CVE-2026-93205

A flaw was found in the Linux kernel's iommu/arm-smmu-v3 component. During device removal, the system incorrectly frees the Input-Output Memory Management Unit IOMMU Page Fault IOPF queue before its associated interrupt request IRQ handler finishes using it. This improper cleanup order leads to a...

CVE-2026-93784

A flaw was found in the Linux kernel's cfg80211 wireless configuration subsystem. A local user can cause a Denial of Service DoS or potential information disclosure by submitting a malformed Information Element IE buffer through wireless configuration commands. The kernel fails to properly valida...

cve-2024-1086-writeup

CVE-2024-1086 Root Cause & Exploitation Target kernels: Linux 6.8 netfilter nftables Novel angle: Logic confusion in nftverdictinit causes refcount double-free, exploitable via heap spray to arbitrary memory write. Table of Contents 1. Background — netfilter / nftables overview 2. Root Cause...

CVE-2023-32233

Building And Configuring The instructions below were tested under Ubuntu 23.04 Lunar Lobster. Installing Build Dependencies Run the following command to install the build dependencies: sudo apt install gcc libmnl-dev libnftnl-dev Building Binary Run the following command to build the PoC binary:...

CVE-2026-31402

🛡️ CVE-2026-31402 – NFSv4 LOCK Replay Cache Heap Overflow CVE-2026-31402: Linux NFS Bug Hidden for 23 Years 📌 Overview CVE-2026-31402 is a heap overflow vulnerability in the NFSv4.0 LOCK replay cache of the Linux kernel. It arises due to improper handling of responses larger than the fixed buffer...

CVE-2026-31431

CVE-2026-31431 — Copy Fail Local Privilege Escalation in the Linux kernel's authencesn cryptographic template via AFALG + splice. Disclosed April 29, 2026 by Theori Xint Code. Overview Field| Detail ---|--- CVE| CVE-2026-31431 Nickname| Copy Fail CVSS| 7.8 HIGH Type| Local Privilege Escalation LP...

CVE-2026-93260

A flaw was found in the Linux kernel. When initialization of inter-processor interrupts fails within the PowerPC External Interrupt Virtualization Engine XIVE, the system ignores the failure after freeing allocated memory structures. This leads to a use-after-free condition when subsequent setup...

CVE-2026-93251

A flaw was found in the Linux kernel's ACPI Advanced Configuration and Power Interface subsystem. Due to improper synchronization during physical device lookups, a race condition can occur when a device is unbound concurrently. A local user could exploit this timing flaw to cause a use-after-free...

Januscape-Hotfix

Januscape Fix Library — CVE-2026-53359 简体中文 Complete fix collection for the CVE-2026-53359 guest-to-host escape vulnerability in the KVM/x86 shadow MMU. From zero-downtime livepatch to kernel upgrade — covers every operational scenario. One-liner Direct curl -sL...

CVE-2026-93259

A flaw was found in the Linux kernel. In PowerPC builds configured with position-relative code support, inline assembly routines responsible for handling interrupts fail to declare modified processor registers. This omission can result in register corruption during interrupt processing, allowing ...

CVE-2022-34918

CVE-2022-34918 LPE PoC LPE exploit for CVE-2022-34918. This exploit has been written for the kernel Linux ubuntu 5.15.0-39-generic You can find the associated write-up on our blog Usage getroot should be in the current folder $ ls getroot poc $ ./poc CVE-2022-34918...

CVE-2024-21345

Usage - python3 CVE-2024-21345.py All kernel is exploitable Get root access easily...

CVE-2026-97568

A flaw was found in the Linux kernel's Multipath TCP MPTCP implementation. A local attacker could cause a denial of service DoS by exploiting an uninitialized memory access during connection handling. When processing connection requests using SYN cookies, the kernel copies uninitialized subflow...

CVE-2026-98102

A flaw was found in the Linux kernel's IPv6 multicast implementation. When removing an active multicast source filter, an internal list pointer is updated before the read-copy update RCU grace period elapses. A local user can exploit this race condition during concurrent multicast address lookups...

cve-2022-49186-research

CVE-2022-49186: Linux Kernel Privilege Escalation Research Overview Security research and proof-of-concept exploit for CVE-2022-49186, a Linux kernel vulnerability in the Visconti clock driver that enables local privilege escalation through array overflow. Vulnerability Details Type : Array...

linux-4.19.72_CVE-2020-25705

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

root-dirtyc0w

root-dirtyc0w CVE-2016-5195 DirtyCow root privilege escalation Dirty COW was a race-condition vulnerability in the Linux kernel. This vulnerability lived inside the kernel functions which handle the copy-on-write COW feature of memory mappings and when exploited allowed processes to write to...

CVE-2026-98089

A flaw was found in the Linux kernel's network bonding driver. When transmitting or forwarding network packets in adaptive load balancing mode, the system fails to properly initialize header pointers before inspecting network traffic. An attacker transmitting packets through an affected interface...

CVE-2026-98091

A flaw was found in the Linux kernel's Btrfs file system. A local user with permissions to perform file system operations could exploit this vulnerability to cause a denial of service DoS via a system crash or potentially corrupt system memory. The issue occurs when error handling during sprout...

CVE-2026-43499

CVE-2026-43499 — Linux Kernel Futex PI Use-After-Free Bug removewaiter in kernel/locking/rtmutex.c is used by the slowlock paths but also for proxy-lock rollback in rtmutexstartproxylock when invoked from futexrequeue. In the proxy-lock case waiter::task is not current, but removewaiter incorrect...