CVE-2026-89732

A flaw was found in the Linux kernel's USB FunctionFS ffs module. A local attacker could exploit a deadlock vulnerability in the ffsep0read function. This occurs when a userspace daemon polls ep0 and the USB gadget is simultaneously torn down, causing the kernel to enter an unresponsive state. Th...

CVE-2026-89721

A flaw was found in the Linux kernel's phy: rockchip-samsung-dcphy component. A local attacker with access to the regmap debugfs interface could trigger an out-of-bounds read by attempting to dump registers. This occurs because the maxregister value is incorrectly set, causing the system to read...

CVE-2026-89576

A flaw was found in the Linux kernel's device-mapper era dm-era component. When a snapshot operation fails, a block of metadata is allocated but not properly freed. This leads to a permanent leak of system resources with each failed attempt. Over time, this resource exhaustion can result in a...

CVE-2026-89568

A flaw was found in the Linux kernel. The khopreservedmemoryreserve function, responsible for reserving memory, incorrectly calculates the size of these reservations. This issue arises because it uses a 32-bit integer for bit shifting, which limits the maximum reservation size to 2 Gigabytes GiB...

CVE-2026-89636

A flaw was found in the Linux kernel's Server Message Block SMB client. When the freetgts function frees data structures, a pointer ce-tgthint is not properly reset, leaving it pointing to a memory location that has already been deallocated. If this pointer is subsequently used, it can lead to a...

CVE-2026-89479

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A remote attacker could send a specially crafted series of SCTP packets, leading to a use-after-free vulnerability. This occurs when the kernel attempts to access memory that has already been...

CVE-2026-81009

A flaw was found in the Linux kernel. The iouring/query interface, specifically within the iohandlequeryentry function, does not properly cap the user-provided size when zeroing memory. A local attacker can exploit this by sending a specially crafted query that requests an excessively large amoun...

CVE-2023-22622

DoS WP-Cron - CVE-2023-22622 漏洞利用PoC 概述 本仓库包含一个利用 WordPress 中 CVE-2023-22622 漏洞的脚本，通过 WP-Cron 造成拒绝服务（DoS）。此脚本可用于向易受攻击的 WordPress 站点发送大量请求，可能导致服务器过载。 漏洞利用详情 漏洞利用标题： DoS WP-Cron - CVE-2023-22622 日期： 2024年7月29日 漏洞利用作者： Michael Fry 供应商主页： WordPress 软件链接： 下载 WordPress 版本： 至（包括）6.6.1 测试环境： Kali Linux...

CVE-2026-89597

A flaw was found in the uvesafb component of the Linux kernel. During the initialization process, if the platform driver fails to register, a connector callback is not properly unregistered. This oversight can lead to a resource leak, which may result in system instability or a denial of service...

CVE-2026-89717

A flaw was found in the zram component of the Linux kernel. When zramdestroycomps is called, it incorrectly resets the primary compressor to a NULL state. This invalid state can lead to a NULL pointer dereference when compalgorithmshow attempts to access the compressor, potentially causing system...

CVE-2026-89571

A flaw was found in the Linux kernel's CXL Compute Express Link features. A local attacker could exploit an out-of-bounds read vulnerability in the fwctlcmdrpc and cxlctlsetfeature functions. This occurs when the system attempts to copy data with a small input buffer length but processes a larger...

CVE-2026-80931

A flaw was found in the Linux kernel's w1: ds28e17 1-Wire to I2C bridge driver. A malicious I2C slave device can provide an oversized length during an I2C block read operation. This causes the driver to read beyond the allocated buffer, leading to an out-of-bounds read of up to 222 bytes. This...

CVE-2026-89536

A flaw was found in the Linux kernel's SUNRPC Sun Remote Procedure Call client TLS Transport Layer Security handshake process. A race condition exists where a reference to the lower transport can be prematurely released during handshake cancellation. This can lead to memory corruption, potentiall...

CVE-2026-89606

A flaw was found in ecryptfs, a component of the Linux kernel. This vulnerability allows a remote attacker to send a specially crafted tag 70 packet with a body smaller than expected. This can lead to an integer underflow during size calculation, potentially causing a denial of service DoS or...

CVE-2026-89520

A flaw was found in the Linux kernel's core scheduling component. A race condition can occur when core scheduling flips complete during task selection, leading to incorrect lock handling. This can result in a resource leak and system instability, potentially causing a denial of service...

CVE-2026-89454

A flaw was found in the Linux kernel's PCI PLDA driver. This vulnerability occurs in the pldainitinterrupts function, where Interrupt Request IRQ domains are not properly deinitialized if certain initialization steps fail. A local attacker could potentially exploit this resource leak, leading to...

CVE-2026-89582

A flaw was found in the bnx2x component of the Linux kernel. This flaw occurs due to a double free vulnerability within the bnx2xinitfirmware function's error handling path. Memory pointers are freed without being set to NULL, allowing the bnx2xreleasefirmware cleanup function to attempt freeing...

CVE-2026-89651

A flaw was found in the Linux kernel's Ceph client. An out-of-bounds read vulnerability exists in the handlesession function when decoding MDSCapAuth records. A malicious or compromised Metadata Server MDS can trigger this during session setup without client-side user interaction. This can force...

CVE-2026-89726

A flaw was found in the Linux kernel's ucs2strnlen function. This vulnerability occurs because the function checks the current character before verifying if the maximum allowed length has been reached. If the input string is not properly terminated within the specified bounds, an attacker could...

CVE-2026-89575

A flaw was found in the Linux kernel's device mapper dm-raid1 component. This vulnerability occurs in the buildconstructorstring function, where insufficient space is reserved for a NUL-terminator when formatting a string with sprintf. This oversight can lead to a buffer overflow, potentially...