ghostlock

GhostLock — Linux kernel rtmutex/futex stack-UAF tracking site Source for the GhostLock patch-status tracker: a single-page site recording which distributions have shipped a fix for the rtmutex/futex stack use-after-free in the Linux kernel. Tracking concluded 2026-08-06 : every tracked kernel...

CyberMeowfia-ace3

Sitio web: nebusec.ai · Twitter @nebusecurity · Lista de bugs 885+ IonStack seguimiento, sigue https://github.com/NebuSec/CyberMeowfia/issues/44 Últimas investigaciones IonStack parte II : GhostLock, un stack-UAF que ha existido en TODAS las distribuciones de Linux durante 15 años Linux Kernel 📖...

hazel-cve-2026-43499

PS7716.5665N Hazel Fire TV temporary root Temporary root exploit for the Toshiba/Amazon hazel Fire TV platform, based on CVE-2026-43499. The current exploit is tested on: | ---|--- Device| Toshiba Fire TV hazel Fire OS build| PS7716.5665N Kernel| Linux 4.9.113 Product Model| AFTHA004 C350 !WARNIN...

PS5-IPV6-Kernel-Exploit

PS5 3.xx / 4.xx Kernel Exploit Summary This repo contains an experimental WebKit ROP implementation of a PS5 kernel exploit based on TheFlow's IPV6 Use-After-Free UAF , which was reported on HackerOne. The exploit strategy is for the most part based on TheFlow's BSD/PS4 PoC with some changes to...

ghostlock-oppo-watch3pro

GhostLock CVE-2026-43499 — OPPO Watch 3 Pro Complete Research Case Complete exploitation research on CVE-2026-43499 GhostLock, rtmutex/futex-PI stack UAF on the OPPO Watch 3 Pro OWW211, ColorOS Watch China version, Android 11, ARM32. Final conclusion: the chain-walk write mechanism crashes on...

Exploit for Use After Free in Linux Linux_Kernel

PS7716.5665N Hazel Fire TV temporary root Temporary root expl...

Exploit for Use After Free in Linux Linux_Kernel

root-s24-e1s Per-boot local root on Samsung Galaxy S24 SM-S...

AZL-98084 CVE-2026-80692 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: hold conn in hciconnectacl/lesync callbacks There is theoretical UAF if the conn is freed while the hcisync task is running. Hold refcount to avoid that...

UBUNTU-CVE-2026-80619

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix potential UAF in aareplaceprofiles The function aareplaceprofiles was accessing udata-size after calling aaputloaddataudata, causing a potential UAF. Fixed this by saving the size to a local variable before dropping...

SUSE SLES15 Security Update : kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:3770-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3770-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.37 fixes various security issues: The following security issues were fixed: -...

SUSE SLES15 Security Update : kernel RT (Live Patch 15 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:3699-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3699-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.54 fixes various security issues: The following security issues were fixed: -...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098760)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098760 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6output Use RCU in ip6output in order to use dstdevrcu to prevent possible UAF...

Linux Distros Unpatched Vulnerability : CVE-2026-80531

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: avoid UAF on sc-tempip in xreptempfilecreate LOLLM noticed a potential UAF if the tempfile creation code fails after it set sc-tempip. Fix that...

SUSE SLES15: kernel-livepatch-6_4_0-150600_23_65-default / etc (SUSE-SU-2026:3726-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3726-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.65 fixes various security issues: The following security issues were fixed: -...

SUSE SLES15 Security Update : kernel RT (Live Patch 14 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:3694-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3694-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.51 fixes various security issues: The following security issues were fixed: -...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: fixed a race condition issue under cocurrent smb2 tree disconnect. There is also a UAF issue under cocurrent smb2 tree disconnect. This patch introduces TREECONNEXPIRE flags for tcon to avoid cocurrent access...

UBUNTU-CVE-2026-74660

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtnflog: pin the NFLOG backend nflogunregister runs after the per-net teardown so its final RCU grace period also drains readers that obtained the logger from a per-net binding. However, ebtnflog passes an explicit UL...

PoC-Exploit

pocs Proof-of-concept exploits for vulnerabilities discovered...

EUVD-2026-63591

Tor before 0.4.9.10 did not reject a CONFLUXLINK cell that arrives on a circuit which already has attached streams. A malicious client could send a RELAYCOMMANDBEGIN before the CONFLUXLINK on the same circuit, attaching an exit stream that would later end up orphan leaving a dangling circuit...

Important: Red Hat Security Advisory: kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_143_1, and kpatch-patch-4_18_0-477_97_1 security update

An update for multiple packages is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...