99 matches found
CVE-2026-43499
👻 CVE-2026-43499 — GhostLock La falla GhostLock de 15 años permite escalar a root y escapar de contenedores en la mayoría de las distribuciones de Linux GhostLock es una vulnerabilidad Use-After-Free UAF de alta gravedad en el subsistema rtmutex del kernel de Linux. La falla se origina en una...
CVE-2026-43499
CVE-2026-43499 Notas de Explotación Gravedad: ALTA CVSS: 7.8 Impacto: Confidencialidad, Integridad, Disponibilidad Publicado: 2026-05-21 Resumen Técnico CVE-2026-43499 es una vulnerabilidad en el kernel de Linux, que afecta específicamente al componente rtmutex, encargado de gestionar los bloqueo...
cve-2026-43499-m3q-azf1
GhostLock SELinux park — SM-S948U1 / AZF1 m3q Research snapshot of a working SELinux-only park for Samsung Galaxy S26 Ultra SM-S948U1, codename m3q on firmware S948U1UES3AZF1 GKI 6.12.30-android16-5. This package is not a complete root. It flips SELinux to Permissive and holds reclaim long enough...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in removewaiter. removewaiter is used by the slowlock paths, but it is also used for proxy-lock rollback in rtmutexstartproxylock when invoked from futexrequeue. In the latter case,...
tcp-zerocopy-sm
Investigation is closed. Working fork: https://github.com/soumarcelino/Root-My-Galaxy-SM-S918B Read this - https://github.com/BuSung-dev/Root-My-Galaxy-Payloads/issues/160issuecomment-5227077583 Attempts to cause rights elevation w GhostLock via TCP Zerocopy. Designed expecially for 5.15. samsung...
ghostlock-a17
GhostLock — CVE-2026-43499 on Samsung Galaxy A17 Full user-to-root exploit chain for CVE-2026-43499 "GhostLock" on the Samsung Galaxy A17 SM-A175F , running Android 16 / GKI 6.12. The chain starts from the public GhostLock primitives and ends with a usermode helper executing as: uid=0root gid=0ro...
PT-2026-83016
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: wake linked drain waiters on unlink snd pcm drain on a linked stream parks an on-stack wait entry on the drained peer's runtime-sleep, and after schedule timeout removes it only if that peer is still found in the...
SUSE CVE-2026-74686
In the Linux kernel, the following vulnerability has been resolved: rqspinlock: Reset tail when preserving queue on deadlock Currently, the destruction of the waiter queue is suppressed for rqspinlock in cases where a deadlock is detected. Deadlock checks happen relatively frequently on entry for...
CVE-2026-74686
A flaw was found in the Linux kernel's rqspinlock component. During deadlock detection, the system may not correctly reset the tail of the waiter queue. This improper handling can cause the system to wait indefinitely for a subsequent waiter that never arrives, leading to an indefinite stall and ...
K000162689: Linux Kernel vulnerability CVE-2026-43499
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in removewaiter removewaiter is used by the slowlock paths, but it is also used for proxy-lock rollback in rtmutexstartproxylock when invoked from...
TencentOS Server 4: kernel (TSSA-2026:0733)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0733 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
Oracle Linux 10 : kernel (ELSA-2026-25191)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-25191 advisory. - crypto: ccp - copy IV using skcipher ivsize CKI Backport Bot RHEL-188463 CVE-2026-53016 - futex/requeue: Revert 'Prevent NULL pointer dereference i...
TencentOS Server 4: kernel (TSSA-2026:0663)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0663 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
TencentOS Server 2: kernel (TSSA-2026:0669)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0669 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...
TencentOS Server 3: kernel (TSSA-2026:0664)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0664 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
kernel: rtmutex: Use waiter::task instead of current in remove_waiter()
A flaw was found in the Linux kernel. When the kernel's real-time mutex rtmutex component performs a specific operation called 'proxy-lock rollback' during futex requeue, it incorrectly handles task pointers. This can lead to a 'Use-After-Free' UAF vulnerability, where the system attempts to use...
Important: Red Hat Security Advisory: kernel-rt security update
An update for kernel-rt is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock
A flaw was found in the Linux kernel's futex Fast Userspace Mutex requeue mechanism. When a non-top waiter attempts to requeue a Priority Inheritance PI futex it already owns, a NULL pointer dereference can occur. This issue, specifically within the removewaiter function during a self-deadlock...
kernel: rtmutex: Use waiter::task instead of current in remove_waiter()
A flaw was found in the Linux kernel. When the kernel's real-time mutex rtmutex component performs a specific operation called 'proxy-lock rollback' during futex requeue, it incorrectly handles task pointers. This can lead to a 'Use-After-Free' UAF vulnerability, where the system attempts to use...
