{"metadata": {"vulnerability": "cve-2026-97941", "count": 50, "kinds": {"milestone": 8, "sighting": 8, "kev": 0, "other": 34}}, "data": [{"timestamp": "2026-09-24T22:00:00Z", "date_only": false, "value": "2026-09-24T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3579", "record": "WID-SEC-W-2026-3579", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-24T22:00:00Z", "date_only": false, "value": "2026-09-24T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3579", "record": "WID-SEC-W-2026-3579", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-24T22:00:00Z", "date_only": false, "value": "2026-09-24T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3579", "record": "WID-SEC-W-2026-3579", "field": "vulnerabilities.376.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-25T10:18:58.204Z", "date_only": false, "value": "2026-09-25T10:18:58.204Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-97941", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-25T10:22:53.556Z", "date_only": false, "value": "2026-09-25T10:22:53.556Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-97941", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-25T11:17:00Z", "date_only": false, "value": "2026-09-25T11:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-97941", "record": "UBUNTU-CVE-2026-97941", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-25T11:17:21Z", "date_only": false, "value": "2026-09-25T11:17:21Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JVPH-RMF4-FGM6", "record": "GHSA-JVPH-RMF4-FGM6", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-25T11:17:21.517Z", "date_only": false, "value": "2026-09-25T11:17:21.517", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-97941", "record": "FKIE_CVE-2026-97941", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-25T12:31:29Z", "date_only": false, "value": "2026-09-25T12:31:29Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JVPH-RMF4-FGM6", "record": "GHSA-JVPH-RMF4-FGM6", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-25T15:31:44Z", "date_only": false, "value": "2026-09-25T15:31:44Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JVPH-RMF4-FGM6", "record": "GHSA-JVPH-RMF4-FGM6", "field": "modified"}, {"timestamp": "2026-09-27T22:00:00Z", "date_only": false, "value": "2026-09-27T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3579", "record": "WID-SEC-W-2026-3579", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-29T06:08:13.850Z", "date_only": false, "value": "2026-09-29T06:08:13.850991Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-97941", "record": "BELL-CVE-2026-97941", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-29T06:24:03.488Z", "date_only": false, "value": "2026-09-29T06:24:03.48861Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-97941", "record": "BELL-CVE-2026-97941", "field": "modified"}, {"timestamp": "2026-09-29T06:24:03.488Z", "date_only": false, "value": "2026-09-29T06:24:03.48861Z", "kind": "other", "label": "Withdrawn", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-97941", "record": "BELL-CVE-2026-97941", "field": "withdrawn"}, {"timestamp": "2026-09-29T22:00:00Z", "date_only": false, "value": "2026-09-29T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3579", "record": "WID-SEC-W-2026-3579", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-30T21:41:10Z", "date_only": false, "value": "2026-09-30T21:41:10Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-97941", "record": "UBUNTU-CVE-2026-97941", "field": "modified"}, {"timestamp": "2026-10-01T22:00:00Z", "date_only": false, "value": "2026-10-01T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3579", "record": "WID-SEC-W-2026-3579", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-10-04T22:00:00Z", "date_only": false, "value": "2026-10-04T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3579", "record": "WID-SEC-W-2026-3579", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-10-05T22:00:00Z", "date_only": false, "value": "2026-10-05T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3579", "record": "WID-SEC-W-2026-3579", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2026-10-06T22:00:00Z", "date_only": false, "value": "2026-10-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3579", "record": "WID-SEC-W-2026-3579", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2026-10-07T00:00:00Z", "date_only": false, "value": "2026-10-07T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12074-1", "record": "OPENSUSE-SU-2026:12074-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-07T00:00:00Z", "date_only": false, "value": "2026-10-07T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12074-1", "record": "OPENSUSE-SU-2026:12074-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-07T00:00:00Z", "date_only": false, "value": "2026-10-07T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12074-1", "record": "OPENSUSE-SU-2026:12074-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-10-07T00:00:00Z", "date_only": false, "value": "2026-10-07T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12074-1", "record": "OPENSUSE-SU-2026:12074-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-07T22:00:00Z", "date_only": false, "value": "2026-10-07T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3579", "record": "WID-SEC-W-2026-3579", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2026-10-08T18:02:30Z", "date_only": false, "value": "2026-10-08T18:02:30Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12074-1", "record": "OPENSUSE-SU-2026:12074-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-08T22:00:00Z", "date_only": false, "value": "2026-10-08T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3579", "record": "WID-SEC-W-2026-3579", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2026-10-08T22:00:00Z", "date_only": false, "value": "2026-10-08T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3579", "record": "WID-SEC-W-2026-3579", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-09T09:18:07.912Z", "date_only": false, "value": "2026-10-09T09:18:07.912+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3579", "record": "WID-SEC-W-2026-3579", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-09T09:50:50Z", "date_only": false, "value": "2026-10-09T09:50:50Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12074-1", "record": "OPENSUSE-SU-2026:12074-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-10T08:44:10Z", "date_only": false, "value": "2026-10-10T08:44:10Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12074-1", "record": "OPENSUSE-SU-2026:12074-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-10-12T17:33:01Z", "date_only": false, "value": "2026-10-12T17:33:01Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12074-1", "record": "OPENSUSE-SU-2026:12074-1", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-10-13T09:48:32Z", "date_only": false, "value": "2026-10-13T09:48:32Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12074-1", "record": "OPENSUSE-SU-2026:12074-1", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2026-10-15T17:16:24Z", "date_only": false, "value": "2026-10-15T17:16:24Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12074-1", "record": "OPENSUSE-SU-2026:12074-1", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2026-10-16T09:51:23Z", "date_only": false, "value": "2026-10-16T09:51:23Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12074-1", "record": "OPENSUSE-SU-2026:12074-1", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2026-10-16T16:08:48Z", "date_only": false, "value": "2026-10-16T16:08:48Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12074-1", "record": "OPENSUSE-SU-2026:12074-1", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2026-10-16T22:09:53.404Z", "date_only": false, "value": "2026-10-16T22:09:53.404457Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/harrysintonen/statuses/117452871572142344", "record": "CVE-2026-97941", "field": "creation_timestamp", "uuid": "e29ecb24-d785-4034-8ddd-301f2f2d6e49", "content": "Ah it's weekend again:  \"... vulnerabilities can be exploited for Linux server LPE, container escape, and Android LPE.\"\nCVE-2026-98260 (Timer)This is a use-after-free caused by the interaction between an exec() failure in a thread other than the process leader and POSIX CPU timer cleanup.\nCVE-2026-98256 (Signal)This is a sigqueue use-after-free caused by a race between exec() in a nonleader thread and cleanup of a private pending signal queue.\nCVE-2026-89754 (MM)Retry state from the page table walker escapes into an upper level, causing an out-of-bounds write to the temporary result buffer used by mincore().\nCVE-2026-80775 (Futex)This is a use-after-free caused when two tasks that share an mm_struct through nested vfork() calls race to allocate the initial reference counter for FUTEX_PRIVATE_HASH.\nCVE-2026-98385 (Scheduler)This is a use-after-free caused when scheduler cache accounting continues to update per-CPU statistics belonging to a previously freed mm_struct. The vulnerable path is reached when CONFIG_SCHED_CACHE is enabled, scheduler cache is active at runtime, and the CPU topology contains multiple LLCs.\nCVE-2026-97941 (SLAB)This is a list corruption caused by a race between returning a freelist and removing a slab from the node partial list during SLUB object refill. The public trigger causes a kernel panic.\nhttps://www.openwall.com/lists/oss-security/2026/10/16/36\n#infinitycore #infosec #cybersecurity", "url": "https://infosec.exchange/users/harrysintonen/statuses/117452871572142344"}, {"timestamp": "2026-10-17T09:17:32Z", "date_only": false, "value": "2026-10-17T09:17:32Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12074-1", "record": "OPENSUSE-SU-2026:12074-1", "field": "document.tracking.revision_history.9.date"}, {"timestamp": "2026-10-19T03:00:08Z", "date_only": false, "value": "2026-10-19T03:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/105940", "record": "CVE-2026-97941", "field": "creation_timestamp", "uuid": "6d7b81b1-7ee6-441a-9502-c828c76558ff", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e #\u590d\u73b0\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a InfinityCore-Android-CVE-2026-97941\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ylh440104\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-18 23:41:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAndroid/ARM64 port\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/105940", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-19T03:00:08Z", "date_only": false, "value": "2026-10-19T03:00:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/105940", "record": "CVE-2026-97941", "field": "creation_timestamp", "uuid": "96b7a942-a32b-4c12-a623-925bb35f674d", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e #\u590d\u73b0\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a InfinityCore-Android-CVE-2026-97941\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ylh440104\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-18 23:41:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAndroid/ARM64 port\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/105940"}, {"timestamp": "2026-10-19T03:00:13Z", "date_only": false, "value": "2026-10-19T03:00:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Pj944NQc9vhEV09ATK6oMoNYpbBpujzmGWAxbMR9blwMk5I", "record": "CVE-2026-97941", "field": "creation_timestamp", "uuid": "5238140f-ae92-4ef6-a687-191a5f8ac903", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-19T03:00:13Z", "date_only": false, "value": "2026-10-19T03:00:13.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Pj944NQc9vhEV09ATK6oMoNYpbBpujzmGWAxbMR9blwMk5I", "record": "CVE-2026-97941", "field": "creation_timestamp", "uuid": "6865077d-28f1-4351-b5bf-6cc691fc8649"}, {"timestamp": "2026-10-19T09:00:05Z", "date_only": false, "value": "2026-10-19T09:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/QZVOTB97I_dc457TR_Lq0MVhgabs2BmhLo3-n8sI_6kTPRM", "record": "CVE-2026-97941", "field": "creation_timestamp", "uuid": "9e67f189-f853-432a-bcba-f6995c0f5215", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-19T09:00:05Z", "date_only": false, "value": "2026-10-19T09:00:05.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/QZVOTB97I_dc457TR_Lq0MVhgabs2BmhLo3-n8sI_6kTPRM", "record": "CVE-2026-97941", "field": "creation_timestamp", "uuid": "90855fd4-3ee3-411d-8340-e549a952a365"}, {"timestamp": "2026-10-19T09:11:07.833Z", "date_only": false, "value": "2026-10-19T09:11:07.833Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-97941", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-19T09:11:07.833Z", "date_only": false, "value": "2026-10-19T09:11:07.833Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "cve-2026-97941", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-19T10:17:45.267Z", "date_only": false, "value": "2026-10-19T10:17:45.267", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-97941", "record": "FKIE_CVE-2026-97941", "field": "lastModified"}, {"timestamp": "2026-10-19T11:22:48Z", "date_only": false, "value": "2026-10-19T11:22:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poxek/6389", "record": "CVE-2026-97941", "field": "creation_timestamp", "uuid": "ef415ff8-e635-42d8-a267-3bbe454c5d7c", "content": "\u0428\u0435\u0441\u0442\u044c \u0431\u0430\u0433\u043e\u0432 \u0432 \u044f\u0434\u0440\u0435 Linux \u0432\u043d\u0435 \u0441\u0435\u0442\u0438 \u0438 BPF: \u043f\u044f\u0442\u044c \u0434\u043e\u0432\u0435\u0434\u0435\u043d\u044b \u0434\u043e root, \u043e\u0434\u0438\u043d \u2014 \u0435\u0449\u0435 \u0438 \u043d\u0430 Galaxy S26 Ultra \u0438\u0437 untrusted_app\n\nHyunwoo Kim (@v4bel) \u043f\u043e\u0441\u043b\u0435 \u044d\u043c\u0431\u0430\u0440\u0433\u043e \u0447\u0435\u0440\u0435\u0437 linux-distros \u0432\u044b\u043b\u043e\u0436\u0438\u043b Infinity Core: \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0438 PoC \u0434\u043b\u044f timer, signal, mm, futex, scheduler \u0438 SLUB. \u041d\u0438 \u043e\u0434\u0438\u043d \u0431\u0430\u0433 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 user namespace, \u0442\u0430\u043a \u0447\u0442\u043e \u0437\u0430\u043f\u0440\u0435\u0442 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 userns \u0437\u0434\u0435\u0441\u044c \u043d\u0435 \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442.\n\n\u041d\u0430 \u0432\u0438\u0434\u0435\u043e CVE-2026-98260. \u041f\u043e\u0442\u043e\u043a-\u043d\u0435-\u043b\u0438\u0434\u0435\u0440 \u0434\u0435\u043b\u0430\u0435\u0442 exec(), \u0437\u0430\u0431\u0438\u0440\u0430\u0435\u0442 TID \u043b\u0438\u0434\u0435\u0440\u0430, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e exec() \u043f\u0430\u0434\u0430\u0435\u0442. \u0423\u0437\u0435\u043b \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u043d\u043e\u0433\u043e k_itimer \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0432 timerqueue \u0436\u0438\u0432\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0438 \u0438 \u0441\u043d\u0438\u043c\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u043f\u0440\u0438 reap. \u041f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 PoC \u0434\u0430\u0435\u0442 root \u043d\u0430 Ubuntu 26.04 7.0.0-30-generic. Android-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d: \u0435\u0441\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e SHA-256, \u043a\u043e\u0434 \u043e\u0431\u0435\u0449\u0430\u044e\u0442 \u043f\u043e\u0441\u043b\u0435 \u043f\u0430\u0442\u0447\u0430 Samsung.\n\n\u041e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435:\n\u2022 CVE-2026-98256, signal: UAF sigqueue \u0432 \u0433\u043e\u043d\u043a\u0435 exec() \u0438 \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u043e\u0447\u0435\u0440\u0435\u0434\u0438 \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432, \u0444\u0438\u043d\u0430\u043b commit_creds(init_cred).\n\u2022 CVE-2026-89754, mm: mincore() \u0434\u0432\u0430\u0436\u0434\u044b \u043e\u0431\u0445\u043e\u0434\u0438\u0442 PUD \u0438 \u043f\u0438\u0448\u0435\u0442 \u0437\u0430 \u0431\u0443\u0444\u0435\u0440, PoC \u043e\u0431\u043d\u0443\u043b\u044f\u0435\u0442 UID/GID \u0432 struct cred.\n\u2022 CVE-2026-80775, futex: \u0433\u043e\u043d\u043a\u0430 \u0447\u0435\u0440\u0435\u0437 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0439 vfork(), UAF \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u043e\u0433\u043e \u0445\u0435\u0448\u0430, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044c \u0441\u0442\u0440\u0430\u043d\u0438\u0447\u043d\u043e\u0433\u043e \u043a\u044d\u0448\u0430 /usr/bin/passwd.\n\u2022 CVE-2026-98385, scheduler: \u0442\u043e\u043b\u044c\u043a\u043e \u0441 CONFIG_SCHED_CACHE=y \u0438 \u043d\u0443\u0436\u043d\u043e\u0439 LLC-\u0442\u043e\u043f\u043e\u043b\u043e\u0433\u0438\u0435\u0439.\n\u2022 CVE-2026-97941, SLUB: PoC \u0434\u043e\u0432\u043e\u0434\u0438\u0442 \u043b\u0438\u0448\u044c \u0434\u043e \u043f\u0430\u043d\u0438\u043a\u0438 \u044f\u0434\u0440\u0430.\n\n\u0414\u043b\u044f \u043f\u044f\u0442\u0438 \u0438\u0437 \u0448\u0435\u0441\u0442\u0438 \u0430\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442 \u043f\u043e\u0431\u0435\u0433 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430. \u0425\u0435\u0448\u0438 \u0444\u0438\u043a\u0441\u043e\u0432 \u0435\u0441\u0442\u044c \u0432 README: \u0441\u0432\u0435\u0440\u044f\u0439\u0442\u0435 \u0438\u0445 \u0441 changelog \u044f\u0434\u0440\u0430 \u0441\u0432\u043e\u0435\u0433\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430.\n\n\ud83c\udf1a @poxek | \ud83c\udf1a @poxek_ai | \ud83d\udcf2 MAX | \u2764\ufe0f merch.shop", "url": "https://t.me/poxek/6389", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-22T10:43:37Z", "date_only": false, "value": "2026-10-22T10:43:37Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12074-1", "record": "OPENSUSE-SU-2026:12074-1", "field": "document.tracking.revision_history.10.date"}, {"timestamp": "2026-10-22T10:43:37Z", "date_only": false, "value": "2026-10-22T10:43:37Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:12074-1", "record": "OPENSUSE-SU-2026:12074-1", "field": "document.tracking.current_release_date"}], "metrics": {"as_of": "2026-10-30T15:04:52.346Z", "anchors": {"origin": {"timestamp": "2026-09-24T22:00:00Z", "date_only": false, "value": "2026-09-24T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3579", "record": "WID-SEC-W-2026-3579", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-09-24T22:00:00Z", "date_only": false, "value": "2026-09-24T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3579", "record": "WID-SEC-W-2026-3579", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-10-19T03:00:08Z", "date_only": false, "value": "2026-10-19T03:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/105940", "record": "CVE-2026-97941", "field": "creation_timestamp", "uuid": "6d7b81b1-7ee6-441a-9502-c828c76558ff", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e #\u590d\u73b0\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a InfinityCore-Android-CVE-2026-97941\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ylh440104\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-18 23:41:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAndroid/ARM64 port\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/105940", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 2091608.0, "hours": 581.0022222222223, "days": 24.208425925925926, "min_seconds": 2091608.0, "max_seconds": 2091608.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-24T22:00:00Z", "date_only": false, "value": "2026-09-24T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3579", "record": "WID-SEC-W-2026-3579", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-19T03:00:08Z", "date_only": false, "value": "2026-10-19T03:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/105940", "record": "CVE-2026-97941", "field": "creation_timestamp", "uuid": "6d7b81b1-7ee6-441a-9502-c828c76558ff", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e #\u590d\u73b0\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a InfinityCore-Android-CVE-2026-97941\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ylh440104\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-18 23:41:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAndroid/ARM64 port\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/105940", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 3085492.346624, "hours": 857.0812073955556, "days": 35.71171697481481, "min_seconds": 3085492.346624, "max_seconds": 3085492.346624, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-24T22:00:00Z", "date_only": false, "value": "2026-09-24T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3579", "record": "WID-SEC-W-2026-3579", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-30T15:04:52.346Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 993884.346624, "hours": 276.0789851733333, "days": 11.503291048888888, "min_seconds": 993884.346624, "max_seconds": 993884.346624, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-19T03:00:08Z", "date_only": false, "value": "2026-10-19T03:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/105940", "record": "CVE-2026-97941", "field": "creation_timestamp", "uuid": "6d7b81b1-7ee6-441a-9502-c828c76558ff", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e #\u590d\u73b0\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a InfinityCore-Android-CVE-2026-97941\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ylh440104\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-18 23:41:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAndroid/ARM64 port\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/105940", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-30T15:04:52.346Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}