Exploit for Use After Free in Linux Linux_Kernel

Galaxy Tab S10 FE — ADB root CVE-2026-43499 / GhostLock + Ker...

CVE-2026-43499

CVE-2026-43499 — Linux Kernel Futex PI Use-After-Free Bug removewaiter in kernel/locking/rtmutex.c is used by the slowlock paths but also for proxy-lock rollback in rtmutexstartproxylock when invoked from futexrequeue. In the proxy-lock case waiter::task is not current, but removewaiter incorrect...

Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for October 2026

Summary IBM SevOne Network Performance Management has addressed PHP Remote Code Execution security vulnerabilities in the NMS component with a Service Pack update. Vulnerability Details CVEID:CVE-2026-109618 DESCRIPTION: PHP uses longjmp for out-of-memory OOM errors to exit the current context an...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell Next-generation exploit orchestrator for CVE-2026-1...

Exploit for Use After Free in Linux Linux_Kernel

A12 GhostLock — one-click root for the Samsung Galaxy A12 !C...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell — CVE-2026-109618 / CVE-2026-109619 Peringatan...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell detector Fingerprint, probe, verdict: PHP sessio...

Amazon Linux 2023 : xorg-x11-server-common, xorg-x11-server-devel, xorg-x11-server-source (ALAS2023-2026-3260)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3260 advisory. CheckSetDoodad in xkb/xkb.c frees doodad-text.text on error but doesnot NULL the pointer. When the error path continues, XkbClearDoodad iscalled during cleanup and frees the same pointer again...

Amazon Linux 2023 : tigervnc, tigervnc-icons, tigervnc-license (ALAS2023-2026-3262)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3262 advisory. CheckSetDoodad in xkb/xkb.c frees doodad-text.text on error but doesnot NULL the pointer. When the error path continues, XkbClearDoodad iscalled during cleanup and frees the same pointer again...

Amazon Linux 2023 : firefox (ALAS2023-2026-3281)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3281 advisory. Information disclosure in the Networking: JAR component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17. CVE-2026-100766 Sandbox...

Amazon Linux 2023 : libreswan (ALAS2023-2026-3253)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3253 advisory. A null pointer dereference flaw was found in Libreswan's PKCS7 certificate payload handling. When processing a crafted IKEv2 IKEAUTH packet containing a PKCS7 bundle with a certificate...

Amazon Linux 2023 : xorg-x11-server-Xwayland, xorg-x11-server-Xwayland-devel (ALAS2023-2026-3261)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3261 advisory. CheckSetDoodad in xkb/xkb.c frees doodad-text.text on error but doesnot NULL the pointer. When the error path continues, XkbClearDoodad iscalled during cleanup and frees the same pointer again...

MiracleLinux 9 : kernel-5.14.0-687.59.1.el9_8 (AXSA:2026-2149:105)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2149:105 advisory. kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: xfrm: espintcp: do not reuse an in-progress partial send...

Exploit for CVE-2026-64560

RootKit · Jailbreak Assistant Flutter + Shizuku ⚠️ Rea...

curl:curl_fuzzer_proto_smtp: Heap-use-after-free in Curl_client_cleanup

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=4561124654383104 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzerprotosmtp Job Type: libfuzzerasancurl Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x7bd59f9e43b...

kernel: ipvs: reload ip header after head reallocation

A flaw was found in the Linux kernel's IP Virtual Server IPVS module. When processing network packets, a buffer reallocation can leave an IP header pointer referencing freed memory. An attacker could exploit this use-after-free condition to cause a Denial of Service DoS by crashing the system or...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

kernel: fuse: re-lock request before replacing page cache folio

A flaw was found in the Linux kernel's Filesystem in Userspace FUSE component. The fusetrymovefolio function, responsible for managing page cache folios, fails to re-lock a request after initially unlocking it on a successful path. This oversight allows another function, fusechanabort, to...

kernel: net/iucv: fix use-after-free of a severed iucv_path

A flaw was found in the Linux kernel. This use-after-free vulnerability exists in the net/iucv component. When a peer severs a connection, message notifications that still reference the freed connection path remain in a queue. A subsequent attempt to process these stale notifications can lead to...

kernel: net/sched: serialize qdisc_rtab_list against concurrent get/put

A flaw was found in the Linux kernel's networking scheduler component. A race condition exists in the handling of rate tables qdiscrtablist due to a lack of proper locking during concurrent operations. A local attacker could exploit this by sending specially crafted network filter requests, leadi...