CVE-2026-64600

🚨 CVE-2026-64600 — RefluxFS Linux Kernel Local Privilege Escalation LPE 📖 Overview CVE-2026-64600 "RefluxFS" is a Linux kernel vulnerability affecting the RefluxFS filesystem implementation. The flaw stems from improper validation of filesystem metadata, potentially leading to kernel memory...

POC-CVE-2023-32233

Use-After-Free in Netfilter nftables when processing batch requests Demo Vulnerability Details The affected code originates from the official Linux kernel from https://kernel.org/ and is part of the Netfilter nftables component net/netfilter/nftablesapi.c. Netfilter nftables allows to update its...

DirtyClone

DirtyClone CVE-2026-43503 - Python PoC Non-official Python port of DirtyClone — a Linux kernel local privilege escalation vulnerability. This repository contains a working Proof of Concept that allows an unprivileged local user to gain root privileges by exploiting page-cache corruption via clone...

poc-cve-collection

poc-cve-collection Poc CVE Collection 🧪 Collects CVE PoCs and backs them up to the Internet Archive when they are unavailable on GitHub. Donate Support the maintenance of this project with PayPal or by scanning the QR code below. Example CVE-2026-31431 Title crypto: algifaead - Revert to operatin...

salt

Welcome to salt , a tool to reverse and learn kernel heap memory management. It can be useful to develop an exploit, to debug your own kernel code, and, more importantly, to play with the kernel heap allocations and learn its inner workings. This tool helps tracing allocations and the current sta...

CVE-2020-27786-Kernel-Exploit

CVE-2020-27786 Kernel Exploit Details You can find full details and explaination here: https://1day.dev/notes/Linux-Kernel-n-day-exploit-development TL;DR The vulnerability is a Race Condition that causes a write Use-After-Free. The race window has been extended using the userfaultd technique...

dirtcow

dirtcow Dirty Cow Linux Local Privilege Escalation Vulnerability Reproduction CVE-2016-5195 0、 Use the command uname -a to check the Linux kernel information 1、 Download the EXP to local/server 2、 Use the command gcc -pthread dirty.c -o dirty -lcrypt to compile dirty.c, generating an executable...

CVE-2023-2640-CVE-2023-32629-Interactive-PoC

CVE-2023-2640 & CVE-2023-32629 GameOverLay - Real Host Root Escape PoC An interactive, multi-step Local Privilege Escalation LPE Proof of Concept PoC targeting the Ubuntu Linux kernel OverlayFS vulnerabilities CVE-2023-2640 / CVE-2023-32629. Unlike standard automated one-liners that trap your...

CVE-2023-0179-PoC

Needle CVE-2023-0179 exploit This repository contains the exploit for my recently discovered vulnerability in the nftables subsystem that was assigned CVE-2023-0179, affecting all Linux versions from 5.5 to 6.2-rc3, although the exploit was tested on 6.1.6. The vulnerability details and writeup c...

RefluxFS_CVE-2026-64600

🚨 CVE-2026-64600 — RefluxFS Linux Kernel Local Privilege Escalation LPE 📖 Overview CVE-2026-64600 "RefluxFS" is a Linux kernel vulnerability affecting the RefluxFS filesystem implementation. The flaw stems from improper validation of filesystem metadata, potentially leading to kernel memory...

CVE-2023-0386

README gcc -Wall exp.c pkg-config fuse --cflags --libs -o exp ./exp /tmp Vulnerability Analysis The theoretical knowledge in this article namespaces, overlay filesystem, fuse filesystem, etc. comes from ChatGPT. Vulnerability Overview Vulnerability ID: CVE-2023-0386 Vulnerable Product: Linux kern...

CVE-2022-0847

CVE-2022-0847 Dirty Pipe Linux Kernel Privilege Escalation Analysis toc This article was first published on Huawei Security's official account, this is the blog version more complete First published link: https://mp.weixin.qq.com/s/6VhWBOzJ7uu80nzFxe5jpg Vulnerability Introduction Vulnerability I...

CVE_2022_0847

CVE20220847 CVE-2022-0847: Linux Kernel Privilege Escalation Vulnerability POC A Simple Proof of concept to get root shell. $ gcc cve20220847.c -o exploit $ ./exploit /etc/passwd 1 ootz: $ su rootz id uid=0root gid=0root groups=0root...

CVE-2023-0045

Bypassing Spectre-BTI User Space Mitigations on Linux This is a working document, please send us feedback if you think we got something wrong or if we missed a citation Version 1.0 José Oliveira esoj Rodrigo Branco BSDaemon Introduction When testing the success rate of Spectre-BTI attacks, we...

cve-2020-14386

Reproducer for CVE-2020-14386 Pre-built container: registry.svc.ci.openshift.org/coreos/cve-2020-14386 You probably want to test against an explicit node, like this: apiVersion: v1 kind: Pod metadata: name: cve-2020-14386 spec: restartPolicy: Never nodeName: containers: - name: cve-2020-14386...

DirtyPipePython

dirty.py Description This is an exploit for the Linux kernel vulnerability CVE-2022-0847 DirtyPipe discovered by Max Kellerman. This code combines two existing DirtyPipe POC's into one: febinrev Overwrites sudo binary to directly pop a root shell eremus-dev A direct copy of Kellerman's POC into...

CVE-2022-29968

CVE-2022-29968 Proof-of-concept exploit for CVE-2022-29968 uninitialized memory in the Linux Kernel, specifically the iouring system. The crash was found with Syzkaller. The crash was analyzed by Joseph Ravichandran and Michael Wang. The exploit was written by Joseph Ravichandran. We found &...

CVE-2025-38352-PoC

CVE-2025-38352: Linux Kernel POSIX CPU Timer TOCTOU Race Condition & UAF A reproducible Proof-of-Concept PoC and automated GDB orchestration script for CVE-2025-38352 , a Time-of-Check to Time-of-Use TOCTOU race condition in the Linux kernel's POSIX CPU timer subsystem...

Dirty-Cow-Explanation-CVE-2016-5195-

Dirty-Cow-Explanation-CVE-2016-5195-...

dirtypipe

DISCLAIMER This code is for educational and research purposes only. Do not use it on systems you do not own or have permission to test. The author is not responsible for any misuse, damage, or legal consequences resulting from the use of this code. DirtyPipe CVE-2022-0847 View the writeup for thi...