CVE-2026-98389

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. During recovery from a graphics processing unit GPU reset, background power management tasks can attempt to change power profiles before the reset completes. This improper synchronization causes hardware register access while reset loc...

CVE-2026-98390

A flaw was found in the Linux kernel. When running in certain virtualized environments, an unexpected hardware topology reported by the hypervisor can cause the AMD node initialization logic to calculate a divisor of zero. This condition triggers an unhandled divide-by-zero error during system...

CVE-2026-98388

A flaw was found in the Linux kernel. During program execution, the kernel closes file descriptors marked for close-on-exec while holding an internal process state lock. If closing a file descriptor stalls on an unresponsive or user-space filesystem, the lock remains held and blocks related syste...

CVE-2026-98423

A flaw was found in the Linux kernel's mac80211hwsim virtual wireless driver. A local attacker can cause a denial of service DoS by triggering a race condition between simulated radio shutdown and incoming network frame delivery from user space. Stopping the radio while frames are being processed...

CVE-2026-98420

A flaw was found in the Linux kernel's ksmbd module. A remote client can cause a Denial of Service DoS by initiating a new session setup exchange on an existing Server Message Block SMB connection. Due to an error where session idle time is confused with credential expiration time, the server...

CVE-2026-98392

A flaw was found in the Linux kernel's Intel Bluetooth PCIe driver. An off-by-one boundary check error in the transmission interrupt handler allows an array index to exceed valid buffer limits. A local attacker could exploit this flaw to crash the system, resulting in a denial of service DoS, or...

CVE-2026-90277

A flaw was found in the Linux kernel's md/md-llbitmap component. This vulnerability occurs when a bitmap creation fails, leading to a Use-After-Free UAF condition where the system might attempt to access memory that has already been released. A local attacker could potentially exploit this flaw t...

CVE-2022-23222

CVE-2022-23222 Chinese writeup: https://tr3e.ee/posts/cve-2022-23222-linux-kernel-ebpf-lpe.txt For educational/research purposes only. Use at your own risk. Build & Run $ make cc -I include -static -w -o exploit exploit.c $ ./exploit phase1/8 'create bpf maps' running + phase1/8 'create bpf maps'...

CVE-2026-90206

A flaw was found in the Linux kernel. A timing issue, known as a race condition, can occur within the Non-Volatile Memory Express over Fabrics NVMe-oF target nvmet component. This happens when a system administrator or process changes a queue identifier QID limit while the system is allocating...

Exploiting-a-Linux-kernel-vulnerability

Exploiting-a-Linux-kernel-vulnerability - IT19159140 Local Root vulnerability- CVE-2019-13272 / Security Bypass Vulnerability – CVE-2019-14287 Absolutely, I always choose Linux vulnerability, but then I had to choose different vulnerability else because I didn't know two people could do the same...

Linux-Vulnerability-CVE-2016-0728-and-Exploit

Linux-Vulnerability-CVE-2016-0728-and-Exploit Document on Linux Kernal Vulnerability CVE-2016-0728 and Exploitation -References- https://perception-point.io/resources/research/analysis-and-exploitation-of-a-linux-kernel-vulnerability/...

My-CVEs

A list of vulnerabilities I found. Some vulnerabilities come with deep technical writeups, exploits or even fuzzing session walkthroughs. Some vulnerabilities don't have CVEs because maintainers ghosted me, or because a maintainer didn't agree it's a security bug, I decided to release those as...

CVE-2026-98427

A flaw was found in the Linux kernel's CoDel Controlled Delay network packet scheduling subsystem. An unprivileged local user can trigger a Denial of Service DoS by configuring extremely small packet intervals on network queues. This flaw causes the packet-dropping logic to enter an unbounded loo...

CVE-2026-98428

A flaw was found in the Linux kernel's ALSA USB 6fire audio driver. The driver improperly embeds USB Request Blocks URBs—structures that manage USB communications—directly inside driver objects rather than allocating them dynamically. Because URBs rely on reference counting and can be released...

CVE-2026-98426

A flaw was found in the Linux kernel's Marvell WiFi-Ex mwifiex driver. When an error occurs during interrupt registration in the PCIe interface, the cleanup path references an incorrect context index when attempting to release Message Signaled Interrupts MSI-X. A local user able to trigger device...

fix-cve-2013-2094

CVE-2013-2094 Mitigation Fix This script provides an easy mechnism for generating portable SystemTap modules that can be loaded with systemtap-runtime to mitigate the vulnerability described in CVE-2013-2094. This toolset is aimed towards RHEL6, but will likely work without modification on other...

CVE-2025-40271

🔴 CVE-2025-40271: Critical Use-After-Free Vulnerability in the Linux Kernel 🛡️ Vulnerability Details CVE-2025-40271 is a critical Use-After-Free UAF vulnerability affecting the /proc filesystem of the Linux kernel. The flaw resides in the procreaddirde function, responsible for listing the content...

linux-4.19.72_CVE-2022-42896

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

OCI-Ansible-Fix-CVE-2026-31431

CVE-2026-31431 Ansible Remediation This playbook remediates CVE-2026-31431, also known as Copy Fail, on Linux instances in OCI. CVE-2026-31431 is a local privilege escalation issue in the Linux kernel algifaead implementation used by the AFALG userspace crypto API. This playbook applies the main...

EUVD-2026-66590

In the Linux kernel, the following vulnerability has been resolved: optee: ffa: Add NULL check in opteeffalendprotmem Sashiko locally reports a possible null dereference under memory pressure due to the lack of validation of the allocated pointer. Fix that by adding the missing check...