480 matches found
EUVD-2026-97140
In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of the frequency index. This could lead to system instability or denial of service with local privileges...
metasploit-ldapnightmare
metasploit-ldapnightmare PoC de SafeBreaches para CVE-2024-49113 LdapNightmare Integrado en Metasploit Resumen Este módulo implementa CVE-2024-49113, una vulnerabilidad crítica en el cliente LDAP de Windows que puede causar inestabilidad en el sistema. El módulo se integra con Metasploit Framewor...
CVE-2026-98225
A flaw was found in the Linux kernel's memory management subsystem. A local attacker can trigger kernel warnings and potentially cause a Denial of Service DoS or system instability when kernel memory accounting is disabled. Under this configuration, memory shrinker identifiers are not properly...
kernel: udp: fix potential use-after-free in tunnel segmentation
A flaw was found in the Linux kernel's UDP User Datagram Protocol tunnel segmentation. This vulnerability arises when the system attempts to process network packets, specifically in the skbudptunnelsegment function. An attacker could potentially exploit a use-after-free condition, where the syste...
CVE-2026-98192
A flaw was found in the Linux kernel's wcn36xx Wi-Fi driver. This vulnerability can lead to a Denial of Service DoS or system instability due to a use-after-free condition. When deinitializing the transmission acknowledgement timer during device removal, the driver stops the timer without waiting...
kernel: nfsd: revoke copy-notify stateids before dropping their reference
A flaw was found in the Linux kernel's Network File System Daemon nfsd. This vulnerability arises from improper handling of "copy-notify stateids" during their revocation. When a stateid's reference is dropped without unlinking it, the memory can be freed while still in use by a reader, leading t...
kernel: igc: set tx buffer type for SMD frames
A flaw was found in the Linux kernel's igc network driver. The igcfpeinitsmdframe function, responsible for initializing transmit TX buffer fields for Stream-based Data SMD frames, does not correctly set the buffer type. This can result in stale XDP eXpress Data Path or XSK AFXDP socket types...
kernel: nfsd: revoke copy-notify stateids before dropping their reference
A flaw was found in the Linux kernel's Network File System Daemon nfsd. This vulnerability arises from improper handling of "copy-notify stateids" during their revocation. When a stateid's reference is dropped without unlinking it, the memory can be freed while still in use by a reader, leading t...
kernel: NFSD: Fix SECINFO_NO_NAME decode error cleanup
A flaw was found in the Linux kernel's Network File System Daemon NFSD. The nfsd4decodesecinfononame function does not properly initialize a pointer sinexp before processing an incoming data stream. If the data stream is malformed or truncated, the uninitialized pointer can retain stale data from...
kernel: igc: set tx buffer type for SMD frames
A flaw was found in the Linux kernel's igc network driver. The igcfpeinitsmdframe function, responsible for initializing transmit TX buffer fields for Stream-based Data SMD frames, does not correctly set the buffer type. This can result in stale XDP eXpress Data Path or XSK AFXDP socket types...
kernel: nfsd: fix UAF in async copy cancel and shutdown
A flaw was found in the Linux kernel's nfsd component. A race condition exists during asynchronous copy cancellation and shutdown operations, which can lead to a Use-After-Free UAF vulnerability. This allows an async copy object to be freed or used after being freed, potentially causing memory...
CVE-2026-98177
A flaw was found in the Linux kernel's AMD GPU driver amdkfd. A local user could trigger a Denial of Service DoS or system instability due to an integer underflow vulnerability during the calculation of the End of Pipe EOP ring buffer size. Under specific conditions, this improper calculation cou...
CVE-2026-98176
A flaw was found in the Linux kernel's AMD GPU driver amdkfd. An integer underflow vulnerability during the calculation of the End of Pipe EOP ring buffer size can lead to improper hardware queue configuration. A local user could potentially exploit this issue to cause system instability, resulti...
CVE-2026-80885
A flaw was found in the Linux kernel's Andrew File System AFS component. The rxrpc Out-of-Band OOB message handler did not properly cancel its processing. This could lead to the handler continuing to process messages even when the network namespace is no longer active, or mishandling security...
kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()
A flaw was found in the Linux kernel. A race condition exists in the xfrm policy handling, specifically within the xfrmpolicybyselctx function. This flaw allows for a use-after-free vulnerability, where memory is accessed after it has been released. This can lead to system instability or a denial...
kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable
A flaw was found in the Linux kernel's netfilter synproxy module. When handling TCP timestamp options, a stale pointer can be used after memory reallocation. This can result in memory corruption, where data is written to a freed memory area, or lead to packets being sent with an incorrect checksu...
kernel: ip6_gre: Use cached t->net in ip6erspan_changelink()
A flaw was found in the Linux kernel's ip6gre module. An unprivileged user could exploit this vulnerability by migrating a network device, causing the ip6erspanchangelink function to incorrectly handle network namespace references. This error leads to a use-after-free condition when the original...
kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable
A flaw was found in the Linux kernel's netfilter synproxy module. When handling TCP timestamp options, a stale pointer can be used after memory reallocation. This can result in memory corruption, where data is written to a freed memory area, or lead to packets being sent with an incorrect checksu...
kernel: ipc: limit next_id allocation to the valid ID range
A flaw was found in the Linux kernel. The ipcidralloc function, used in the checkpoint/restore path for SysV Inter-Process Communication IPC ID allocation, does not properly limit ID allocation to the valid range. This can result in the system attempting to dereference freed memory, leading to a...
kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()
A flaw was found in the Linux kernel. A race condition exists in the xfrm policy handling, specifically within the xfrmpolicybyselctx function. This flaw allows for a use-after-free vulnerability, where memory is accessed after it has been released. This can lead to system instability or a denial...