vulnerability-analysis-

Linux Kernel Vulnerability Analysis: CVE-2021-26708 Overview This repository contains a complete reproduction and analysis of CVE-2021-26708 — a use-after-free vulnerability caused by a race condition in AFVSOCK socket operations in the Linux kernel v5.10.12. The entire experimental environment w...

CVE-2026-31431

CVE-2026-31431 CVE-2026-31431 detection and testing 0x01 Quick Start Some target environments do not have Python installed, so this privilege escalation logic was rewritten in C. 1. Compile Run the following command on your Linux machine or WSL using -static is recommended to avoid GLIBC version...

CVE-2026-53365

CVE-2026-53365 — VsockDrop:iouring + AFVSOCK Zero-Copy Reference Count Underflow, Page-Cache Overwrite Privilege Escalation HackSpeak distribution mirror. This repository is a distribution mirror of MaherAzzouzi/vsockdrop , with code identical to upstream; upstream does not include a LICENSE, so...

Exploit for Missing Release of Memory after Effective Lifetime in Linux Linux_Kernel

VsockDrop-Adapted An adapted version of MaherAzzouzi's Vsock...

Linux kernel VFSOCK Buffer Overflow

The vulnerability of the vsockupdatebuffersize function in the net/vmwvsock/afvsock.c module, which is part of the Linux kernel’s networking functions, is related to the incorrect order of operation of the input data validation mechanism. Exploiting this vulnerability could allow an attacker to...

CVE-2020-15801

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:46+00:00| seen| https://t.me/hackingAttack/49651 2026-09-01 20:01:51+00:00| seen| https://t.me/hackingAttack/45703 2026-09-02 01:01:58+00:00| seen| https://t.me/hackingAttack/49651 2026-09-02 01:02:04+00:00| seen|...

Exploit for Missing Release of Memory after Effective Lifetime in Linux Linux_Kernel

CVE-2026-53365 — VsockDrop:iouring + AFVSOCK: Improper refer...

EUVD-2018-6531

Malware in sbrugna...

EUVD-2021-13497

Malware in sbrugna...

CVE-2025-1290

A race condition Use-After-Free vulnerability exists in the virtiotransportspaceupdate function within the Kernel 5.4 on ChromeOS. Concurrent allocation and freeing of the virtiovsocksock structure during an AFVSOCK connect syscall can occur before a worker thread accesses it resulting in a...

Linux kernel vsock_remove_sock Heap Buffer Overflow DoS

The vulnerability of the vsockremovesock function in the net/vmwvsock/afvsock.c module, which implements networking functions in the Linux kernel, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

CVE-2021-47024

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: free queued packets when closing socket As reported by syzbot 1, there is a memory leak while closing the socket. We partially solved this issue with commit ac03046ece2b "vsock/virtio: free packets during the socket...

CVE-2021-47024

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: free queued packets when closing socket As reported by syzbot 1, there is a memory leak while closing the socket. We partially solved this issue with commit ac03046ece2b "vsock/virtio: free packets during the socket...

CVE-2021-47024 vsock/virtio: free queued packets when closing socket

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: free queued packets when closing socket As reported by syzbot 1, there is a memory leak while closing the socket. We partially solved this issue with commit ac03046ece2b "vsock/virtio: free packets during the socket...

PT-2023-9741

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.0-rc3 Description The issue is related to the virtio/vsock component of the Linux kernel. It occurs because the buf alloc and fwd cnt fields of the struct virtio vsock hdr are not initialized when a new skb i...

K12915342: Linux kernel vulnerability CVE-2018-14625

Security Advisory Description A flaw was found in the Linux Kernel where an attacker may be able to have an uncontrolled read to kernel-memory from within a vm guest. A race condition between connect and close function may allow an attacker using the AFVSOCK protocol to gather a 4 byte informatio...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by the Linux Foundation's open source operating system, Linux. Linux kernel is vulnerable to a security flaw that affects the function vsockconnect in the component IPsec's file net/vmwvsock/afvsock.c. This operation results in a memory leak. No detailed...

Updated kernel packages fix security vulnerability

This kernel update is based on upstream 5.10.14 and fixes at least the following security issues: A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AFVSOCK implementation are caused by wrong locking in net/vmwvsock/afvsock.c...

Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.10.14 and fixes at least the following security issues: nbdaddsocket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndbqueuerq use-after-free that could be triggered by local attackers with access to the nbd device via an I/O...

Ubuntu: Security Advisory (USN-4727-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...