CVE-2026-93238

A flaw was found in the Linux kernel's s390 VFIO-AP Virtual Function I/O Adjunct Processor device driver. During certain device hot-plug configuration updates, the driver fails to initialize a memory structure before processing it. A local privileged user could trigger this issue to cause the...

CVE-2026-93239

A flaw was found in the Linux kernel. A race condition in the ARM64 page-table walk routine occurs when inspecting memory mappings without proper synchronization while interrupts remain enabled. A local user can trigger this flaw during concurrent memory cleanup operations, causing the kernel to...

linux-4.19.72_CVE-2020-14381

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

CVE-2026-31431-CopyFail-static-ELF--POC

CVE-2026-31431: Copy Fail - 587-byte static ELF I did not find this bug. Credit goes to Xint Code / Theori. This repo is my take on making the exploit as small as possible - a hand-rolled x8664 ELF that does the full LPE in 587 bytes. No libc, no linker, no runtime. Just NASM and stubbornness. In...

CVE_2022_0847

CVE20220847 CVE-2022-0847: Linux Kernel Privilege Escalation Vulnerability POC A Simple Proof of concept to get root shell. $ gcc cve20220847.c -o exploit $ ./exploit /etc/passwd 1 ootz: $ su rootz id uid=0root gid=0root groups=0root...

CVE-2026-93205

A flaw was found in the Linux kernel's iommu/arm-smmu-v3 component. During device removal, the system incorrectly frees the Input-Output Memory Management Unit IOMMU Page Fault IOPF queue before its associated interrupt request IRQ handler finishes using it. This improper cleanup order leads to a...

CVE-2026-93784

A flaw was found in the Linux kernel's cfg80211 wireless configuration subsystem. A local user can cause a Denial of Service DoS or potential information disclosure by submitting a malformed Information Element IE buffer through wireless configuration commands. The kernel fails to properly valida...

cve-2024-1086-writeup

CVE-2024-1086 Root Cause & Exploitation Target kernels: Linux 6.8 netfilter nftables Novel angle: Logic confusion in nftverdictinit causes refcount double-free, exploitable via heap spray to arbitrary memory write. Table of Contents 1. Background — netfilter / nftables overview 2. Root Cause...

CVE-2023-32233

Building And Configuring The instructions below were tested under Ubuntu 23.04 Lunar Lobster. Installing Build Dependencies Run the following command to install the build dependencies: sudo apt install gcc libmnl-dev libnftnl-dev Building Binary Run the following command to build the PoC binary:...

CVE-2026-31402

🛡️ CVE-2026-31402 – NFSv4 LOCK Replay Cache Heap Overflow CVE-2026-31402: Linux NFS Bug Hidden for 23 Years 📌 Overview CVE-2026-31402 is a heap overflow vulnerability in the NFSv4.0 LOCK replay cache of the Linux kernel. It arises due to improper handling of responses larger than the fixed buffer...

CVE-2026-31431

CVE-2026-31431 — Copy Fail Local Privilege Escalation in the Linux kernel's authencesn cryptographic template via AFALG + splice. Disclosed April 29, 2026 by Theori Xint Code. Overview Field| Detail ---|--- CVE| CVE-2026-31431 Nickname| Copy Fail CVSS| 7.8 HIGH Type| Local Privilege Escalation LP...

CVE-2026-93260

A flaw was found in the Linux kernel. When initialization of inter-processor interrupts fails within the PowerPC External Interrupt Virtualization Engine XIVE, the system ignores the failure after freeing allocated memory structures. This leads to a use-after-free condition when subsequent setup...

CVE-2026-93251

A flaw was found in the Linux kernel's ACPI Advanced Configuration and Power Interface subsystem. Due to improper synchronization during physical device lookups, a race condition can occur when a device is unbound concurrently. A local user could exploit this timing flaw to cause a use-after-free...

Januscape-Hotfix

Januscape Fix Library — CVE-2026-53359 简体中文 Complete fix collection for the CVE-2026-53359 guest-to-host escape vulnerability in the KVM/x86 shadow MMU. From zero-downtime livepatch to kernel upgrade — covers every operational scenario. One-liner Direct curl -sL...

CVE-2026-93259

A flaw was found in the Linux kernel. In PowerPC builds configured with position-relative code support, inline assembly routines responsible for handling interrupts fail to declare modified processor registers. This omission can result in register corruption during interrupt processing, allowing ...

CVE-2022-34918

CVE-2022-34918 LPE PoC LPE exploit for CVE-2022-34918. This exploit has been written for the kernel Linux ubuntu 5.15.0-39-generic You can find the associated write-up on our blog Usage getroot should be in the current folder $ ls getroot poc $ ./poc CVE-2022-34918...

CVE-2024-21345

Usage - python3 CVE-2024-21345.py All kernel is exploitable Get root access easily...

CVE-2026-97568

A flaw was found in the Linux kernel's Multipath TCP MPTCP implementation. A local attacker could cause a denial of service DoS by exploiting an uninitialized memory access during connection handling. When processing connection requests using SYN cookies, the kernel copies uninitialized subflow...

CVE-2026-98102

A flaw was found in the Linux kernel's IPv6 multicast implementation. When removing an active multicast source filter, an internal list pointer is updated before the read-copy update RCU grace period elapses. A local user can exploit this race condition during concurrent multicast address lookups...

cve-2022-49186-research

CVE-2022-49186: Linux Kernel Privilege Escalation Research Overview Security research and proof-of-concept exploit for CVE-2022-49186, a Linux kernel vulnerability in the Visconti clock driver that enables local privilege escalation through array overflow. Vulnerability Details Type : Array...