CVE-2026-41651

Pack2TheRoot — CVE-2026-41651 Corsa TOCTOU nel gestore delle transazioni di PackageKit. Qualsiasi utente locale non privilegiato può installare pacchetti arbitrari come root senza autenticazione. Panoramica Campo| Valore ---|--- CVE| CVE-2026-41651 Componente| Demone PackageKit packagekitd Versio...

pack2theroot-lab

Pack2TheRoot Lab — CVE-2026-41651 Un laboratorio Dockerizzato in stile CTF per l'escalation locale dei privilegi, costruito attorno all'advisory Pack2TheRoot CVE-2026-41651, una vulnerabilità di 12 anni nel demone PackageKit divulgata dal Red Team di Deutsche Telekom il 22 aprile 2026. Il...

CVE-2026-41651-analysis

CVE-2026-41651 — Analisi Pack2TheRoot Escalation dei privilegi locali in PackageKit Condizione di gara TOCTOU CVSS v3.1: 8.8 ALTA | CWE-367 | Pubblicato: 2026-04-22 📌 Panoramica Questo repository raccoglie un rapporto di analisi personale e materiale di ricerca sulla vulnerabilità di escalation d...

The vulnerability in the `fs/btrfs/transaction.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the fs/btrfs/transaction.c component of the Linux operating system is related to incorrect handling of structure elements. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the btrfs/transaction.c component of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the btrfs/transaction.c component in the Linux operating system’s kernel is related to improper synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

DEBIAN-CVE-2026-10294

A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function gfiletest of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclose...

CVE-2026-10294

A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function gfiletest of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclose...

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service. Incorrect handling of the Delay and Unwritten buffer head states in the journalunmapbuffer function in fs/jbd2/transaction.c allows local attackers to crash systems that have an ext4 file system with a journal mounted...