https://tr3e.ee/posts/cve-2021-4204-linux-kernel-ebpf-lpe.txt Solo con fines educativos/de investigación. Úsalo bajo tu propio riesgo. Compilar y ejecutar root@kitploit: $ sh buildandrun.sh Build from source... cc -I include -static -w -o exploit exploit.c Start...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Ring-Buffer: Sync-IRQ works before the buffer is destroyed. If something was written to the buffer just before its destruction, it may be possible—though not in a real system—to destroy the ringbuffer before the IRQ-related...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: uiohvgeneric: Let userspace handle the interrupt mask. The logic for setting the interrupt mask by default in uiohvgeneric driver has been removed. The interrupt mask value should be completely controlled by the user space. If th...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Ring-buffer: Handled race conditions between rbmovetail and rbcheckpages. It appears there is a data race between writing to the ringbuffer and performing integrity checks. Specifically, the RBFLAG of headpage is being updated,...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reset the IH OVERFLOWCLEAR bit. This also allows us to detect subsequent IH ring buffer overflows...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: tracing: Restructure traceclockglobal to never block. It was reported that a fix to the ring buffer recursion detection would cause a hung machine during suspend/resume testing. The following backtrace was extracted from debuggin...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: bpf: Ensuring that pending IRQ work is processed before freeing the ring buffer. A race condition was addressed in this fix, where irqwork could be queued in bpfringbufcommit, but the ring buffer was freed before the work execute...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fixed a data race between perfeventsetoutput and perfmmapclose. Yang Jihing reported a race between perfeventsetoutput and perfmmapclose: CPU1 CPU2 perfmmapclosee2 if atomicdecandtest&e2-rb-mmapcount // 1 - 0 then...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Ring-Buffer: Fixed a deadloop issue when reading tracepipe. A soft lockup occurs when reading the file ‘tracepipe’: - Watchdog: BUG: Soft lockup – CPU6 stuck for 22 seconds! cat:4488 - ... - RIP: 0010:...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Ring Buffer: Do not swap the cpubuffer during the resize process When the ringbufferswapcpu function is called during the resize process, the cpu buffer is swapped in the middle, resulting in an incorrect state. Continuing to run...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: BPF: Fixed an issue where reservations were advanced beyond their limit in the ringbuf structure. The BPF ring buffer is internally implemented as a circular buffer of a power-of-2 size, with two logical and ever-increasing...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Tracing: Free buffers when a used dynamic event is removed After 65536 dynamic events have been added and removed, the “type” field of the event uses the first available type number which is not currently used by other events. A...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: r8169: Fixed possible ring buffer corruption due to fragmented Tx packets. An issue was discovered in the RTL8125b driver when transmitting small, fragmented packets. Invalid entries were inserted into the transmit ring buffer,...

CVE-2026-89500

A flaw was found in the Linux kernel's ring-buffer component. When a cached reader page is discarded after a concurrent ring buffer resize, the system may use an incorrect buffer size for memory deallocation. This mismatch can lead to a kernel crash, resulting in a Denial of Service DoS, or it...

Linux Distros Unpatched Vulnerability : CVE-2026-89502

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ring-buffer: Free cpubuffer::freepage with subbuforder When sub-buffers use an order greater than 0, cpubuffer-freepage is allocated with subbuforder. Use the...

Linux Distros Unpatched Vulnerability : CVE-2026-89499

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ring-buffer: Stop remote reader update when page swap fails The remote swapreaderpage callback can return -EBUSY when the writer moves the head before the remot...