lean-cve-poc

CVE-2026-72844: Lean 4 Kernel Soundness Bug Proving0 = 1 axiom-free via nested inductive projection validation bypass...

EUVD-2026-77686

Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-85921

CVE-2026-85921 is a double free vulnerability in Windows Secure Kernel Mode that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 8.2 (HIGH) with a local attack vector, low complexity, high privileges required, and changed scope , resulting in high impact to con...

CVE-2026-43499

CVE-2026-43499 — Linux Kernel Futex PI Use-After-Free Bug removewaiter in kernel/locking/rtmutex.c is used by the slowlock paths but also for proxy-lock rollback in rtmutexstartproxylock when invoked from futexrequeue. In the proxy-lock case waiter::task is not current, but removewaiter incorrect...

CVE-2026-46333

🚀 CVE-2026-46333 - ssh-keysign-pwn Prueba de concepto de alta calidad para la vulnerabilidad de condición de carrera en el kernel de Linux Un exploit de prueba de concepto limpio y fiable para CVE-2026-46333 — Divulgación de información local mediante condición de carrera en la ruta de salida de...

yc-mk8s-sctphantom-mitigation

SCTPhantom Mitigation for Yandex Managed Kubernetes Automatic application of mitigation for the CVE-2026-64564 SCTPhantom vulnerability in the Linux kernel on all worker nodes of a Yandex Managed Kubernetes cluster. Vulnerability Description CVE identifier CVE ID: CVE-2026-64564 CVE link:...

CVE-2025-21692-poc

CVE-2025-21692-poc Este es el código de mi exploit para la vulnerabilidad ets qdisc CVE-2025-21692, que acompaña a mi artículo. Tenga en cuenta que, como se especifica en el artículo, la versión del kernel fue parcheada para habilitar la vulnerabilidad; 6.6.75 no es vulnerable sin eliminar el...

CVE-2022-0847-POC

CVE-2022-0847 CRÉDITOS: root@kitploit: autor de la vulnerabilidad: Max Kellermann explicación de Max Kellermann: https://dirtypipe.cm4all.com/ RECURSOS: root@kitploit: CACHÉ DE PÁGINA: https://manybutfinite.com/post/page-cache-the-affair-between-memory-and-files/ PIPE:...

CVE-2026-52943

How to use this repo This is a Linux Kernel Local Privilege Escalation PoC code for a use-after-free in skbuff.c : https://github.com/torvalds/linux/commit/98d0912e9f841e5529a5b89a972805f34cb1c69d vidieo1.webm here is the writeup link: https://hackmd.io/@mlc0cVjxSwqv0OoxsUYccw/Bk99YYTyzx you need...

CVE-2026-31431-copy-fail

CVE-2026-31431 Copy Fail Exploit Part 1: Theoretical Concept How CVE-2026-31431 Works Instead of the system constantly fetching files directly from the slow physical hard disk—which wastes a lot of time the Linux system creates a temporary copy of the file inside RAM, known as the Page Cache. Thi...

ghostlock

GhostLock — Linux kernel rtmutex/futex stack-UAF tracking site Source for the GhostLock patch-status tracker: a single-page site recording which distributions have shipped a fix for the rtmutex/futex stack use-after-free in the Linux kernel. Tracking concluded 2026-08-06 : every tracked kernel...

CVE-2022-20186_CTXZ

Exploit pour CVE-2022-20186 Le compte-rendu peut être trouvé ici. Il s'agit d'un bogue dans le pilote noyau Arm Mali que j'ai signalé en janvier 2022. Le bogue peut être utilisé pour obtenir une exécution arbitraire de code noyau depuis le domaine d'application non fiable, ce qui est ensuite...

TempRoot-Huawei

TempRoot-Huawei Root temporal para el kernel endurecido de Huawei a través de CVE-2019-2215 Este código está escrito para P20 Pro CLT-AL00, y el offset del kernel se toma del firmware con la huella de compilación: 'HUAWEI/CLT-AL00/HWCLT:8.1.0/HUAWEICLT-AL00/176C00:user/release-keys' Antecedentes ...

CVE-2026-23111

🐧 CVE-2026-23111 - Vulnerabilidad de Use-After-Free en nftables del Kernel de Linux ⚠️ Use-After-Free en nftables del Kernel de Linux 📖 Resumen CVE-2026-23111 es una vulnerabilidad de Use-After-Free UAF de alta gravedad que afecta el subsistema netfilter/nftables del kernel de Linux. La falla se...

OESA-2026-3709 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Check for invalid/obsolete root after making MMU pages available\n\nCheck for a "stale" page fault, i.e. for an invalid and/or obsolete root, after...

OESA-2026-3707 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: seg6: separate dstcache for input and output paths in seg6 lwtunnel The seg6 lwtunnel uses a single dstcache per encap route, shared between seg6inputcore and...

OESA-2026-3705 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: fix off-by-one in dlmmatchregions region comparison The local-vs-remote region comparison loop uses '=' instead of '', causing it to read one entry pa...

BYOVD-Research

Investigación BYOVD Investigación BYOVD realizada por KOSEC. Incluye controladores vulnerables y análisis. AVISO: Esta investigación se publica con fines educativos y está destinada a avanzar en la investigación de seguridad del kernel de Windows...

CVE-2026-46300

🛡️ CVE-2026-46300 - Fragnesia A Clean & Deadly Page-Cache Attack Variant of the "Dirty Frag" family 📌 Overview CVE-2026-46300 Fragnesia is a high-severity logic flaw in the Linux kernel's socket buffer handling skbtrycoalesce within the XFRM/ESP-in-TCP subsystem espintcp ULP. An unprivileged local...

CVE-2024-1086

CVE-2024-1086 Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images...