#linux
10 articles
CVE-2026-46300: Actively Exploited Linux Kernel Flaw Chained with PHP2Shell
A Linux kernel bug loses the shared-fragment marker when coalescing socket buffers, so ESP input processing may decrypt data in place and modify the page cache. Attackers chain it with PHP2Shell...
CVE-2025-39682: Zero-Length Record Handling in the Linux Kernel TLS Receive Path
In the Linux Kernel TLS receive path, a zero-length record bypasses the intended recvmsg() record-type handling, so subsequent TLS records may be processed under incorrect assumptions...
CVE-2025-39964: Race Condition on Concurrent AF_ALG Socket Writes in the Linux Kernel
Concurrent writes to the same AF_ALG socket in the Linux Kernel interleave data unpredictably, creating inconsistencies in the socket's internal state...
CVE-2026-53266: Linux Kernel Out-of-Bounds Write Vulnerability
Linux Kernel contains an out-of-bounds write vulnerability in the ebtables SNAT target which allows an ARP sender hardware address rewrite to write directly into a nonlinear socket-buffer fragment bac...
CVE-2026-53362: Privilege Escalation via Linux Kernel IPv6 Subsystem
A fraggap accounting flaw on the paged allocation path in __ip6_append_data() allows privilege escalation through the IPv6 networking subsystem. Affects multiple Linux-based distributions...
Linux Kernel: 17 Security Fixes in Networking, Ceph and MPTCP (CVE-2026-74746)
A batch of 17 Linux kernel security fixes covering a use-after-free in netfilter flowtable, out-of-bounds reads in libceph, MPTCP option handling flaws and SCTP cookie validation...
CVE-2022-0995: Out-of-Bounds Write in Linux Kernel watch_queue
An out-of-bounds memory write in the watch_queue event notification subsystem can overwrite parts of kernel state, leading to privilege escalation or denial of service...
CVE-2022-0492: 2022 Vulnerability Now Actively Exploited (Linux)
Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature....
CVE-2026-31431: Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation....
CVE-2018-14634: 2018 Vulnerability Now Actively Exploited (Linux)
Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalat...