CVE-2026-98035

A flaw was found in the Linux kernel's BPF subsystem. When updating or deleting elements in resizable hash tables, the kernel directly releases special object fields rather than safely deferring their cancellation, which is not safe when running in Non-Maskable Interrupt NMI context. A local user...

cve-2020-14386

Reproducer for CVE-2020-14386 Pre-built container: registry.svc.ci.openshift.org/coreos/cve-2020-14386 You probably want to test against an explicit node, like this: root@kitploit: apiVersion: v1 kind: Pod metadata: name: cve-2020-14386 spec: restartPolicy: Never nodeName: containers: - name:...

CVE-2026-98033

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. The kernel's program verifier improperly resets tracking identifiers when preparing callback functions, causing it to confuse different internal data structures sharing the same template. A local user with permission to...

cve-2018-17182

define GNUSOURCE include include include include include include include include include include include int vmaspamcontrolfd = -1; int threaddonefd = -1; int vmaspamdonefd = -1; void semincint fd uint64t val = 1; if writefd, &val, 8 != 8 err1, "seminc"; void semdecint fd uint64t val; if readfd,...

SwishDbgExt

SwishDbgExt SwishDbgExt es una extensión de depuración de Microsoft WinDbg que amplía el conjunto de comandos disponibles de Microsoft WinDbg, pero también corrige y mejora comandos existentes. Esta extensión ha sido desarrollada por Matt Suiche @msuiche – no dudes en contactar a...

PF_RING

PFRING™ Introducción PFRING™ es un módulo del kernel de Linux y un framework de espacio de usuario que te permite procesar paquetes a altas velocidades mientras te proporciona una API consistente para aplicaciones de procesamiento de paquetes. ¿Quién necesita PFRING™? Básicamente, cualquiera que...

kmon

Administrador del Kernel de Linux y Monitor de Actividad 🐧💻...

cve-2025-39682

CVE-2025-39682 exploit on kernelCTF mitigation instance This is also my first ? idk, this is a variant of CVE-2024-58239 1-day exploit. Patch: tls: fix handling of zero-length records on the rxlist This CVE was used in exp398 and and exp403. kernelCTF spreadsheet. For folder structures and how to...

GhostLock

GhostLock 5.10 This is a kernel root exploit for the Amazon Fire Max 11 sunstone and the Fire TV Stick 4K Max 2nd Gen / 2023 karat, adapted from CVE-2026-43499 in CyberMeowfia. Supported devices Two devices are supported, both on Fire OS 8. Each has its own build target. Fire Max 11 sunstone Fire...

Dirty-Pipe

Dirty Pipe Exploit CVE-2022-0847 Resumen Este repositorio contiene una Prueba de Concepto PoC del exploit para la vulnerabilidad Dirty Pipe CVE-2022-0847 , que afecta a las versiones del kernel de Linux 5.8 a 5.16. Esta vulnerabilidad permite la escalada de privilegios locales al explotar el mane...

swapgs-attack-poc

PoC para el ataque SWAPGS CVE-2019-1125 Este repositorio contiene las fuentes del PoC del ataque SWAPGS mostrado públicamente en Black Hat USA, 2019. Contenido leakgsbkva - variante 1 busca valores aleatorios en la memoria del kernel; limitado a la cabecera de la imagen del kernel PE leakgsbkvat ...

CVE-2026-98032

A flaw was found in the Linux kernel's tracing subsystem. A race condition occurs when concurrent subbuffer resizing takes place while raw trace data is being read. A local user could exploit this flaw to cause a Denial of Service DoS or disclose uninitialized kernel memory due to stale buffer si...

CVE-2026-98030

A flaw was found in the Linux kernel's Broadcom Starfighter 2 bcmsf2 network switch driver. An unprivileged local user can exploit this vulnerability by issuing a network control request to retrieve classification rules while providing a buffer size smaller than the number of active rules. Becaus...

CVE-2026-98031

A flaw was found in the Linux kernel. When removing a nexthop routing group entry, an error path fails to properly initialize an error-reporting pointer, causing the kernel to dereference uninitialized stack memory. A local user with network administration privileges could exploit this flaw durin...

CVE-2026-97541

A flaw was found in the Linux kernel's ath9khtc wireless driver. The driver stores a pointer to a USB device identifier that can be freed after the initial device probe when dynamic device identifiers are used. A local attacker could exploit this use-after-free vulnerability when the driver later...

CVE-2023-2598

CVE-2023-2598 what's iouring? ​ iouring is a system call interface for Linux. It has supported almost all system call so far, not only read and write initially. It enables an application to initiate system calls that can be performed asynchronously. Submission and Completion Queues At the core of...

BestEdrOfTheMarket

Mejor EDR del Mercado BEOTM V3 🐲🏴‍☠️ Best Edr Of The Market es un laboratorio de código abierto diseñado para implementar y comprender, desde una perspectiva de bajo nivel, los métodos de detección utilizados por los productos de seguridad de detección y respuesta de endpoints EDR y sus soluciones...

CVE-2026-97540

A flaw was found in the Linux kernel's Pegasus USB Ethernet driver. This vulnerability can lead to a Denial of Service DoS through a system crash. When dynamic device identifiers are configured, the driver improperly uses pointer calculations on heap memory instead of referencing its static devic...

CVE-2026-98029

A flaw was found in the Linux kernel's Netronome Flow Processor NFP network driver. The driver fails to validate the user-provided buffer size when retrieving network flow steering rules. An unprivileged local user can exploit this vulnerability to trigger an out-of-bounds memory write or a null...

CVE-2026-98028

A flaw was found in the Linux kernel's Netronome Flow Processor NFP network driver. When replacing an existing flow steering rule fails during hardware reprogramming, the driver fails to remove the old rule from its internal list, creating an inconsistency with the active rule counter. A local us...