Application Security

SCA / Dependency Tracker

SBOM Generation

AI Security Research

Code Quality Checks

CI/CD Pipeline Security

Container Image Scanning

Penetration Testing

Infrastructure Penetration Tests

External Penetration Testing

Adversary Emulation

Adversary Emulation

How it works Partners Security advisories Blog Contact Sign in Get Started

Tag

kernel

5 posts tagged with "kernel".

S Stefan Mitocaru · Jul 10, 2026 · 22 min

IonStack (CVE-2026-10702 + CVE-2026-43499): how a JIT miscompilation and a 15-year-old kernel flaw turned one URL click into full Android 17 root

Inside IonStack: Nebula Security chains a Firefox IonMonkey type-confusion (CVE-2026-10702) with a 15-year-old Linux kernel stack-UAF (CVE-2...

S Stefan Mitocaru · Jul 8, 2026 · 22 min

CVE-2026-43499: how a 15-year-old cleanup shortcut in the Linux kernel's futex code became a one-user path to root and a container escape

Inside GhostLock (CVE-2026-43499): a 15-year-old stack use-after-free in the Linux kernel's rtmutex priority-inheritance code lets any local...

S Stefan Mitocaru · May 11, 2026 · 23 min

Dirty Frag (CVE-2026-43284, CVE-2026-43500): how the same page-cache write class that powered Copy Fail came back in IPSec and rxrpc, and leaked before the patch was ready

Dirty Frag chains two Linux kernel LPE vulnerabilities (CVE-2026-43284 in IPSec ESP, CVE-2026-43500 in RxRPC) to achieve instant root on vir...

P Paraschivoiu Alexandru · May 8, 2026 · 17 min

CVE-2026-40372: how a broken HMAC check in ASP.NET Core Data Protection let attackers forge authentication cookies

A regression in ASP.NET Core Data Protection broke HMAC validation, exposing apps to forged authentication cookies and padding oracle attack...

P Paraschivoiu Alexandru · May 4, 2026 · 15 min

CVE-2026-31431: how a nine-year-old kernel optimization turned every Linux system into a privilege escalation target

A logic flaw in the Linux kernel's crypto subsystem, dormant since 2017, now lets any unprivileged local user write into the page cache of f...

Start securing your codebase today

Connect your repositories and let AI agents handle continuous scanning, research, and triage.

Create free account Sign in

Have questions? Get in touch →