copyfail2_electric_boogaloo_fix

copyfail2electricboogaloofix 针对 copyfail 变种（copyfail2electricboogaloo）的临时缓解措施——无特权 Linux LPE，通过 xfrm ESP-in-UDP MSGSPLICEPAGES no-COW 快速路径实现。将数据写入任意可读文件的页面缓存中。将 /etc/passwd 中的 nologin 行覆盖为 sick::0:0:…:/:/bin/bash 并 su 进去。与 Copy Fail（CVE-2026-31431）属于同一类，但子系统不同。 重要提示： 在 /etc/modprobe.d...

UBUNTU-CVE-2026-89487

In the Linux kernel, the following vulnerability has been resolved: openvswitch: only skbtxerror a packet we are about to drop queueuserspacepacket borrows the packet skb -- it only copies it into a private netlink message userskb and does not own it; on return doexecuteactions keeps forwarding i...

Linux Distros Unpatched Vulnerability : CVE-2026-89487

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openvswitch: only skbtxerror a packet we are about to drop queueuserspacepacket borrows the packet skb -- it only copies it into a private netlink message users...

AZL-100568 CVE-2026-89487 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: openvswitch: only skbtxerror a packet we are about to drop queueuserspacepacket borrows the packet skb -- it only copies it into a private netlink message userskb and does not own it; on return doexecuteactions keeps forwarding i...

EUVD-2026-76393

In the Linux kernel, the following vulnerability has been resolved: openvswitch: only skbtxerror a packet we are about to drop queueuserspacepacket borrows the packet skb -- it only copies it into a private netlink message userskb and does not own it; on return doexecuteactions keeps forwarding i...

CVE-2026-89487 openvswitch: only skb_tx_error() a packet we are about to drop

In the Linux kernel, the following vulnerability has been resolved: openvswitch: only skbtxerror a packet we are about to drop queueuserspacepacket borrows the packet skb -- it only copies it into a private netlink message userskb and does not own it; on return doexecuteactions keeps forwarding i...

CVE-2026-31431

CopyFail2 CVE-2026-31431 - Python 实现 CopyFail2 内核漏洞的 Python 移植版，利用 xfrm ESP-in-UDP MSGSPLICEPAGES 无 COW 快速路径，实现非特权 Linux 本地权限提升。 将 /etc/passwd 中的 nologin/false 条目替换为无密码的 uid-0 用户，并通过 su 进入 root shell。 漏洞详情 该内核缺陷位于 xfrm ESP-in-UDP 封装所使用的 UDP splice 路径中。使用 MSGSPLICEPAGES 将 splice 数据写入 UDP...

CVE-2026-43503

CVE-2026-43503 DirtyClone - 概念验证 - SecurewithUmer DirtyClone 的概念验证 — 一种 Linux 内核本地权限提升漏洞。 此仓库包含一个有效的概念验证 ，该验证允许非特权本地用户通过利用通过克隆套接字缓冲区导致的页缓存损坏来获取 root 权限。 关于 DirtyClone DirtyClone CVE-2026-43503 是 Dirty 家族的第四个成员（DirtyPipe → DirtyFrag → DirtyClone）。 它滥用了在使用带有 ESP-in-UDP 的 TEE netfilter 目标时...