CVE-2026-90157

A flaw was found in the Linux kernel. A local attacker could exploit a vulnerability in the BPF Berkeley Packet Filter cgroup getsockopt hook. By providing a negative length value, a malicious BPF program could cause the kernel's memory copy function to process an invalid size. This could lead to...

CVE-2026-90155

A flaw was found in ksmbd, a Linux kernel module that provides an in-kernel SMB server. This vulnerability occurs due to improper handling of file lock requests. When filelock objects are freed while still part of the Virtual File System VFS blocked-request graph, it can lead to a system crash,...

CVE-2026-90154

A flaw was found in ksmbd, a server message block SMB protocol implementation within the Linux kernel. This vulnerability arises from improper management of session state changes, which can cause the system to incorrectly associate active network connections with an unintended session. As a resul...

CVE-2026-90152

A flaw was found in the smb/server component of the Linux kernel. A session leak in the ksmbdsessionregister function occurs when a session fails to be stored, leading to its reference count not being properly decremented. This can result in resource exhaustion, potentially allowing a remote...

CVE-2026-90151

A flaw was found in the Linux kernel's Network File System version 4 NFSv4 component. This vulnerability occurs when an NFSv4 client allocation fails, leaving a stale pointer to a freed client. A local attacker could potentially exploit this use-after-free condition by triggering a callback looku...

CVE-2026-90149

A flaw was found in the Linux kernel's NFSv4 Network File System version 4 flexfiles implementation. When an NFSv4.0 data server is used, two code paths incorrectly assume the client has a session, leading to a NULL pointer dereference. This issue can cause the kernel to crash, resulting in a...

CVE-2026-90148

A flaw was found in the Linux kernel's NFSv4 component. When the nfs4addlease function races with a delegation return, it can pass an incorrect, potentially null, argument to nfs4deletelease. This incorrect argument eventually leads to a null pointer dereference, which could allow a local attacke...

CVE-2026-90146

A flaw was found in the Linux kernel. The bpfxdplinkupdate function bypasses necessary checks when updating an eXpress Data Path XDP program. A local user can first create an XDP link with a standard program and then use BPFLINKUPDATE to replace it with an offloaded or device-bound program. This...

CVE-2026-90145

A flaw was found in the hinic3 network driver in the Linux kernel. This vulnerability occurs when the driver incorrectly handles skb socket buffer linearization, leading to a mismatch in the fragment count used for building transmit descriptors. This can result in out-of-bounds Direct Memory Acce...

CVE-2026-90143

A flaw was found in the Linux kernel's KCM Kernel Connection Multiplexer component. The kcmparsefuncstrparser function, which runs a BPF Berkeley Packet Filter parser, does not properly hold an RCU Read-Copy-Update read lock. This oversight can lead to BPF map operations triggering a warning,...

CVE-2026-90142

A flaw was found in the virtionet component of the Linux kernel. When an AFXDP Address Family eXpress Data Path socket is attached, the system fails to properly resize the RX receive ring buffer. This oversight can lead to an out-of-bounds write operation, where data is written beyond the allocat...

CVE-2026-90141

A flaw was found in the Linux kernel's IP Virtual Server IPVS FTP helper. A remote attacker could exploit an integer overflow vulnerability in the ipvsftpgetaddrport function by sending a specially crafted FTP PASV/EPSV response. This could cause the FTP helper to configure data connections with...

make-trust-irrelevant

KERNHELM Make Trust Irrelevant Kernel-enforced authority and runtime security for Linux systems, applications, autonomous software, and AI agents. KERNHELM is a general operating-system security substrate that places a hard authority boundary at the lowest practical enforceable level of the...

mks-copy-fail-mitigation

Copy Fail Mitigation DaemonSets DaemonSets for fixing vulnerabilities of the Copy Fail family on all worker nodes of MKS clusters. Contents CVE-2026-31431 Copy Fail CVE-2026-43284, CVE-2026-43500, CopyFail2 Dirty Flag CVE-2026-31431 Copy Fail Vulnerability Description CVE ID: CVE-2026-31431 CVE...

CVE-2026-46215-exploit-linux-7.0-uaf-stable

CVE-2026-46215 Exploit for Linux 7.0 - More Stable & Reliable c0d3 by : Antonius w1sdom / ev1lut10n / sw0rdm4n - bluedragonsec.com https://github.com/bluedragonsecurity This exploit works in a limited environment, check some requirements below !!! WHAT THE HELL IS THIS ? This is an exploit for...

CVE-2026-43499-root-KernelSU

CVE-2026-43499-root-KernelSU A local privilege escalation adaptation based on kernel vulnerability CVE-2026-43499, with embedded KernelSU integrated. It compiles to produce preload.so; upon successful exploitation, KernelSU will be started in late-load mode jailbreak mode. Supports generating...

CVE-2022-25636

CVE-2022-25636 netfilter Kernel Privilege Escalation toc Vulnerability Overview Vulnerability ID: CVE-2022-25636 Product: linux kernel - netfilter Affected versions: linux kernel 5.4 Impact: Heap out-of-bounds write in the netfilter kernel module, can lead to privilege escalation when SYSADMIN is...

CVE-2026-46331-pedit-COW-detection

CVE-2026-46331 pedit COW – Linux LPE Validation and auditd/AppArmor Detection Defensive validation report for CVE-2026-46331, focused on Linux kernel actpedit, local privilege escalation behavior, auditd telemetry, AppArmor mitigation, and detection logic. Repository description This repository...

CVE-2024-0582

RU GenIoURingExploit is a PoC exploit targeting a specific vulnerability in the Linux kernel CVE-2024-0582. The PoC leverages the iouring mechanism to gain unintended access and potentially escalate privileges by manipulating socket buffers and triggering certain kernel behaviors. Features Utiliz...

Linux-Kernel-Copy-Fail-CVE-2026-31431-

Copy Fail CVE-2026-31431 Vulnerability Analysis and Response Practice This project analyzes the operational principle of the Linux Kernel Copy Fail CVE-2026-31431 vulnerability and compares the pre-patch and post-patch state using the non-destructive checker from the public PoC repository. It doe...