Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

linux-hwe-edge

linux-aws-5.0

linux-aws-5.3

linux-azure

linux-azure-5.3

linux-azure-edge

linux-gcp

linux-gcp-5.3

linux-gke-4.15

linux-gke-5.4

linux-gkeop-5.4

linux-hwe

linux-oem

linux-oracle-5.0

linux-oracle-5.3

linux-aws-5.11

linux-aws-5.13

linux-aws-5.8

linux-azure-5.11

linux-azure-5.13

linux-azure-5.8

linux-azure-fde

linux-gcp-5.11

linux-gcp-5.13

linux-gcp-5.8

linux-gke

linux-gke-5.15

linux-gkeop

linux-gkeop-5.15

linux-hwe-5.11

linux-hwe-5.13

linux-hwe-5.8

linux-intel-5.13

linux-oem-5.10

linux-oem-5.13

linux-oem-5.14

linux-oem-5.6

linux-oracle-5.11

linux-oracle-5.13

linux-oracle-5.8

linux-raspi2

linux-riscv

linux-riscv-5.11

linux-riscv-5.8

linux-allwinner-5.19

linux-aws-5.19

linux-aws-6.2

linux-aws-6.5

linux-aws-6.8

linux-azure-5.19

linux-azure-6.2

linux-azure-6.5

linux-azure-6.8

linux-azure-fde-5.19

linux-azure-fde-6.2

linux-azure-fde-6.8

linux-gcp-5.19

linux-gcp-6.2

linux-gcp-6.5

linux-gcp-6.8

linux-hwe-5.19

linux-hwe-6.2

linux-hwe-6.5

linux-hwe-6.8

linux-ibm-6.8

linux-intel-iot-realtime

linux-lowlatency-hwe-5.19

linux-lowlatency-hwe-6.2

linux-lowlatency-hwe-6.5

linux-lowlatency-hwe-6.8

linux-nvidia-6.2

linux-nvidia-6.5

linux-nvidia-6.8

linux-oem-5.17

linux-oem-6.0

linux-oem-6.1

linux-oem-6.5

linux-oracle-6.5

linux-oracle-6.8

linux-realtime

linux-riscv-5.19

linux-riscv-6.5

linux-riscv-6.8

linux-starfive-5.19

linux-starfive-6.2

linux-starfive-6.5

linux-realtime-6.8

linux

linux-aws

linux-aws-6.14

linux-aws-6.17

linux-azure-6.11

linux-azure-6.14

linux-azure-6.17

linux-azure-fde-6.14

linux-azure-fde-6.17

A vulnerability in the Linux kernel's vsock/virtio subsystem related to MSG_ZEROCOPY pinned-pages accounting has been fixed. The issue involves incorrect handling of memory accounting for pinned pages due to use of an iterator count after it has been consumed, potentially bypassing RLIMIT_MEMLOCK enforcement. This flaw was corrected by passing the total packet length explicitly to the relevant function, aligning with TCP and UDP implementations. The vulnerability affects multiple Linux kernel versions prior to specific 7.0.0 releases. A patch is available and should be applied via standard system updates, which require a reboot and recompilation of third-party kernel modules due to ABI changes. The CVSS score is 5.5 (medium severity), and no known exploits are reported in the wild.

The Linux kernel vulnerability CVE-2026-52994 concerns the vsock/virtio subsystem's handling of MSG_ZEROCOPY pinned-pages accounting. The function virtio_transport_init_zcopy_skb() incorrectly uses iter->count as the size argument for msg_zerocopy_realloc(), which is then passed to mm_account_pinned_pages() for RLIMIT_MEMLOCK enforcement. Because the iterator is consumed earlier by virtio_transport_fill_skb(), iter->count becomes zero on the last socket buffer, causing RLIMIT_MEMLOCK enforcement to be skipped. The fix involves passing pkt_len, the total bytes being sent, explicitly to virtio_transport_init_zcopy_skb(), matching the approach used by TCP and UDP. Multiple Linux kernel versions prior to 7.0.0-28.28 and related builds are affected. The vulnerability has been patched in updated kernel packages provided by Ubuntu, requiring system reboot and module recompilation.

Detailed information about UBUNTU-CVE-2026-52994 affecting null linux-hwe-edge. Get real-time updates, technical details, and mitigation strategies.

UBUNTU-CVE-2026-52994 - Live Threat Intelligence - Threat Radar | OffSeq.com

Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting… (CVE-2026-52994)

Threats Tagged 'cve-2026-52994'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-52994'

Lead Pen Test Professional