CVE-2026-80767

A flaw was found in the Linux kernel's Human Interface Device HID sensor custom driver. A use-after-free vulnerability exists where the enablesensor sysfs attribute can be accessed either before its associated memory is properly initialized or after it has been freed during device removal. A loca...

CVE-2026-80785

A flaw was found in the fbdev component of the Linux kernel. Improper synchronization during mode sysfs access allows a concurrent reader or writer to access freed memory. This can occur when showmode, showmodes, or storemode are called while storemodes is replacing and freeing the modelist. A...

CVE-2026-80818

A flaw was found in the Linux kernel's iommu/tegra241-cmdqv driver. This vulnerability, a use-after-free, occurs when the system attempts to deinitialize a virtual interface during device teardown, accessing memory that has already been released. A local attacker or a malicious device could explo...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock Manager OnePlus Ace 6T PLR110 – Temporary Root...

CVE-2026-53359

🚨 CVE-2026-53359 — Januscape Linux KVM Shadow Paging Use-After-Free Guest-to-Host Escape Januscape is a Linux Kernel KVM vulnerability caused by a Use-After-Free UAF condition in the x86 Shadow MMU. Under vulnerable configurations, a malicious guest can corrupt host memory, leading to host crashe...

CVE-2026-89983

A flaw was found in the Linux kernel's I2C subsystem. A race condition during adapter removal allows a local user to cause a Denial of Service DoS by crashing or hanging the system. When an I2C adapter is being deleted while a user concurrently creates a device through the sysfs interface, the...

CVE-2025-40271

CVE-2025-40271 — procreaddirde rb-tree UAF LPE Proof-of-concept for a local privilege escalation vulnerability in the Linux kernel proc filesystem. The bug is a use-after-free in procreaddirde caused by rberase without RBCLEARNODE, leaving stale red-black tree links that can be raced during...

Exploit for Use After Free in Linux Linux_Kernel

Root My Galaxy payload · SM-S928B / S928BXXU6EZIF Port of the...

Exploit for Use After Free in Linux Linux_Kernel

Galaxy Tab S10 FE — ADB root CVE-2026-43499 / GhostLock + Ker...

CVE-2026-43499

CVE-2026-43499 — Linux Kernel Futex PI Use-After-Free Bug removewaiter in kernel/locking/rtmutex.c is used by the slowlock paths but also for proxy-lock rollback in rtmutexstartproxylock when invoked from futexrequeue. In the proxy-lock case waiter::task is not current, but removewaiter incorrect...

Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for October 2026

Summary IBM SevOne Network Performance Management has addressed PHP Remote Code Execution security vulnerabilities in the NMS component with a Service Pack update. Vulnerability Details CVEID:CVE-2026-109618 DESCRIPTION: PHP uses longjmp for out-of-memory OOM errors to exit the current context an...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell Next-generation exploit orchestrator for CVE-2026-1...

Exploit for Use After Free in Linux Linux_Kernel

A12 GhostLock — one-click root for the Samsung Galaxy A12 !C...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell — CVE-2026-109618 / CVE-2026-109619 Peringatan...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell detector Fingerprint, probe, verdict: PHP sessio...

MiracleLinux 9 : kernel-5.14.0-687.59.1.el9_8 (AXSA:2026-2149:105)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2149:105 advisory. kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: xfrm: espintcp: do not reuse an in-progress partial send...

Amazon Linux 2023 : tigervnc, tigervnc-icons, tigervnc-license (ALAS2023-2026-3262)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3262 advisory. CheckSetDoodad in xkb/xkb.c frees doodad-text.text on error but doesnot NULL the pointer. When the error path continues, XkbClearDoodad iscalled during cleanup and frees the same pointer again...

Amazon Linux 2023 : xorg-x11-server-Xwayland, xorg-x11-server-Xwayland-devel (ALAS2023-2026-3261)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3261 advisory. CheckSetDoodad in xkb/xkb.c frees doodad-text.text on error but doesnot NULL the pointer. When the error path continues, XkbClearDoodad iscalled during cleanup and frees the same pointer again...

Amazon Linux 2023 : libreswan (ALAS2023-2026-3253)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3253 advisory. A null pointer dereference flaw was found in Libreswan's PKCS7 certificate payload handling. When processing a crafted IKEv2 IKEAUTH packet containing a PKCS7 bundle with a certificate...

Amazon Linux 2023 : xorg-x11-server-common, xorg-x11-server-devel, xorg-x11-server-source (ALAS2023-2026-3260)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3260 advisory. CheckSetDoodad in xkb/xkb.c frees doodad-text.text on error but doesnot NULL the pointer. When the error path continues, XkbClearDoodad iscalled during cleanup and frees the same pointer again...