CVE-2026-98743

A flaw was found in the Linux kernel's rt1017 SDCA audio codec driver. The driver fails to initialize stream configuration data before passing it to the sound subsystem, leaving configuration fields populated with uninitialized memory. A local user could exploit this flaw during audio stream...

metasploit-ldapnightmare

metasploit-ldapnightmare SafeBreaches CVE-2024-49113 POCLdapNightmare Integrated into Metasploit Overview This module implements CVE-2024-49113, a critical vulnerability in the Windows LDAP client that can cause system instability. The module integrates with the Metasploit Framework, providing a...

CVE-2026-98714

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for AMD processors SVM. When virtual machine execution fails, the hypervisor prematurely updates control fields and marks control blocks as clean, assuming hardware operations were performed. A local attacker could...

CVE-2026-98691

A flaw was found in the Linux kernel's Thunderbolt subsystem. This vulnerability can lead to a Denial of Service DoS or system instability when a Thunderbolt device is disconnected or unbound. When a Thunderbolt domain is stopped, inactive DisplayPort DP tunnels are not properly torn down, allowi...

CVE-2026-98679

A flaw was found in the Linux kernel's KXCJK-1013 accelerometer driver. A local user could exploit this flaw by submitting duplicate event disable requests to the device configuration interface. Because the driver does not filter repeated disable requests, it improperly releases a runtime power...

CVE-2026-98708

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A local user could exploit this flaw to cause a Denial of Service DoS or system instability. During in-place channel context replacement, an old channel context can be freed prematurely while still referenced by its replacement...

kernel: Bluetooth: hci_sync: Fix advertising data UAFs

A flaw was found in the Linux kernel's Bluetooth subsystem. Specifically, the hcisync component, which manages Bluetooth advertising data, is susceptible to a Use-After-Free UAF vulnerability. This occurs when a pointer to advertising data becomes invalid but is still accessed, particularly durin...

CVE-2026-89855

A flaw was found in the Linux kernel's scsi: qla2xxx component. A local attacker could exploit a race condition in the flash version read handler. By concurrently triggering a sysfs reset operation and other flash operations, an attacker could corrupt flash register reads. This could lead to data...

CVE-2026-93213

A flaw was found in the Linux kernel. An out-of-bounds read vulnerability exists in the ofaliasscan function's stem parser. This issue occurs because the parser checks for a digit before verifying if it's within the valid memory bounds, potentially allowing it to read one byte before the intended...

CVE-2026-89808

A flaw was found in the drm/amdkfd component of the Linux kernel. During virtual memory VM migration, if a VM range is a 'hole' on the CPU side, an uninitialized variable is used. This can cause the system to drop all Video Random Access Memory VRAM, potentially leading to a denial of service or...

CVE-2026-93133

A flaw was found in the Linux kernel. In the riscvacpiaddprtdep function, the acpigethandle call can fail, leading to the linkhandle variable being uninitialized. This oversight could potentially lead to system instability or unexpected behavior...

CVE-2026-93132

A flaw was found in the Linux kernel's Advanced Configuration and Power Interface ACPI implementation for RISC-V architectures. Specifically, the riscvacpiaddprtdep function contains a loop that incorrectly handles error conditions. This can cause the loop to skip necessary entry pointer updates,...

CVE-2026-93181

A flaw was found in the Linux kernel's uncore performance monitoring unit. An incorrect ordering of internal function calls during CPU online and offline operations can prevent the uncore box from being properly initialized or de-initialized. This mismanagement of resources could lead to system...

CVE-2026-93169

A flaw was found in the Linux kernel's dmaengine: zynqmpdma component. A race condition exists during device removal, specifically in the zynqmpdmaremove function, where runtime power management PM is disabled after checking the device state and performing a manual suspend. This timing issue can...

CVE-2026-93165

A flaw was found in the Linux kernel's sensorhub component. This vulnerability occurs when a specialized piece of hardware, the Embedded Controller EC firmware, provides incorrect information about data size. This error causes the kernel to read beyond the intended memory area, which could lead t...

CVE-2026-93164

A flaw was found in the Linux kernel. Optimized uprobes, a mechanism for dynamic tracing, can improperly overwrite a protected memory region known as the redzone area. This occurs when a call instruction stores a return address on the stack without adequately adjusting the stack pointer,...

CVE-2026-93155

A flaw was found in the Linux kernel's cryptographic module, specifically within the keembay driver. When certain cryptographic algorithms fail to register, the system attempts to unregister previously registered algorithms using an incorrect count. This error in the unregistration process could...

CVE-2026-93152

A flaw was found in the Linux kernel's nvme-apple driver. The driver incorrectly handled memory synchronization when initializing and enabling a queue. This could lead to the queue's state not being properly updated before it is accessed by other parts of the system, potentially causing unexpecte...

CVE-2026-93142

A flaw was found in the Linux kernel's thermal management driver for Renesas R-Car systems. This vulnerability stems from incorrect error handling during the driver's initialization process. Specifically, a function was called before properly checking if a previous operation had failed, which cou...

CVE-2026-93138

A flaw was found in the Linux kernel. Specifically, a race condition exists within the Berkeley Packet Filter BPF subsystem when preparing vmlinux BPF Type Format BTF data. This issue occurs because the system can publish a pointer to the BTF data before its contents are fully visible, allowing...