177607 matches found
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
kernel: ipvs: reload ip header after head reallocation
A flaw was found in the Linux kernel's IP Virtual Server IPVS module. When processing network packets, a buffer reallocation can leave an IP header pointer referencing freed memory. An attacker could exploit this use-after-free condition to cause a Denial of Service DoS by crashing the system or...
CVE-2024-1086-Exploit
🔒 CVE-2024-1086 Exploit Project 🛡️ Polished educational Linux kernel exploit for security research This project provides a robust, non-functional template for studying CVE-2024-1086, a use-after-free vulnerability in the Linux kernel's netfilter: nftables component, enabling local privilege...
Important: Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update
An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
kernel: net/iucv: fix use-after-free of a severed iucv_path
A flaw was found in the Linux kernel. This use-after-free vulnerability exists in the net/iucv component. When a peer severs a connection, message notifications that still reference the freed connection path remain in a queue. A subsequent attempt to process these stale notifications can lead to...
kernel: net/sched: serialize qdisc_rtab_list against concurrent get/put
A flaw was found in the Linux kernel's networking scheduler component. A race condition exists in the handling of rate tables qdiscrtablist due to a lack of proper locking during concurrent operations. A local attacker could exploit this by sending specially crafted network filter requests, leadi...
kernel: ipvs: reload ip header after head reallocation
A flaw was found in the Linux kernel's IP Virtual Server IPVS module. When processing network packets, a buffer reallocation can leave an IP header pointer referencing freed memory. An attacker could exploit this use-after-free condition to cause a Denial of Service DoS by crashing the system or...
kernel: usb: usbfs: fix use-after-free of usb_device in usbdev_release()
A flaw was found in the Linux kernel's USB subsystem usbfs. An unprivileged local attacker with read/write access to a /dev/bus/usb node could exploit a use-after-free vulnerability. This occurs because the usbdevice structure is prematurely freed before all pending operations are completed...
kernel: fuse: re-lock request before replacing page cache folio
A flaw was found in the Linux kernel's Filesystem in Userspace FUSE component. The fusetrymovefolio function, responsible for managing page cache folios, fails to re-lock a request after initially unlocking it on a successful path. This oversight allows another function, fusechanabort, to...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
CVE-2026-109619 — PHP "php2shell" part 2: use-after-free via s...
Security Bulletin: Two Critical PHP Vulnerabilities
Summary API Connect is vulnerable to critical PHP Vulnerabilities affecting v12 on prem and v10 LTS Vulnerability Details CVEID:CVE-2026-109618 DESCRIPTION: PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly...
RLSA-2026:88477 Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: calipso: Don't call calipso functions for AFINET sk. CVE-2025-38147 kernel: ipv4: raw: reject IPHDRINCL packets with ihl 5 CVE-2026-64114 kernel: net/smc: reject CHID-0 ACCEPT that matche...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell — CVE-2026-109618 / CVE-2026-109619 Reproducibility...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell Automated PHP2Shell exploit — CVE-2026-109618 /...
Exploit for Use After Free in Linux Linux_Kernel
Honor 500 AAP-AN00 Temporary Root Skill A reproducible, sou...
CVE-2026-98866
A flaw was found in the Linux kernel. A use-after-free vulnerability, where memory is accessed after being released, occurs in the process scheduler cache component during task memory switches. A local user could exploit this flaw to cause a Denial of Service DoS through a system crash...
CVE-2026-98862
A flaw was found in the Linux kernel's audit subsystem. A race condition can occur when an audit directory tree is removed while another process evaluates executable audit rules, causing the kernel to access memory after it has been released a use-after-free condition. A local user with audit...
CVE-2026-98858
A flaw was found in the Linux kernel's iouring subsystem. When submission queue polling SQPOLL is enabled, a race condition can cause the polling thread to free the ring context while another operation is still accessing it. A local user can exploit this use-after-free flaw to crash the system,...
php2shell-pcaps
PHP2Shell PCAPs Packet captures from the php2shell vulnerabil...
CVE-2026-89854
A flaw was found in the kernel's qla2xxx SCSI driver. A use-after-free vulnerability exists due to a race condition during host teardown. When a host is being removed, the cs84xx object can be freed before its corresponding sysfs attribute is removed. A local attacker, by concurrently reading thi...