156 matches found
METABASE-RCE-CVE-2023-38646-
METABASE-RCE-CVE-2023-38646- Para obtener el usuario root de la máquina o sistema según la información anterior, este comando y archivo accederán al usuario root. Puedes ejecutar este comando directamente o ejecutar como archivo y ejecutarlo. Comando: $unshare -rm sh -c "mkdir l u w m && cp /u/b/...
CVE-2022-1015
CVE-2022-1015 root@kitploit: id uid=1000d gid=1000d groups=1000d ./poc + unshare done table created: leaktable chain created: leakchain rule added Listening on port 9999 table created: leaktable chain created: leakchain rule added Listening on port 9999 kerneladdress: ffffffffb4a00000 kernelstack...
docker_cve-2015-2925
Docker + CVE-2015-2925 = escapando de --volume Vulnerabilidad reciente en Linux conocida desde hace aproximadamente medio año varios meses de forma pública hizo posible escapar de los bind mounts. En particular, en el caso de Docker es posible escapar desde el interior del directorio montado...
Astra Linux – Vulnerability in Linux
In the Linux kernel, the following vulnerability has been resolved: tipc: skblinearize the head skb when reassembling msgs It’s not a good idea to append the frag skb to a skb’s fraglist if the fraglist already contains skbs from elsewhere. For example, this frag skb was created by pskbcopy, wher...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: Un-sharing of page tables occurs during VMA splitting, not before. Currently, splitvma triggers the un-sharing of hugetlb page tables through vmops-maysplit. This occurs before the VMA lock and rmap locks are taken –...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: unshare: fixed the handling of unsharefs There’s an unpleasant corner case in unshare2: when CLONENEWNS is used in the flags, and current-fs hasn’t been shared at all; in that case, copymntns passes current-fs instead of a privat...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: The issue with bitmap corruption when using CLOSERANGEUNSHARE in closerange has been fixed. The function copyfdbitmapsnew, old, count is expected to copy the first count/BITSPERLONG bits from old-fullfdsbits and fill the rest wit...
Linux Distros Unpatched Vulnerability : CVE-2026-80929
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sysctl: move the cadpid entry from pidtable to kernreboottable cadpid is global, and killcadpid is only used in the root namespace. However, due to...
CVE-2026-80929
In the Linux kernel, the following vulnerability has been resolved: sysctl: move the "cadpid" entry from pidtable to kernreboottable cadpid is global, and killcadpid is only used in the root namespace. However, due to pidtablerootpermissions, a non-root user can unshare pid/user namespaces and...
CVE-2026-80929
CVE-2026-80929 affects the Linux kernel's sysctl subsystem . The cad_pid entry, which controls the PID killed on control-alt-delete and is logically global to the root namespace, was placed in pid_table[] with permissions governed by pid_table_root_permissions(). This allowed a non-root local use...
CVE-2026-80929
In the Linux kernel, the following vulnerability has been resolved: sysctl: move the "cadpid" entry from pidtable to kernreboottable cadpid is global, and killcadpid is only used in the root namespace. However, due to pidtablerootpermissions, a non-root user can unshare pid/user namespaces and...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100584)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100584 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: tlb: Flush walk cache when unsharing PMD tables When hugepmdunshare is called to unshare a...
UBUNTU-CVE-2026-68294
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: restrict socket creation to the initial network namespace QRTR keeps its entire port and node state in module-global variables that are not partitioned per network namespace: qrtrlocalnid is a single global node id...
Linux Distros Unpatched Vulnerability : CVE-2026-68294
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: qrtr: restrict socket creation to the initial network namespace QRTR keeps its entire port and node state in module-global variables that are not partition...
Oracle Linux 10 : kernel (ELSA-2026-47017)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47017 advisory. - ipv6: fix possible UAF in icmpv6rcv CKI Backport Bot RHEL-192215 CVE-2026-53006 - tipc: fix double-free in tipcbufappend CKI Backport Bot RHEL-1921...
SUSE CVE-2026-63875
In the Linux kernel, the following vulnerability has been resolved: arm64: tlb: Flush walk cache when unsharing PMD tables When hugepmdunshare is called to unshare a PMD table, the tlbunsharepmdptdesc function sets tlb-unsharedtables=true but the aarch64 tlbflush only checked tlb-freedtables to...
Linux Distros Unpatched Vulnerability : CVE-2026-63875
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arm64: tlb: Flush walk cache when unsharing PMD tables When hugepmdunshare is called to unshare a PMD table, the tlbunsharepmdptdesc function sets...
kernel: rxrpc: Fix potential UAF after skb_unshare() failure
A flaw was found in the Linux kernel's rxrpc subsystem. This vulnerability arises when the system attempts to unshare a packet buffer, and the operation fails due to an allocation issue. This failure can lead to a Use-After-Free UAF condition, where the system attempts to access memory that has...
K000161578: Linux kernel vulnerability CVE-2025-38085
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugepmdunshare vs GUP-fast race hugepmdunshare drops a reference on a page table that may have previously been shared across processes, potentially turning it into a normal page table...
