CVE-2026-82235

filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing attackers to trigger blocking open syscalls. Authenticated users or anonymous visitors with public share links can repeatedly request archives containing named pipes to pin server...

PT-2026-83087

filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing attackers to trigger blocking open syscalls. Authenticated users or anonymous visitors with public share links can repeatedly request archives containing named pipes to pin server...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098672)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098672 advisory. In the Linux kernel before 6.6.7, an untrusted VMM can trigger int80 syscall handling at any given point. This is related to arch/x86/coco/tdx/tdx.c and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-099004)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099004 advisory. In the Linux kernel, the following vulnerability has been resolved: tracepoint: balance regfunc on funcadd failure in tracepointaddfunc When a tracepoint goes throug...

The vulnerability of the SYSCALL_DEFINE4() function in the kernel/futex/syscalls.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SYSCALLDEFINE4 function in the kernel/futex/syscalls.c module of the Linux operating system is related to errors during the update of the reference counter. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility...

The vulnerability of the __do_syscall() function in the arch/s390/kernel/syscall.c module of the S390 platform support module for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dosyscall function in the arch/s390/kernel/syscall.c module of the S390 platform support for the Linux operating system is related to insufficient checking of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-9728

The userspace syscall verifier zvrfymboxsend in drivers/mbox/mboxhandlers.c validated the nested msg-data/msg-size fields by reading them directly out of live userspace memory, and then forwarded the original, still-mutable userspace struct mboxmsg pointer to zimplmboxsend and the underlying...

CVE-2026-9728 TOCTOU race in mbox_send syscall verifier allows userspace to leak kernel memory

The userspace syscall verifier zvrfymboxsend in drivers/mbox/mboxhandlers.c validated the nested msg-data/msg-size fields by reading them directly out of live userspace memory, and then forwarded the original, still-mutable userspace struct mboxmsg pointer to zimplmboxsend and the underlying...

CVE-2026-9728

CVE-2026-9728 is a time-of-check/time-of-use (TOCTOU) race condition in the Zephyr RTOS userspace mailbox subsystem. The syscall verifier z_vrfy_mbox_send() in drivers/mbox/mbox_handlers.c validates msg->data/msg->size by reading them directly from live userspace memory, then forwards the o...

CVE-2026-9728 TOCTOU race in mbox_send syscall verifier allows userspace to leak kernel memory

The userspace syscall verifier zvrfymboxsend in drivers/mbox/mboxhandlers.c validated the nested msg-data/msg-size fields by reading them directly out of live userspace memory, and then forwarded the original, still-mutable userspace struct mboxmsg pointer to zimplmboxsend and the underlying...

stealth_call

Cos'è? Libreria header-only per Windows x64 che consente di invocare qualsiasi syscall NT senza toccare gli import di ntdll, senza lasciare stringhe nel binario e senza i soliti campanelli d'allarme che fanno impazzire gli EDR. Niente CRT. Niente STL. Niente IAT. L'intero progetto compila a circa...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102075)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102075 advisory. In the Linux kernel, the following vulnerability has been resolved: tracepoint: balance regfunc on funcadd failure in tracepointaddfunc When a tracepoint goes throug...

CVE-2026-74338

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. A local attacker could bypass security checks by directly using the bpf2 system call to load a sleepable BPFLSMCGROUP program. This could lead to a kernel crash, resulting in a Denial of Service DoS on the affected syste...

CVE-2026-74362

A flaw was found in the Linux kernel's ext2 filesystem. When performing write operations on files opened with OSYNC or ODSYNC flags, the system call write2 could incorrectly report success to a local user even if the data synchronization to disk failed. This could lead to data integrity issues, a...

CVE-2026-49426

The FreeBSD kernel is vulnerable to a flaw in the audit(4) facility when handling system calls executed via ptrace(2) with the PT_SC_REMOTE operation. The kernel incorrectly passes the return value of an internal setup function to AUDIT_SYSCALL_EXIT() instead of the actual system call result. Con...

CVE-2026-12631

The Zephyr kernel validates the kthreadjoin and kthreadabort system calls declared syscall in include/zephyr/kernel.h through threadobjvalidate in kernel/thread.c. Its default switch branch is the access-denied path, taken when kobjectvalidate returns -EPERM the calling user thread was never...

CVE-2026-12631

CVE-2026-12631 is a broken access-control flaw in the Zephyr RTOS kernel affecting the k_thread_join() and k_thread_abort() syscall validation path in kernel/thread.c. The root cause is a logic inversion: K_SYSCALL_VERIFY_MSG treats a non-zero (error) return as success, so the access-denied branc...

CVE-2026-12631 Broken access-control denial in k_thread_join/k_thread_abort syscall validation in Zephyr kernel

The Zephyr kernel validates the kthreadjoin and kthreadabort system calls declared syscall in include/zephyr/kernel.h through threadobjvalidate in kernel/thread.c. Its default switch branch is the access-denied path, taken when kobjectvalidate returns -EPERM the calling user thread was never...

EUVD-2026-61491

The Zephyr kernel validates the kthreadjoin and kthreadabort system calls declared syscall in include/zephyr/kernel.h through threadobjvalidate in kernel/thread.c. Its default switch branch is the access-denied path, taken when kobjectvalidate returns -EPERM the calling user thread was never...

PT-2026-77335

Name of the Vulnerable Software and Affected Versions Zephyr kernel affected versions not specified Description An issue exists in the validation of the k thread join and k thread abort system calls via the thread obj validate function in kernel/thread.c. When k object validate returns an error...