OCI-Ansible-Fix-CVE-2026-31431

CVE-2026-31431 Ansible Remediation This playbook remediates CVE-2026-31431, also known as Copy Fail, on Linux instances in OCI. CVE-2026-31431 is a local privilege escalation issue in the Linux kernel algifaead implementation used by the AFALG userspace crypto API. This playbook applies the main...

EUVD-2026-66584

In the Linux kernel, the following vulnerability has been resolved: scsi: core: pair EH runtime PM get and put shost-ehnoresume is currently consulted twice in one error handling iteration: once before scsiautopmgethost and once again before scsiautopmputhost. That is racy when a PM-triggered err...

EUVD-2026-66458

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Pad trailing CCA or EP11 message with zeros The both functions xcrbmsgtotype6cprbmsgx and xcrbmsgtotype6ep11cprbmsgx copy the user space message into a kernel buffer based on the message length. But on further...

EUVD-2026-66590

In the Linux kernel, the following vulnerability has been resolved: optee: ffa: Add NULL check in opteeffalendprotmem Sashiko locally reports a possible null dereference under memory pressure due to the lack of validation of the allocated pointer. Fix that by adding the missing check...

CVE-2026-31431-Linux-Copy-Fail

🛡️ CVE-2026-31431-Linux-Copy-Fail - Execute Custom Shellcode With Ease 📌 Project Overview This software provides a tool to test the Linux CVE-2026-31431 vulnerability. It uses the Rust programming language to interact with system files. The program allows users to run custom shellcode on targeted...

CVE-2023-35001

nftables oob read/write exploit CVE-2023-35001 Exploit used at pwn2own Vancouver 2023 on Ubuntu desktop. The exploit supports the kernel version available at the beginning of the event 5.19.0-35. Requirements C compiler Go compiler Usage Build $ make Run $ ./exploit This produces a lpe.zip file...

CVE-2026-98402

A flaw was found in the Linux kernel. An attacker could cause a Denial of Service DoS or system instability by triggering network error events while kernel event tracing is active. When recording Internet Control Message Protocol ICMP messages, the kernel attempts to read transport header...

CVE-2026-98386

A flaw was found in the Linux kernel's qla2xxx storage driver. When preparing request queues for specific storage adapters, the driver improperly uses standard memory operations instead of dedicated device input/output I/O functions to zero memory. On certain processor architectures, such as ARM6...

CVE-2026-99999 ipv4: validate checksum_start before completing checksum

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...

EUVD-2026-102044

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...

CVE-2026-99999

The Linux kernel contains a vulnerability where the skb_checksum_help function can corrupt network headers if a packet with bad checksum metadata enters the ipv4 stack. To mitigate this as a defense-in-depth measure, the kernel now validates checksum_start before completing the checksum. While th...

-Kernel-ptrace-c-mishandles-vulnerability-CVE-2019-13272

-CVE-2019-13272...

CVE-2026-31431

CVE-2026-31431 Vulnerability Overview CVE ID：CVE-2026-31431 Alias：Copy Fail Severity：High CVSS v3 Score 7.8 Vulnerability Type：Local Privilege Escalation LPE Affected Component：The algifaead module AFALG cryptographic interface of the Linux kernel Prerequisites：The attacker only needs a normal us...

LockingGirl-----CVE-2022-0847-Dirty_Pipe_virus

DirtyPipevirus Dirty Pipe is a kind of Linux exploit. Its CVE is CVE 2022-0847. We use it to delete all files on your Ubuntu. Environment: Ubuntu 20.04 Linux Kernel 5.8 This is the ova file of Ubuntu 20.04:...

CVE-2026-98432 ipv4: free inet_opt and ireq_opt after an RCU grace period

In the Linux kernel, the following vulnerability has been resolved: ipv4: free inetopt and ireqopt after an RCU grace period tcpv4synrecvsock transfers ownership of ireq-ireqopt to the child socket newinet-inetopt without copying it. Another cpu can concurrently process a retransmitted SYN for th...

CVE-2026-98432

The Linux kernel contains a use-after-free vulnerability in its IPv4 networking stack. The root cause is that tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to a child socket without copying it. Due to the removal of listener locks in certain commits, a child socket can be freed ...

EUVD-2026-102025

In the Linux kernel, the following vulnerability has been resolved: ipv4: free inetopt and ireqopt after an RCU grace period tcpv4synrecvsock transfers ownership of ireq-ireqopt to the child socket newinet-inetopt without copying it. Another cpu can concurrently process a retransmitted SYN for th...

CVE-2024-50251-PoC

CVE-2024-50251-PoC Just a local Dos bug in Linux kernel...

cve-2017-16995

CVE-2017-16995 Writeup The folder containes a line-by-line source code analysis for CVE-2017-16995 Linux BPF local privilege escalation. Exploit and patch tested on kernel 4.4.0.116. Credits Special thanks to difengtang who has also contributed this writeup. Exploit scripts was created by @iBearc...

l2tp-socket-bug

CVE-2014-4943 The PPPoL2TP feature in net/l2tp/l2tpppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket. CVSS v2 Base Score: 6.9 MEDIUM...