313217 matches found
CVE-2026-80837
A flaw was found in the Linux kernel. A race condition exists in the netfilter's nftables subsystem when handling packet path object notifications. This can lead to a use-after-free vulnerability, allowing a local or remote attacker to send specially crafted packets, potentially causing a denial ...
CVE-2026-80841
A flaw was found in the Linux kernel's net/packet component, specifically within the AFPACKET transmission ring. This vulnerability occurs because virtual memory allocated for network packet handling is prematurely released while active network buffers socket kernel buffers, or skbs still hold...
CVE-2026-80780
A flaw was found in the Linux kernel's Human Interface Device HID pidff driver. A remote attacker, by plugging in a specially crafted malicious USB device, can trigger an out-of-bounds write in the hidpidffinitwithquirks function. This occurs because the function fails to validate if the input li...
CVE-2026-80848
A flaw was found in the xfrm: espintcp component of the Linux kernel. A race condition exists during the closure of espintcp sockets, where a memory buffer skb can be freed while still being accessed by another process. This Use-After-Free UAF vulnerability could allow a local attacker to cause...
CyberMeowfia
Sitio web: nebusec.ai ยท Twitter @nebusecurity ยท Lista de bugs 885+ Seguimiento de IonStack, sigue https://github.com/NebuSec/CyberMeowfia/issues/44 รltimas investigaciones IonStack parte II : GhostLock, un stack-UAF que ha existido en TODAS las distribuciones de Linux durante 15 aรฑos Linux Kernel...
CVE-2026-80849
A flaw was found in the Linux kernel's TCP Authentication Option TCP-AO implementation. When a network connection using TCP-AO is re-established with a different server, a timing issue can cause the system to attempt to use memory that has already been released. This 'use-after-free' vulnerabilit...
CVE-2026-80840
A flaw was found in the Linux kernel's IPv6 Segment Routing over IPv6 SRv6 implementation. A remote attacker can exploit this vulnerability by sending specially crafted IPv6 packets that are then decapsulated as IPv4 packets. Due to improper handling of data during this process, the system attemp...
CVE-2026-80778
A flaw was found in the Linux kernel. A race condition exists in the futex/pi Fast Userspace Mutexes / Priority Inheritance subsystem. When a private futex key borrows a waiter's memory management mm structure without proper referencing, the attachtopiowner function can accept an owner from a...
CVE-2022-0847-dirty-pipe-checker
CVE-2022-0847-dirty-pipe-checker Script Bash para comprobar CVE-2022-0847 Dirty Pipe Resumen Esta es la historia de CVE-2022-0847, una vulnerabilidad en el kernel de Linux desde la versiรณn 5.8 que permite sobrescribir datos en archivos de solo lectura arbitrarios. Esto conduce a una escalada de...
CVE-2017-5123
CVE-2017-5123 Escalada de privilegios en Linux explotando la llamada al sistema waitid. El exploit es presentado por @XeR0x2A y @chaignc de HexpressoTeam รบnicamente con fines educativos. El error fue introducido el 21 de mayo de 2017 y corregido el 9 de octubre de 2017; se sabe que 4.14.0-rc4+ es...
CVE-2026-72366
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfscreatewritereq to handle async cache object creation netfscreatewritereq will skip caching if the fscache cookie is disabled, but this is a problem because async cache object creation might not have got far enough...
oppo-ghostlock
oppo-ghostlock GhostLock CVE-2026-43499 โ OPPO Find N2 Linux ๅ ๆ ธๆๆ็ ็ฉถ ้กน็ฎๆฆ่ฟฐ GhostLock CVE-2026-43499 ๆฏไธไธชๅฝฑๅ Linux 2.6.39 ่ณ 7.1-rc1 ็ๅ ๆ ธๆ UAF ๆผๆด๏ผ้่ฟ FUTEXCMPREQUEUEPI ็ซๆๆกไปถ่งฆๅใๆฌ้กน็ฎๅฐ NebuSec/CyberMeowfia ็ x8664 exploit ้้ ๅฐ OPPO Find N2 ARM64, kernel 5.10.236ใ ้กน็ฎ็ถๆ ่ฟญไปฃไธญ โ ๅคไธชๅฉ็จ้ถๆฎตๅทฒ้ช่ฏ้่ฟ๏ผไฝๆ ธๅฟ้ปๅก็น๏ผCFI bypass /...
cve-2025-39682
CVE-2025-39682 exploit on kernelCTF mitigation instance This is also my first ? idk, this is a variant of CVE-2024-58239 1-day exploit. Patch: tls: fix handling of zero-length records on the rxlist This CVE was used in exp398 and and exp403. kernelCTF spreadsheet. For folder structures and how to...
poc-cve-collection
poc-cve-collection Poc CVE Collection ๐งช Collects CVE PoCs and backs them up to the Internet Archive when they are unavailable on GitHub. Donate Support the maintenance of this project with PayPal or by scanning the QR code below. Example CVE-2026-31431 Title crypto: algifaead - Revert to operatin...
CVE-2026-90136
A flaw was found in the Linux kernel's AMD HSMP Host System Management Port hardware monitoring hwmon driver. A local user can trigger an issue by attempting to set a negative power cap value. Due to an incorrect conversion of this negative input, a nonsensical, extremely high power limit is sent...
CVE-2026-90202
A flaw was found in the Linux kernel's mpt3sas SCSI driver. The basereleasememorypools function attempts to free PCIe SGL Scatter-Gather List buffers that were never allocated, particularly after a partial setup failure. This can lead to a NULL pointer dereference, potentially causing a system...
CVE-2026-80898
A flaw was found in the netfs component of the Linux kernel. When a copy-to-cache append operation fails, the PGprivate2 state and its associated reference are not properly released. This oversight can lead to a resource leak, potentially causing system instability or a denial of service DoS...
CVE-2026-80897
A flaw was found in the netfs component of the Linux kernel. When netfspreparereaditerator processes readahead folios, it may fail to release these folios if an error occurs during the rollingbufferloadfromra operation. This oversight can lead to a memory leak, potentially allowing a local attack...
CVE-2026-80727
A flaw was found in the Linux kernel's x86 Machine Check Exception MCE handling. During the discovery of Corrected Machine Check Interrupts CMCI, a timer used for storm detection is modified before it is properly initialized. This improper timer setup can lead to kernel warnings and system...
CVE-2026-92493
A flaw was found in the Linux kernel's amd-pstate-ut driver. A local user can trigger a kernel NULL pointer dereference by loading the amdpstateut module on a non-AMD platform, such as an Intel system. This can lead to a system crash, resulting in a Denial of Service DoS...