CVE-2026-80929

A flaw was found in the Linux kernel. A non-root user can exploit a vulnerability in the sysctl mechanism, specifically related to the cadpid entry. By unsharing process ID PID and user namespaces, a local attacker can modify this global system control from a child namespace. This allows a user...

CVE-2026-80929

CVE-2026-80929 affects the Linux kernel sysctl subsystem. The cad_pid entry was incorrectly placed in pid_table[], where pid_table_root_permissions() allowed a non-root user to unshare pid/user namespaces and modify it from a child namespace—despite cad_pid being global and kill_cad_pid() only op...

EUVD-2026-76252

In the Linux kernel, the following vulnerability has been resolved: sysctl: move the "cadpid" entry from pidtable to kernreboottable cadpid is global, and killcadpid is only used in the root namespace. However, due to pidtablerootpermissions, a non-root user can unshare pid/user namespaces and...

CVE-2026-80929 sysctl: move the "cad_pid" entry from pid_table[] to kern_reboot_table[]

In the Linux kernel, the following vulnerability has been resolved: sysctl: move the "cadpid" entry from pidtable to kernreboottable cadpid is global, and killcadpid is only used in the root namespace. However, due to pidtablerootpermissions, a non-root user can unshare pid/user namespaces and...

PT-2026-90059

In the Linux kernel, the following vulnerability has been resolved: sysctl: move the "cad pid" entry from pid table to kern reboot table cad pid is global, and kill cad pid is only used in the root namespace. However, due to pid table root permissions, a non-root user can unshare pid/user...

webhook-cve-2022-0811

webhook-cve-2022-0811 これは、悪意のあるsysctl値が設定されている場合にPodの作成をブロックする非常にシンプルなwebhookです。 ビルド root@kitploit: go test CGOENABLED=0 GOOS=linux GOARCH=amd64 GO111MODULE=on go build Minikubeでイメージをビルドしてデプロイ minikubeを起動: root@kitploit: minikube start minikube addons enable registry ビルド: root@kitploit: podman...

POC-2020-8558

개요 CVE-2020-8558은 kube-proxy가 예상치 못하게 로컬호스트 바인딩된 호스트 서비스를 네트워크상의 다른 노드에서 접근 가능하게 만들기 때문에 공개된 Kubernetes 취약점입니다. '예상치 못하게'라는 표현을 강조하는 이유는 이 취약점이 구현 결함버그이 아닌 설계 결함누락에 기인하기 때문입니다. 코드는 말 그대로 의도한 대로 작동하지만, 우리 모두 그 결정의 보안적 함의를 인식하지 못했습니다. 호스트 프로세스가 127.0.0.1로컬호스트 주소를 통해 NodePort 서비스에 접근할 수 있도록 하기 위해...

kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()

A flaw was found in the Linux kernel's IPv4 networking component. The ipv4sysctlexitnet function prematurely frees the net-ipv4.sysctllocalreservedports memory. This can lead to a use-after-free vulnerability, where other threads might attempt to access deallocated memory. Such an issue can resul...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()

A flaw was found in the Linux kernel's IPv4 networking component. The ipv4sysctlexitnet function prematurely frees the net-ipv4.sysctllocalreservedports memory. This can lead to a use-after-free vulnerability, where other threads might attempt to access deallocated memory. Such an issue can resul...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()

A flaw was found in the Linux kernel's IPv4 networking component. The ipv4sysctlexitnet function prematurely frees the net-ipv4.sysctllocalreservedports memory. This can lead to a use-after-free vulnerability, where other threads might attempt to access deallocated memory. Such an issue can resul...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 9 : kernel (RHSA-2026:62508)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62508 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv4: free...

RHEL 9 : kernel-rt (RHSA-2026:62522)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62522 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

RHEL 9 : kernel (RHSA-2026:62346)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62346 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv4: free...

kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()

A flaw was found in the Linux kernel's IPv4 networking component. The ipv4sysctlexitnet function prematurely frees the net-ipv4.sysctllocalreservedports memory. This can lead to a use-after-free vulnerability, where other threads might attempt to access deallocated memory. Such an issue can resul...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()

A flaw was found in the Linux kernel's IPv4 networking component. The ipv4sysctlexitnet function prematurely frees the net-ipv4.sysctllocalreservedports memory. This can lead to a use-after-free vulnerability, where other threads might attempt to access deallocated memory. Such an issue can resul...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...