CVE-2026-99116

In the Linux kernel, the following vulnerability has been resolved: net: psp: do not inherit the Rx association on clone sk-pspassoc sits past skdontcopyend, so sockcopy copies it into every socket accepted from a listener without taking a reference, while inetsockdestruct puts for every inet...

EUVD-2026-112016

In the Linux kernel, the following vulnerability has been resolved: net: psp: do not inherit the Rx association on clone sk-pspassoc sits past skdontcopyend, so sockcopy copies it into every socket accepted from a listener without taking a reference, while inetsockdestruct puts for every inet...

CVE-2026-99116

The Linux kernel is vulnerable to a slab-use-after-free issue within the network subsystem. The root cause is that sk->psp_assoc is copied into sockets accepted from a listener without proper reference counting. This allows child sockets (specifically those in TIME_WAIT) to hold a pointer to a...

PT-2026-128109

In the Linux kernel, the following vulnerability has been resolved: net: psp: do not inherit the Rx association on clone sk-psp assoc sits past sk dontcopy end, so sock copy copies it into every socket accepted from a listener without taking a reference, while inet sock destruct puts for every in...

SUSE CVE-2026-99046

In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak on error descriptor When the error bit is set in the RX completion descriptor, the bufstate and its attached buffer should be freed. In the case of AFXDP ZC, the XSK buffer was not freed, leading to a lea...

Linux Distros Unpatched Vulnerability : CVE-2026-99046

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gve: fix XSK buffer leak on error descriptor When the error bit is set in the RX completion descriptor, the bufstate and its attached buffer should be freed. In...

XOR Shellcode Runner Evasion

Windows x64 EXE pure Zig: XOR-encrypted embedded shellcode, RW→RX, CreateThread. Compiled with the same Zig pipeline as zigshellevasion. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.compile.backdoorhelpers import compilezigpe, generatepayloadbytes, optionvalue,...

CVE-2026-115679

Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX Buffer...

CVE-2026-115679

Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX Buffer...

CVE-2026-115679

Arm Keil MDK-Middleware 8.3.0 is vulnerable to out-of-bounds reads and writes specifically within the FTP Server RX Buffer . The underlying cause is identified as a Signed to Unsigned Conversion Error (CWE-195). While the technical impact is noted as partial with potential for low integrity and a...

EUVD-2026-109921

Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX Buffer...

CVE-2026-115679

Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX Buffer...

PT-2026-123402

Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX Buffer...

PT-2026-125097

libosmocore through 1.14.1 contains an out-of-bounds read in iuup rx initialization in src/gsm/iuup.c. This allows a remote attacker to obtain sensitive information...

UBUNTU-CVE-2026-98906

In the Linux kernel, the following vulnerability has been resolved: net: lan966x: restore RX state on reload failure lan966xfdmareload backs up rx-pagepool and rx-fdma before reallocating the RX resources for the new MTU. If the allocation fails, the restore path puts these fields back before...

PT-2026-123420

In the Bluetooth Classic Hands-Free Profile Audio Gateway role, hfp ag create in subsys/bluetooth/host/classic/hfp ag.c starts an SDP discovery toward the peer, which links the embedded ag-sdp param. node into the SDP client's pending request list in subsys/bluetooth/host/classic/sdp.c. If the...

SUSE CVE-2026-98906

In the Linux kernel, the following vulnerability has been resolved: net: lan966x: restore RX state on reload failure lan966xfdmareload backs up rx-pagepool and rx-fdma before reallocating the RX resources for the new MTU. If the allocation fails, the restore path puts these fields back before...

SUSE CVE-2026-98957

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: disable rx napi when removing device Unloading the mt7915e module with a MT7916 triggers multiples WARN in netifnapidellocked and in pagepooldisabledirectrecycling because the driver does not disable the napi...

SUSE CVE-2026-99045

In the Linux kernel, the following vulnerability has been resolved: ibmveth: hfree logical LAN on open-fail after register ibmvethopen registers the logical LAN, then allocates the RX buffer pools. A pool failure jumps to outfreebufferpools without hfreelogicallan, so PHYP still owns the...

DEBIAN-CVE-2026-99046

In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak on error descriptor When the error bit is set in the RX completion descriptor, the bufstate and its attached buffer should be freed. In the case of AFXDP ZC, the XSK buffer was not freed, leading to a lea...