CVE-2024-6387-poc-1

CVE-2024-6387 regreSSHion en OpenSSH Descripción CVE-2024-6387, apodado "regreSSHion", es una vulnerabilidad crítica en OpenSSH que permite a atacantes remotos no autenticados ejecutar código con privilegios de root en sistemas Linux vulnerables. Esta vulnerabilidad surge de una condición de...

CVE-2024-6387

Script de Mitigación de OpenSSH CVE-2024-6387 Este repositorio contiene un script de Python diseñado para ayudar a los administradores de red a escanear y asegurar las configuraciones SSH contra la vulnerabilidad CVE-2024-6387 encontrada en el mecanismo de manejo de señales de OpenSSH. Esta...

DEBIAN-CVE-2026-98256

In the Linux kernel, the following vulnerability has been resolved: signal: Prevent exec race Hyunwoo debugged the following KASAN UAF splat: BUG: KASAN: slab-use-after-free in sendsignallocked+0xb27/0xba0 Write of size 8 at addr ffff888007ed80c8 by task poc/79 ... Call Trace:...

CVE-2026-98256

In the Linux kernel, the following vulnerability has been resolved: signal: Prevent exec race Hyunwoo debugged the following KASAN UAF splat: BUG: KASAN: slab-use-after-free in sendsignallocked+0xb27/0xba0 Write of size 8 at addr ffff888007ed80c8 by task poc/79 ... Call Trace:...

CVE-2026-98256 signal: Prevent exec() race

In the Linux kernel, the following vulnerability has been resolved: signal: Prevent exec race Hyunwoo debugged the following KASAN UAF splat: BUG: KASAN: slab-use-after-free in sendsignallocked+0xb27/0xba0 Write of size 8 at addr ffff888007ed80c8 by task poc/79 ... Call Trace:...

EUVD-2026-93184

In the Linux kernel, the following vulnerability has been resolved: signal: Prevent exec race Hyunwoo debugged the following KASAN UAF splat: BUG: KASAN: slab-use-after-free in sendsignallocked+0xb27/0xba0 Write of size 8 at addr ffff888007ed80c8 by task poc/79 ... Call Trace:...

PT-2026-106585

In the Linux kernel, the following vulnerability has been resolved: signal: Prevent exec race Hyunwoo debugged the following KASAN UAF splat: BUG: KASAN: slab-use-after-free in send signal locked+0xb27/0xba0 Write of size 8 at addr ffff888007ed80c8 by task poc/79 ... Call Trace: send signal...

CVE-2024-6387-Race-Condition-in-Signal-Handling-for-OpenSSH

CVE-2024-6387: Condición de carrera en el manejo de señales para OpenSSH Descripción general CVE-2024-6387 es una vulnerabilidad crítica descubierta en el servidor de OpenSSH sshd que permite a un atacante potencialmente lograr una ejecución remota de código RCE no autenticada como root. La...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Signal: Fix for restoring SVE context When SME is supported, restoring the SVE signal context can fail in several ways. This can result in the task being placed in an invalid state, where the kernel might read from...

Rocky Linux 9 [CIQ] Security Update: openssh / openssh-askpass / openssh-askpass-debuginfo / etc (crlsa-2024_4457)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20244457 advisory. openssh: Possible remote code execution due to a race condition in signal handling affecting Rocky Linux 9 CVE-2024-6409 Tenable has extracted the preceding...

ROS-20260929-73-0036

The vulnerability of the dwc3removerequests function in Linux operating system kernels is related to the situation of signal handling. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

AZL-99413 CVE-2026-80834 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce - Remove cryptorng interface Since the cryptorng interface for hardware PRNGs is unused and is redundant with hwrng and the actual Linux RNG, it's being phased out. Most drivers for it were already removed. Go...

CVE-2026-80834 crypto: sun8i-ce - Remove crypto_rng interface

In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce - Remove cryptorng interface Since the cryptorng interface for hardware PRNGs is unused and is redundant with hwrng and the actual Linux RNG, it's being phased out. Most drivers for it were already removed. Go...

Fedora 44 : bubblewrap (2026-3d9bd126ce)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3d9bd126ce advisory. Update to 0.12.0 Fixes GHSA-pxhw-h44j-8pfx Reset disposition of SIGCHLD, restoring normal subprocess management if bwrap1 was run from a process that was...

CVE-2026-80560

A flaw was found in the Linux kernel, specifically within the openrisc architecture's signal handling. An unprivileged local attacker can exploit a vulnerability in the restoresigcontext function by crafting a malicious signal frame. This allows the attacker to disable the Data Memory Management...

EUVD-2026-66475

In the Linux kernel, the following vulnerability has been resolved: openrisc: signal: do not restore privileged SR bits on sigreturn restoresigcontext copies the whole supervision register SR from the signal frame and only clears SPRSRSM before the value is reloaded into the hardware SR through E...

UBUNTU-CVE-2026-80560

In the Linux kernel, the following vulnerability has been resolved: openrisc: signal: do not restore privileged SR bits on sigreturn restoresigcontext copies the whole supervision register SR from the signal frame and only clears SPRSRSM before the value is reloaded into the hardware SR through E...

Linux Distros Unpatched Vulnerability : CVE-2026-80560

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openrisc: signal: do not restore privileged SR bits on sigreturn restoresigcontext copies the whole supervision register SR from the signal frame and only clea...

The vulnerability of the drivers/net/macvlan.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability in the drivers/net/macvlan.c component of the Linux operating system is related to situations where there is a race condition in the signal processing mechanism. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100573)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100573 advisory. In the Linux kernel, the following vulnerability has been resolved: signal: clear JOBCTLPENDINGMASK for caller in zapotherthreads When a multi-threaded process...