CVE-2026-89517

A flaw was found in the Linux kernel's schedext component, which handles core scheduling. When multiple selections on the same core interleave due to a dropped lock, they can corrupt the scheduling state. This corruption can lead to a NULL dereference, tasks remaining active after being dequeued,...

CVE-2026-80986

A flaw was found in the Linux kernel's SMC-Rv2 network component. A remote attacker could exploit this vulnerability by sending a specially crafted message during an SMC-Rv2 link addition. This can lead to a slab-out-of-bounds write, potentially causing a system crash and resulting in a denial of...

CVE-2026-80983

A flaw was found in the Linux kernel's implementation of the Server Message Block SMB over Remote Direct Memory Access RDMA protocol, specifically within the net/smc component. An error path in the smcswitchconns function, triggered during link failover events, can lead to a socket reference coun...

CVE-2026-80967

A flaw was found in the ALSA pcxhr driver within the Linux kernel. The pcxhrprobe function requests a threaded interrupt before properly initializing a critical mutex mgr-lock. This oversight could allow an early interrupt to operate on an uninitialized mutex, potentially leading to system...

CVE-2026-89542

A flaw was found in the Linux kernel's SUNRPC Sun Remote Procedure Call implementation. This vulnerability, located in the gsskrb5unwrapv2 function, arises when the system processes specially crafted short tokens or tokens with an invalid length. An attacker could exploit this by providing such a...

CVE-2026-80943

A flaw was found in the Linux kernel's rtlwifi driver. This vulnerability occurs when the rtl92dutxfilldesc function uses a Quality of Service QoS Traffic Identifier TID value greater than 8 as an index into an array that only has 9 allocated entries. A remote attacker could potentially exploit...

CVE-2026-89505

A flaw was found in the Linux kernel's RDMA/uverbs component. Malformed input from a provider in the legacy write path can cause the uverbsgethandlerfn function to dereference an uninitialized pointer. This can lead to a system crash, resulting in a denial of service...

CVE-2026-89761

A flaw was found in the Linux kernel's AppArmor security module. An out-of-bounds write vulnerability exists when null terminating a label vector due to improper memory allocation. An unprivileged local attacker can exploit this by writing to specific system files, potentially leading to a denial...

CVE-2026-89477

A flaw was found in the Stream Control Transmission Protocol SCTP implementation within the Linux kernel. This vulnerability occurs when the kernel attempts to complete a stream reconfiguration request that has not been fully transmitted, leading to a null pointer dereference. An unprivileged loc...

CVE-2026-89541

A flaw was found in the Linux kernel. Specifically, an integer overflow vulnerability exists in the gssunwrapresppriv function within the SUNRPC component. This flaw occurs when validating the length of RPCSECGSS opaque data. A malicious krb5p Network File System NFS server can send a specially...

CVE-2026-89617

A flaw was found in the Linux kernel's NTFS3 filesystem driver. An attacker with local access could craft a malicious NTFS log file. During log replay, insufficient validation of the lcnsfollow field in a DIRPAGEENTRY could lead to an out-of-bounds write. This memory corruption could result in a...

CVE-2026-89530

A flaw was found in the Linux kernel's svcrdma component, which handles network communication using Remote Direct Memory Access RDMA. A remote attacker can send a specially crafted network reply that is larger than expected. This can cause the system to write data beyond the intended memory area,...

CVE-2026-89509

A flaw was found in the Linux kernel's RDMA/ionic driver. This vulnerability arises from the driver's incorrect handling of rdmacounter allocations, specifically by not embedding counter driver data as required. This oversight can lead to a NULL pointer dereference when the allocandbind function ...

modbus-scanner

Modbus Detection Scanner A multithreaded C scanner for detecting Modbus/TCP services using libmodbus. The scanner does not rely only on TCP port 502 being open. Instead, it establishes a Modbus/TCP connection and sends an application layer Modbus request. A valid Modbus response is used as the...

CVE-2026-90446

An application programming interface endpoint accepts a user-supplied value and interpolates it directly into the path of a backend request to the underlying search and analytics data store, without restricting its contents. This allows an authenticated attacker to substitute an arbitrary backend...

CVE-2026-90446

An application programming interface endpoint accepts a user-supplied value and interpolates it directly into the path of a backend request to the underlying search and analytics data store, without restricting its contents. This allows an authenticated attacker to substitute an arbitrary backend...

CVE-2026-89723

A flaw was found in the nilfs2 file system component of the Linux kernel. When a file is truncated, an intermediate node block is not properly deleted and remains in the B-tree node cache. This can lead to the log writer incorrectly processing the block, resulting in a slab-out-of-bounds memory...

CVE-2026-89605

A flaw was found in the ecryptfs component of the Linux kernel. When the ecryptfssendmiscdev function fails to send a message to the userspace daemon, the associated message context is not properly released. This oversight leaves the context on an allocated list, preventing its reuse. Repeated...

CVE-2026-89581

A flaw was found in the Linux kernel's handling of Berkeley Packet Filter BPF programs on x86 architecture. An issue with how per-CPU addresses are resolved into extended registers can lead to incorrect memory access. A local attacker could exploit this by running a specially crafted BPF program...

CVE-2026-89565

A flaw was found in the Linux kernel's IP over IP ipip tunnel driver. When operating in collectmd mode, the ipiptunnelrcv function fails to free a network packet buffer skb if the metadatadst allocation fails. This oversight leads to a memory leak. A local attacker could potentially exploit this...