CVE-2026-89809

A flaw was found in the drm/amdkfd component of the Linux kernel. A local user can trigger a system crash by reading the /sys/kernel/debug/kfd/mqds file while a process holds an active Kernel Fusion Driver KFD queue. This issue arises from a NULL pointer dereference, where a critical variable is...

PT-2026-94433

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the rvu dbg nix tm tree display function. This occurs when the function accesses pfvf-sq ctx without verifying if the SQ context has been allocated...

PT-2026-94483

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free crash occurs when attempting to read the /sys/kernel/debug/ref tracker/ directory. This issue happens within the alloc netdev mqs function if either alloc percpu or dev...

PT-2026-93450

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs when reading the /sys/kernel/debug/kfd/mqds endpoint while a process holds an active KFD queue. This happens because the for loop calling the debugfs sh...

PT-2025-42249

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.17.0-rc6 and earlier Description An issue exists in the Linux kernel’s tracing/osnoise component related to parsing integer limits. Specifically, the parse integer limit function may experience a slab-out-of-bounds read...

PT-2025-3610

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A bug in the Linux kernel triggers a "sleeping function called from invalid context" warning when /sys/kernel/debug/kmemleak is printed under specific conditions, including when CONFIG PREEMPT...

CVE-2024-40950

In the Linux kernel, the following vulnerability has been resolved: mm: hugememory: fix misused mappinglargefoliosupport for anon folios When I did a large folios split test, a WARNING " 5059.122759 T166 Cannot split file folio to non-0 order" was triggered. But the test cases are only for anonmo...

PT-2024-21555

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to missing clocks in the axg clk regmaps, which causes a kernel panic when attempting to read the /sys/kernel/debug/clk/clk summary file. The error occurs due to a...

CVE-2020-10774: Buffer Access with Incorrect Length Value

A memory disclosure flaw was found in the Linux kernel's versions before 4.18.0-193.el8 in the sysctl subsystem when reading the /proc/sys/kernel/rhfeatures file. This flaw allows a local user to read uninitialized values from the kernel memory. The highest threat from this vulnerability is to...

Uninitialized Memory Disclosure

Linux kernel is vulnerable to uninitialized memory disclosure. Possibility of limited and random memory access when reading the /proc/sys/kernel/rhfeatures file...

PT-2021-9175

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.18.0-193.el8 Description A memory disclosure flaw was found in the Linux kernel's sysctl subsystem when reading the /proc/sys/kernel/rh features file. This flaw allows a local user to read uninitialized values...

PT-2017-17402

Name of the Vulnerable Software and Affected Versions android kernel huawei msm8916 versions through 2017-06-16 Description The issue allows attackers to cause a denial of service, resulting in a NULL pointer dereference and device crash, via a crafted write request to the...

SMB Exploited: WannaCry Use of EternalBlue

Server Message Block SMB is the transport protocol used by Windows machines for a wide variety of purposes such as file sharing, printer sharing, and access to remote Windows services. SMB operates over TCP ports 139 and 445. In April 2017, Shadow Brokers released an SMB vulnerability named...

Linux/x86 - Disable ASLR Shellcode (80 bytes)

Linux/x86 - Disable ASLR Shellcode 80 bytes. Shellcode exploit for Linx86 platform / Linux/x86 setuid-disable-aslr.c by @abatchy17 - abatchy.com Shellcode size: 80 bytes SLAE-885 section .text global start start: ; ; setruid0,0 ; xor ecx,ecx mov ebx,ecx push 0x46 pop eax int 0x80 ; ;...

CVE-2016-9754

CVE-2016-9754 affects the Linux kernel’s ring_buffer_resize in the profiling subsystem, where integer calculations in ring_buffer.c before 4.6.1 allow a local user to gain privileges by writing to /sys/kernel/debug/tracing/buffer_size_kb. The issue is fixed in kernel 4.6.1 and later. Affected pro...

Gentoo Security Advisory GLSA 200907-08 (rt2400 rt2500 rt2570 rt61 ralink-rt61)

The remote host is missing updates announced in advisory GLSA 200907-08. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 200402-06 (Kernel)

The remote host is missing updates announced in advisory GLSA 200402-06. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200402-06 (Kernel)

The remote host is missing updates announced in advisory GLSA 200402-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

linux/x86 setuid(0) . setgid(0) . aslr_off 79 bytes

No description provided by source. / Linux/x86 Fedora 8 setuid0 + setgid0 + execve"echo 0 /proc/sys/kernel/randomizevaspace" by LiquidWorm 2008 c www.zeroscience.org liquidworm at gmail.com 79 bytes. / char sc = "\x6a\x17" // push $0x17 "\x58" // pop %eax "\x31\xdb" // xor %ebx, %ebx "\xcd\x80" /...