kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()

A flaw was found in the Linux kernel's IPv4 networking component. The ipv4sysctlexitnet function prematurely frees the net-ipv4.sysctllocalreservedports memory. This can lead to a use-after-free vulnerability, where other threads might attempt to access deallocated memory. Such an issue can resul...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

CVE-2026-80673

A flaw was found in the Linux kernel's NTFS file system driver. An attacker can craft a malicious on-disk attribute list that, when processed, causes an out-of-bounds read. This occurs because a look-ahead entry in the attribute list is not properly validated, allowing data to be read beyond the...

CVE-2026-80661

A flaw was found in the Linux kernel's Universal Flash Storage UFS core tracing module. The system attempts to access a memory location that has already been freed when processing trace events, specifically within the TPprintk function. This use-after-free vulnerability can be triggered when...

CVE-2026-80612

A flaw was found in the Linux kernel's lightweight tunnel LWT encapsulation process. This vulnerability occurs when network packets carrying specific metadata are processed, causing the system to incorrectly overwrite or clear this metadata. Such an issue can lead to unexpected behavior or data...

cve-2024-1086-writeup

CVE-2024-1086 मूल कारण और शोषण लक्षित कर्नेल: Linux 6.8 netfilter nftables नवीन कोण: nftverdictinit में तर्क भ्रम के कारण refcount दोहरा-मुक्त double-free होता है, जिसे heap spray के माध्यम से मनमाने मेमोरी लेखन तक शोषित किया जा सकता है। विषय-सूची 1. पृष्ठभूमि — netfilter / nftables अवलोकन 2. मूल...

Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation

Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation Hands‑on analysis of CVE‑2025‑62215, a Windows Kernel race condition exploited in the wild. Demonstrates privilege escalation to SYSTEM, detection scripts, and patch validation strategies for enterprise defenders and red...

Linux-Kernel-Vulnerabilities-CVE-2026-23111

लिनक्स एनवायरनमेंट ऑडिट टूल: CVE-2026-23111 यह एक हल्का टर्मिनल-आधारित स्क्रिप्ट है जो यह पता लगाने के लिए है कि आप इस हमले के प्रति संवेदनशील हैं या नहीं। जैसा कि मैंने सुना है, डिस्कॉर्ड पर मेरे कम से कम एक मित्र जो Zorin OS का उपयोग करता है, उसे इस प्रकार के हमले का सामना करना पड़ा। अभी के लिए...

Detection-Tool-Kit-for-CVE-2026-31431

copyfail-detect Detection toolkit for CVE-2026-31431 "Copy Fail", a Linux kernel local privilege escalation technique that corrupts page-cache data without changing the file on disk. Why This Exists Copy Fail can bypass traditional file integrity monitoring because the on-disk file is not modifie...

Exploit-Dirty-Cow

एक्सप्लॉइट - Dirty Cow CVE-2016-5195 विशेषाधिकार वृद्धि प्रयोगशाला | लिनक्स कर्नेल एक्सप्लॉइट 📋 अवलोकन हैंड्स-ऑन प्रयोगशाला जो DirtyCow कमजोरी CVE-2016-5195 को पुनरुत्पादित करती है, लिनक्स कर्नेल में पाई जाने वाली एक महत्वपूर्ण रेस कंडीशन, जो अनप्रिविलेज्ड उपयोगकर्ताओं को रीड-ओनली मेमोरी मैपिंग्स...

Dirty-Frag-CVE-2026-43284

DirtyFrag CVE-2026-43284 - Lab Detection Exercise Report Classification: Internal Lab - CyberLAB Date: 24 May 2026 Platform: Elastic Stack v9.4.1 Status: Detection Confirmed Table of Contents A - Executive Summary B - Full Findings Report 1. Objective and Threat Model 2. Vulnerability Background...

Reporte-de-Escalada-de-Privilegios-Local-Dirty-Frag

Rapport d'escalade de privilèges locale — Dirty Frag Étudiant : Jonatan Claudio 1. Prérequis Résumé de la méthodologie Une évaluation des vulnérabilités a été réalisée sur une machine virtuelle Kali Linux à l'aide d'un script détecteur pour la vulnérabilité Dirty Frag, associée aux CVE suivantes ...

CVE-2026-80711

A flaw was found in the Linux kernel's power supply subsystem, specifically within the MAX17040 fuel gauge driver. When the MAX17040 fuel gauge operates without a registered charger status supplier, the driver fails to properly handle this missing information. This oversight can result in userspa...

ProyectoFinalSO

Final Project — Operating Systems 2026-2 Author: Reyna Mendez Cristian Ignacio Requirements GitHub account with access to GitHub Codespaces Approximately 10 GB of free space in the Codespace kernel compilation Approximately 20 minutes to compile Step 1 — Clone and open in Codespaces root@kitploit...

mks-copy-fail-mitigation

Copy Fail Mitigation DaemonSets DaemonSets for fixing vulnerabilities of the Copy Fail family on all worker nodes of MKS clusters. Contents CVE-2026-31431 Copy Fail CVE-2026-43284, CVE-2026-43500, CopyFail2 Dirty Flag CVE-2026-31431 Copy Fail Vulnerability Description CVE ID: CVE-2026-31431 CVE...

CVE-2026-80662

A flaw was found in the Linux kernel's Compute Express Link CXL subsystem. An incorrect definition of the CXLHEADERLOGSIZE led to an out-of-bounds read when processing RAS capability structures. This vulnerability allows a local attacker to read sensitive kernel stack memory, potentially leading ...

Escalamiento-de-Privilegios-usando-el-Kernel-Exploit-Dirty-Cow

Privilege-Escalation-using-the-Dirty-Cow-Kernel-Exploit This project aims to practically demonstrate the operation of the Dirty COW exploit CVE-2016-5195, a critical vulnerability in the Linux kernel. It simulates a realistic scenario in which an attacker with limited local access to an unpatched...

CVE-2026-46300-Fragnesia---TryHackMe-Lab-Project

CVE-2026-46300-Fragnesia---TryHackMe-प्रयोगशाला परियोजना यह परियोजना Fragnesia CVE-2026-46300 TryHackMe प्रयोगशाला के पूरा होने और विश्लेषण का दस्तावेजीकरण करती है, जो Linux कर्नेल page-cache भ्रष्टाचार भेद्यता का प्रदर्शन करती है जो डिस्क पर फ़ाइलों को बदले बिना कैश्ड फ़ाइल पृष्ठों के संशोधन के...

CVE-2026-80707

A flaw was found in the Linux kernel's J1939 CAN bus transport module. When a new session's receive buffer is allocated, it is not properly initialized, which can leave residual data from previous memory usage. A local attacker could potentially exploit this to read sensitive information from the...

copy-fail-cve-2026-31431-linux-kernel-page-cache-lpe

Copy Fail CVE-2026-31431 - Vulnerability Checker Conceptual validation script for CVE-2026-31431 "Copy Fail" — a Linux kernel local privilege escalation via algifaead page-cache write. Vulnerability CVE-2026-31431 is a logic bug in the Linux kernel's authencesn AEAD template. When combined with...