metasploit-ldapnightmare

metasploit-ldapnightmare SafeBreaches CVE-2024-49113 POCLdapNightmare Integrated into Metasploit Overview This module implements CVE-2024-49113, a critical vulnerability in the Windows LDAP client that can cause system instability. The module integrates with the Metasploit Framework, providing a...

CVE-2026-89988

A flaw was found in the kprobes component of the Linux kernel. A local attacker could potentially exploit a use-after-free vulnerability when a module is unloaded concurrently with a call to withinkprobeblacklist. This could lead to dereferencing freed memory, potentially causing system instabili...

CVE-2026-98274

A flaw was found in the Linux kernel's networking subsystem. A local user could trigger a Denial of Service DoS or system instability by configuring a network socket to use both PSP encryption and a TCP Upper Layer Protocol ULP, such as TLS. Because these features conflict in how they track...

kernel: blk-cgroup: fix UAF in __blkcg_rstat_flush()

A flaw was found in the Linux kernel's block input/output control group blk-cgroup component. This vulnerability, a Use-After-Free UAF, occurs when multiple block control groups are released at the same time. A race condition allows one group to remove another's entries while it is still in use,...

kernel: blk-mq: pop cached request if it is usable

A flaw was found in the Linux kernel's blk-mq component. This use-after-free vulnerability occurs when a task attempts to submit a bio a data structure for I/O operations to blk-mq. If the task is interrupted and sleeps after checking for a cached request but before using it, the cached request c...

CVE-2026-98093

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture fslmicfil audio driver. A local user can cause a Denial of Service DoS or system instability by repeatedly configuring or freeing audio stream parameters. Because the driver enables and disables the master audio clock...

kernel: blk-mq: pop cached request if it is usable

A flaw was found in the Linux kernel's blk-mq component. This use-after-free vulnerability occurs when a task attempts to submit a bio a data structure for I/O operations to blk-mq. If the task is interrupted and sleeps after checking for a cached request but before using it, the cached request c...

CVE-2026-89801

A flaw was found in the Linux kernel's drm/nouveau/uvmm component. A local attacker could exploit a use-after-free vulnerability by triggering a premature region free during a failed OPUNMAPSPARSE operation. This occurs because certain failure paths do not properly clear a region pointer, leading...

CVE-2026-89916

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine for arm64 architectures. This vulnerability involves a race condition during Translation Lookaside Buffer TLB invalidation. Specifically, one virtual CPU vcpu could attempt to insert a TLB entry for a page that another vcpu h...

CVE-2026-99104

A flaw was found in the Linux kernel's extensible scheduler schedext subsystem. This vulnerability allows a local user to cause a denial of service DoS or system instability during power management operations. Due to improper tracking of bypass dispatch states across hierarchical schedulers durin...

CVE-2026-98956

A flaw was found in the Linux kernel's ADAU1372 audio codec driver. The driver improperly utilizes non-sleepable operations to toggle power-down General Purpose Input/Output GPIO pins that can sleep, such as those connected through external bus controllers. A local user triggering audio power-sta...

CVE-2026-99045

A flaw was found in the Linux kernel's IBM Virtual Ethernet ibmveth driver. This issue can lead to a denial of service DoS or system instability due to improper resource cleanup during device activation. When memory allocation fails after registering a logical network with the underlying...

CVE-2026-98992

A flaw was found in the Linux kernel. When performing a recursive bind mount on a lazily unmounted namespace or process file held open by a file descriptor, the kernel fails to verify that the mount tree is still active. A local user could exploit this vulnerability to duplicate and access...

CVE-2026-90028

A flaw was found in the Linux kernel's usb: typec: hd3ss3220 driver. This vulnerability occurs because the regulatorisenabled function reports the overall power regulator state rather than the state specific to a particular consumer. If another component enables the VBUS Voltage Bus first, the...

CVE-2026-98955

A flaw was found in the Linux kernel. An integer truncation issue in the network flow dissector component occurs when calculating transport header offsets for network packets exceeding 64 kilobytes. An attacker could exploit this flaw by transmitting specially sized network frames, causing the...

kernel: net/handshake: hand off the pinned file reference to accept_doit

A flaw was found in the Linux kernel's net/handshake component. A race condition exists where a network handshake request can be removed and its associated file reference released concurrently while the accept-side code attempts to access it. This can lead to the system attempting to read from...

kernel: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine s390 PCI component. This vulnerability arises from improper handling of adapter interrupt forwarding, where enabling it multiple times for a zPCI device without prior unregistration can lead to resource overwriting and leakag...

kernel: blk-cgroup: fix UAF in __blkcg_rstat_flush()

A flaw was found in the Linux kernel's block input/output control group blk-cgroup component. This vulnerability, a Use-After-Free UAF, occurs when multiple block control groups are released at the same time. A race condition allows one group to remove another's entries while it is still in use,...

kernel: blk-mq: pop cached request if it is usable

A flaw was found in the Linux kernel's blk-mq component. This use-after-free vulnerability occurs when a task attempts to submit a bio a data structure for I/O operations to blk-mq. If the task is interrupted and sleeps after checking for a cached request but before using it, the cached request c...

CVE-2026-99090

A flaw was found in the Linux kernel's AMD GPU driver. A local user could cause a Denial of Service DoS or system instability by triggering GPU recovery operations. Due to a race condition, the driver allows vertical blanking vblank counter reads from display hardware without proper lock...