poc-cve-collection

poc-cve-collection Poc CVE Collection 🧪 Collects CVE PoCs and backs them up to the Internet Archive when they are unavailable on GitHub. Donate Support the maintenance of this project with PayPal or by scanning the QR code below. Example root@kitploit: CVE-2026-31431 Title crypto: algifaead -...

copy-fail-mcp

Copy Fail MCP 📖 Guía de instalación — inicio rápido, configuración manual y solución de problemas CVE-2026-31431 — La peor vulnerabilidad de Linux jamás descubierta. Ahora controlable mediante MCP. 732 bytes de Python. Sin compilación. Sin condición de carrera. Sin offsets por distribución. Un so...

Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284

Remoto root@kitploit: git clone https://github.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284.git && cd Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284 && gcc -O0 -Wall -o exp exp.c -lutil && ./exp root@kitploit: git clone...

CopyFail-Exploits-CVE-2026-31431

CVE-2026-31431 — Copy Fail Repo educativo con implementaciones en múltiples lenguajes del exploit Copy Fail. Creado y mantenido por @shotafry — porque leer el CVE no es suficiente. Hay que reproducirlo. 📖 Read this in English Índice ¿Qué es Copy Fail? ¿Quién lo descubrió? Gravedad y CVSS ¿Cómo...

CVE-2026-31431-Copy-Fail

CVE-2026-31431 — Copy Fail Severidad: Crítica CVSS v3.1: 9.8 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Estado: Exploit público disponible Resumen CVE-2026-31431 "Copy Fail" es una vulnerabilidad de escalada de privilegios local en el subsistema criptográfico del kernel de Linux. Cualquier usuario sin...

CVE-2026-31431

CVE-2026-31431 - Copy Fail Copy Fail es un bug lógico en el subsistema criptográfico del kernel de Linux CVE-2026-31431. Una optimización de 2017 en algifaead.c colocó accidentalmente páginas de caché de página en un scatterlist escribible. El algoritmo AEAD authescesn escribe 4 bytes de scratch...

kernel: crypto: ccp - copy IV using skcipher ivsize

A flaw was found in the Linux kernel's cryptographic coprocessor CCP driver. When processing AFALG rfc3686-ctr-aes-ccp requests, the ccpaescomplete function attempts to restore more data than the allocated buffer for the Initialization Vector IV can hold. This leads to a buffer overrun, which can...

Linux Kernel Crypto Subsystem Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

EUVD-2026-75099

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...

kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests

A flaw was found in the Linux kernel's pcrypt component. This vulnerability involves how the system handles certain requests, specifically MAYBACKLOG requests, which can indicate a temporary busy state. If not properly managed, the system's processing of these requests could lead to resource...

SUSE-SU-2026:23483-1 Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-44.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. - CVE-2026-23449: net/sched: teql: Fix double-free in teqlmasterxmit bsc1262213. -...

EUVD-2026-71285

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Remove cryptorng interface qcom-rng.c exposes the same hardware through two completely separate interfaces, cryptorng and hwrng. However, the implementation of this is buggy because it permits generation...

The vulnerability of the af_alg_cmsg_send() function in the crypto/af_alg.c module of the Linux kernel’s cryptographic subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the afalgcmsgsend function in the crypto/afalg.c module of the Linux kernel’s cryptographic subsystem is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

SUSE-SU-2026:23373-1 Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie bsc1270023 - CVE-2026-53246: sctp: validate cached peer INIT chunk length in...

SUSE-SU-2026:23371-1 Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie bsc1270023 - CVE-2026-53246: sctp: validate cached peer INIT chunk length in...

CVE-2026-80709

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs There is a wrong upper limit check for the domain value when an EP11 CPRB is processed for sending to a crypto card. This check is only active on custom device node...

The vulnerability of the af_alg_pull_tsgl() function in the crypto/af_alg.c module of the Linux kernel’s cryptographic subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the afalgpulltsgl function in the crypto/afalg.c module of the Linux kernel’s cryptographic subsystem is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

SUSE SLES15: kernel-livepatch-6_4_0-150600_23_103-default / etc (SUSE-SU-2026:3761-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3761-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.103 fixes various security issues: The following security issues were fixed: -...

SUSE-SU-2026:23292-1 Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split bsc1259134. - CVE-2026-23449: net/sched: teql: Fix double-free in teqlmasterxmit...

CVE-2026-80522 crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()

In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - fix rctx-cryptlen calculation in tegragcmdoonereq Perform rctx-cryptlen calculation in tegragcmdoonereq the same way it is done in tegraccmcryptinit. The current formulae may lead to a crash if a caller does not...