CVE-2026-89533

A flaw was found in the svcrdma component of the Linux kernel. Incorrect offset arithmetic in the svcrdmareadchunkrange function can lead to a u32 underflow. This underflow can cause the system to attempt to allocate a large amount of memory, potentially resulting in a Denial of Service DoS due t...

CVE-2026-89476

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A remote attacker could exploit this by sending specially crafted duplicate RECONF responses. This action can cause an underflow in the stream-outcnt counter, potentially leading to unexpected system...

CVE-2024-4323-dos_poc

doc poc from tenable...

CVE-2022-44311

Description for CVE-2022-44311 html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elmclosetreenodet nodo at procesador.c. This vulnerability allows attackers to access sensitive files or cause a Denial of Service DoS via a crafted html file. Reproduction T...

[SECURITY] [DSA 6494-1] kamailio security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6494-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 11, 2026 https://www.debian.org/security/faq -...

CVE-2026-89643

A flaw was found in the Linux kernel's audit subsystem. When fsnotify rules are automatically removed, the system incorrectly manages memory references, leading to a situation where freed memory can be accessed again. This memory corruption vulnerability could allow a local attacker to cause a...

CVE-2026-89626

A flaw was found in the Linux kernel's Human Interface Device HID sensor custom driver. When creating sysfs groups for custom sensor fields, the hidsensorcustomaddattributes function fails to properly clean up previously created groups if an error occurs. This improper resource management could...

CVE-2026-89593

A flaw was found in the Linux kernel's huge page hugetlb subsystem. This vulnerability occurs when a huge page of memory is shared between a parent and a child process. If the parent process unmaps the huge page before the child, the system can incorrectly reduce the count of reserved huge pages...

CVE-2026-89555

A flaw was found in the Linux kernel's Multiprotocol Label Switching MPLS subsystem. When processing specially crafted Geneve packets through an MPLS multipath setup, a use-after-free vulnerability occurs. This issue arises because a cached header pointer hdr is not reloaded after pskbmaypull...

CVE-2026-89529

A flaw was found in the Linux kernel's svcrdma component, which handles Remote Procedure Call over Remote Direct Memory Access RPC/RDMA Read operations. This vulnerability occurs because the Read list decoder does not properly validate the lengths of incoming data segments. An attacker could send...

CVE-2026-89518

A flaw was found in the Linux kernel's schedext component. Under core scheduling, incorrect assumptions in dispatch kfuncs regarding thisrq can lead to a deadlock. This occurs when an rq lock is acquired on a CPU different from the dispatched rq's, potentially causing the system to become...

CVE-2026-89503

A flaw was found in the Linux kernel's ring-buffer component. A race condition exists in the ringbufferallocreadpage function when it interacts with ringbuffersubbuforderset. This can lead to an incorrect memory allocation where the buffer page's order bpage-order does not match the actual...

CVE-2026-89534

A flaw was found in the Linux kernel's svcrdma module. This vulnerability occurs when the system attempts to handle an RDMA Remote Direct Memory Access address change, and a critical memory allocation fails. This can lead to a 'use-after-free' error, where the system tries to access memory that h...

CVE-2026-89510

A flaw was found in the Linux kernel's RDMA/cxgb4 component. This vulnerability occurs when the c4iwremove function frees a device while its registration work regwork is still pending or actively running. This timing issue can lead to the c4iwregisterdevice function attempting to access memory th...

CVE-2026-89494

A flaw was found in ocfs2, a component of the Linux kernel. A remote attacker, by sending a specially crafted Distributed Lock Manager DLM migration message, could exploit a lack of validation in the dlmmiglockreshandler. This flaw allows for an out-of-bounds write to the heap, potentially leadin...

CVE-2026-80788

A flaw was found in the Linux kernel's nvmet-tcp component. A remote attacker can send a specially crafted command with an oversized Scatter-Gather List SGL allocation. This can lead to an excessive memory allocation, triggering a kernel warning. On systems configured to panic on warnings, this...

CVE-2026-55200

Security Report: CVE-2026-55200 📝 General Description CVE-2026-55200 is a critical heap-based buffer overflow vulnerability dynamic memory corruption affecting the libssh2 library in versions up to 1.11.1. It allows a malicious SSH server to compromise vulnerable clients that connect to it. ⚡...

PoC-CVE-2025-69420

CVE-2025-69420 — OpenSSL TimeStamp Response type confusion PoC Crash-only laboratory reproducer for CVE-2025-69420 in OpenSSL. The PoC loads a valid RFC 3161 TimeStamp Response, changes the signed ESS attribute from VASN1SEQUENCE to VASN1NULL in memory, and calls TSRESPverifyresponse. On an...

CVE-2026-89727

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: GICv2: Don't WARN on out-of-range GICVDIR INTID vgicv2deactivate passes the INTID a guest wrote to GICVDIR straight to vgicgetvcpuirq, and treats a failed lookup as a "can't happen" condition with WARNONONCE. The gues...

UBUNTU-CVE-2026-89727

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: GICv2: Don't WARN on out-of-range GICVDIR INTID vgicv2deactivate passes the INTID a guest wrote to GICVDIR straight to vgicgetvcpuirq, and treats a failed lookup as a "can't happen" condition with WARNONONCE. The gues...