CVE-2026-31431-check

CVE-2026-31431 チェック algifaead のローカルルート脆弱性 CVE-2026-31431 の読み取り専用チェッカー。 カーネル設定、モジュール状態、AFALG ソケットの到達可能性、および適用されている軽減策を確認し、判定を出力します。エクスプロイトコードは実行しません。 dirty-frag-check CVE-2026-43284 / CVE-2026-43500 のコンパニオンツール。 注意: これはヒューリスティックです。緑色の判定は保証ではありません。ホストを安全と判断する前に、ディストリビューションのセキュリティ情報と照合してください。MIT...

OverlayFS-CVE-2021-3493

OverlayFS — CVE-2021–3493 || Writeup || Tryhackme 📖 はじめに OverlayFSとは？ OverlayFS は Linux カーネルモジュールであり、システムが複数のマウントポイントを1つに結合し、それぞれのファイルを1つのディレクトリ構造内でアクセスできるようにします。 これはライブ USB やその他の特殊なアプリケーションでよく使われます。一つの用途は、読み取り専用のルートファイルシステムを持ち、別のパーティションを「オーバーレイ」して、アプリケーションが一時ファイルシステムに書き込めるようにすることです。 OverlayFS...

CVE-2018-11776

CVE-2018-11776 攻撃者がリモートでコードを実行し、Apache Struts ベースのアプリケーションを制御できるようにする CVE-2018-11776 脆弱性の調査。 インストールとエクスプロイト https://github.com/hook-s3c/CVE-2018-11776-Python-PoC Suricata ファイル "test.rules" には、Suricata ユーティリティ用のルールが記述されています。このルールは、悪用可能な脆弱性を検出するためのネットワークトラフィックを許可します。 ルールは /etc/suricata/suricata...

CVE-2016-8655_Android

CVE-2016-5195 GoldFish 3.4 これはgoldfish 3.4エミュレータで動作します Initroot: https://alephsecurity.com/2017/06/07/initroot-moto/ が私のデバイス harpia 向けに公開されたため、エクスプロイトを私のデバイス harpia/... に移植する作業を中止しました。 このプロジェクトに取り組んだことで多くのことを学びましたが、initrootの方がより良い選択肢のようです。 goldifsh/... には、このエクスプロイトをAndroid上で実行するためのファイルが含まれています。...

ane

Asahi Neural Engine 逆向工程实现的 Apple Neural Engine ANE Linux 驱动。 这里的一切都与 Linux 相关。 ane/：内核模块（ane.ko）。应尽快并入内核树。 docs/：文档。仍在完善中。请勿查看。 libane/：用户空间库。 python/：libane 的 Python 绑定。...

Linux Distros Unpatched Vulnerability : CVE-2026-89909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LoongArch: KVM: Free init resources if kvminit fails kvmloongarchinit calls kvmloongarchenvinit to allocate the per-CPU kvmcontext vmcs and kvmloongarchops and ...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: i40e: Fixed a kernel crash during module removal The driver incorrectly releases the client instance, and subsequent removal of the i40e module leads to a kernel crash. Reproducing the issue: 1. Perform an offline ethtool test...

Astra Linux – Vulnerability in linux-astra-modules-5.4, linux-astra-modules-5.10

The vulnerability of the pdplPut function in the linux-astra-modules kernel module is related to the assignment of a null pointer. Exploiting this vulnerability allows an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-89612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid MFT LCNs from boot sector The NTFS boot sector stores the MFT and MFTMi...

Linux Distros Unpatched Vulnerability : CVE-2026-80986

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages On a link whose device has maxrecvsge == 1 there is no shared v2 receive buffer, and...

Linux Distros Unpatched Vulnerability : CVE-2026-89657

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libceph: validate OSD extent maps before cursor advance net/ceph/osdclient.c:osdsparseread validates that the sparse-read data length matches the summed extent...

The vulnerability of the sctp_unpack_cookie() function in the net/sctp/sm_make_chunk.c module of the Linux operating system’s SCTP kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sctpunpackcookie function in the net/sctp/smmakechunk.c module of the Linux operating system’s SCTP protocol implementation is related to improper handling of length parameter mismatches. Exploiting this vulnerability allows a remote attacker to compromise the...

Linux Distros Unpatched Vulnerability : CVE-2026-80878

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afs: Fix leak of ungot volume Fix afslookupvolumercu so that it doesn't leak a dying volume if afstrygetvolume fails. CVE-2026-80878 Note that Nessus relies on...

The vulnerability of the nft_exthdr_init() function in the net/netfilter/nft_exthdr.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nftexthdrinit function in the net/netfilter/nftexthdr.c module of the netfilter component of the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

The vulnerability of the futex_requeue() function in the kernel/futex/requeue.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the futexrequeue function in the kernel/futex/requeue.c module of the Linux operating system is related to the swapping of pointers. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `ivpu_ms_get_info_ioctl()` function in the `drivers/accel/ivpu/ivpu_ms.c` kernel module of the Linux operating system allows a attacker to gain access to protected information or cause a service failure.

The vulnerability of the ivpumsgetinfoioctl function in the drivers/accel/ivpu/ivpums.c kernel module of the Linux operating system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability may allow an attacker to access protected information...

The vulnerability of the oaktrail_lvds_init() function in the drivers/gpu/drm/gma500/oaktrail_lvds.c driver code of the Direct Rendering Infrastructure (DRI) kernel module in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the oaktraillvdsinit function in the drivers/gpu/drm/gma500/oaktraillvds.c driver for the Direct Rendering Infrastructure DRI kernel of the Linux operating system leads to unlimited resource allocation. Exploiting this vulnerability can allow an attacker to cause a service...

Linux Distros Unpatched Vulnerability : CVE-2026-80613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - veth: fix NAPI leak in XDP enable error path During XDP enablement in veth, if xdprxqinforeg or xdprxqinforegmemmodel fails, the driver rolls back the changes...

Linux Distros Unpatched Vulnerability : CVE-2026-80672

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: fix u16 truncation of restart- area length check ntfscheckrestartarea validates that...

Linux Distros Unpatched Vulnerability : CVE-2026-80645

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rapidio/tsi721: prevent a bad dereference in tsi721dbdpc With a listforeach loop, if we don't find the item we are looking for in the list, then the loop exits...