Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fixed an oops error when unloading drivers that are parallel to each other. When unloading the hclge driver, it attempts to disable sriov first for each aedev node from hnae3aedevlist. If the hns3 driver is unloaded at...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: scsi: qla2xxx: Fixed an issue where free sp in the error path could cause system crashes. System crashes were observed during load/unload tests in a loop. 61110.449331 qla2xxx 0000:27:00.0-0042:0: MSI-X disabled. 61110.467494...

Disable-TamperProtection

禁用篡改防护及其他 Defender / MDE 组件 可以滥用 SYSTEM / TrustedInstaller 权限来篡改或删除 WdFilter 设置（ALTITUDE 注册表项）并卸载内核微驱动程序，从而禁用篡改防护及其他 Defender 组件。这同样会影响 Microsoft 的 Defender for Endpoint（MDE），使 MDE 无法获取目标上执行的遥测和活动数据。 在测试期间，发现该漏洞影响以下 Windows 版本： Windows Server 2022（直至 BuildLabEx...

EvilKaspersky

这是我一年前做的一个旧实验，现在刚看到这个仓库，决定将其公开。它是KasperkyHook，但系统调用直接指向对进程间内存复制有用的函数。之后你可以完全卸载控制驱动程序并擦除其内存。另一个优点是，线程的堆栈跟踪中不会有任何未签名的代码。 KasperskyHook: https://github.com/iPower/KasperskyHook...

DEBIAN-CVE-2026-97609

In the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: prevent UAF during module unload nfctsettimeout protects the timeout hook dereference and policy lookup with rcureadlock. cttimeoutexit, however, unregisters the per-net operations before it clears the hook...

AZL-104849 CVE-2026-97609 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: prevent UAF during module unload nfctsettimeout protects the timeout hook dereference and policy lookup with rcureadlock. cttimeoutexit, however, unregisters the per-net operations before it clears the hook...

CVE-2026-97609

In the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: prevent UAF during module unload nfctsettimeout protects the timeout hook dereference and policy lookup with rcureadlock. cttimeoutexit, however, unregisters the per-net operations before it clears the hook...

EUVD-2026-86755

In the Linux kernel, the following vulnerability has been resolved: genetlink: pin family module during policy dump The generic netlink controller's policy dump keeps pointers to the target family's operation and policy tables in its callback state. A dump may be split across multiple skbs and...

CVE-2026-97609 netfilter: cttimeout: prevent UAF during module unload

In the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: prevent UAF during module unload nfctsettimeout protects the timeout hook dereference and policy lookup with rcureadlock. cttimeoutexit, however, unregisters the per-net operations before it clears the hook...

CVE-2026-97609

The Linux kernel contains a use-after-free (UAF) vulnerability within the netfilter: cttimeout component during module unload. The issue occurs because cttimeout_exit() unregisters per-net operations before clearing the hook, allowing a race condition where one CPU can free the pernet storage whi...

EUVD-2026-86740

In the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: prevent UAF during module unload nfctsettimeout protects the timeout hook dereference and policy lookup with rcureadlock. cttimeoutexit, however, unregisters the per-net operations before it clears the hook...

CVE-2026-97609 netfilter: cttimeout: prevent UAF during module unload

In the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: prevent UAF during module unload nfctsettimeout protects the timeout hook dereference and policy lookup with rcureadlock. cttimeoutexit, however, unregisters the per-net operations before it clears the hook...

CVE-2026-97609

In the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: prevent UAF during module unload nfctsettimeout protects the timeout hook dereference and policy lookup with rcureadlock. cttimeoutexit, however, unregisters the per-net operations before it clears the hook...

CVE-2026-97609

In the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: prevent UAF during module unload nfctsettimeout protects the timeout hook dereference and policy lookup with rcureadlock. cttimeoutexit, however, unregisters the per-net operations before it clears the hook...

SUSE CVE-2026-93809

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: flush pending RCU callbacks on module unload Call rcubarrier in module exit to wait for outstanding callrcu callbacks before freeing module text, preventing late callback execution in freed memory. BUG: unable to hand...

DEBIAN-CVE-2026-93809

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: flush pending RCU callbacks on module unload Call rcubarrier in module exit to wait for outstanding callrcu callbacks before freeing module text, preventing late callback execution in freed memory. BUG: unable to hand...

CVE-2026-93809

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: flush pending RCU callbacks on module unload Call rcubarrier in module exit to wait for outstanding callrcu callbacks before freeing module text, preventing late callback execution in freed memory. BUG: unable to hand...

AZL-103901 CVE-2026-93809 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: flush pending RCU callbacks on module unload Call rcubarrier in module exit to wait for outstanding callrcu callbacks before freeing module text, preventing late callback execution in freed memory. BUG: unable to hand...

UBUNTU-CVE-2026-93809

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: flush pending RCU callbacks on module unload Call rcubarrier in module exit to wait for outstanding callrcu callbacks before freeing module text, preventing late callback execution in freed memory. BUG: unable to hand...

CVE-2026-93809 drm/amdgpu: flush pending RCU callbacks on module unload

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: flush pending RCU callbacks on module unload Call rcubarrier in module exit to wait for outstanding callrcu callbacks before freeing module text, preventing late callback execution in freed memory. BUG: unable to hand...