CVE-2024-27804

CVE-2024-27804 ./build.sh ./panic.sh paniccpu 4 caller 0xfffffe0026851cdc: Unaligned kernel data abort. at pc 0xfffffe0026aed514, lr 0xfffffe0026aed5d8 saved state: 0xfffffe3a396e3200 x0: 0x000000000000000e x1: 0xfffffe1002bdc01b x2: 0x0000000000000000 x3: 0xfffffe3a396e3444 x4: 0xfffffe3a396e344...

CVE-2019-8852

CVE-2019-8852 A tfp0 bug for macOS 10.15.1 and below. Warranty Use it on your own risk. This will make you macOS panic. I build it for security researchers only. Current state Just a PoC, convert the vulnerability to a useful UAF. Tested on macOS 10.14.6 18G103 , MacBook Pro with 16 GB RAM. Credi...

CVE-2022-25636

CVE-2022-25636 This is my exploit for CVE-2022-25636. I tested it against Ubuntu 21.10 with kernel 5.13.0-30. Works about 40% of the time, in the other cases you likely get a kernel panic. The exploit might corrupt important data on heap, after an unsuccessful attempt it's best to reboot...

CVE-2026-80861

A flaw was found in the Linux kernel's USB eXtensible Host Controller Interface xHCI driver. When an xHCI host controller is inaccessible during its setup process, the driver attempts to read from an incorrectly calculated memory address. This unaligned memory access can cause a kernel panic,...

CVE-2026-93232

A flaw was found in the Linux kernel's HugeTLB huge page memory management subsystem. During system startup, an uninitialized memory dereference occurs when HugeTLB Vmemmap Optimization HVO is enabled on a kernel compiled with virtual memory debugging options. A local user able to configure or...

CVE-2026-93227

A flaw was found in the Linux kernel. This vulnerability allows a local user with control over boot parameters, or systems with specific memory alignments, to cause a Denial of Service DoS through a kernel panic. During early system boot with deferred memory initialization enabled, improper...

CVE-2026-93217

A flaw was found in the Linux kernel's memory management subsystem. A race condition can occur when an HMM-based Graphics Processing Unit GPU driver interacts with madviseMADVCOLD or MADVPAGEOUT operations. This can lead to a kernel panic, effectively causing a Denial of Service DoS on the affect...

CVE-2026-89828

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. An issue with the initialization order in the amdgpuvrammgrinit function can lead to a kernel panic. If a specific registration function fails during module loading, critical data structures are not properly initialized. This can resul...

CVE-2026-89851

A flaw was found in the Linux kernel's qla2xxx SCSI driver. An issue in the qla2x00dfsfcewrite function, responsible for parsing Fibre Channel over Ethernet FCE trace enable settings in debugfs, could lead to a null pointer dereference. A local attacker with access to debugfs could trigger this...

CVE-2026-98493

A flaw was found in the Linux kernel. This vulnerability allows an attacker capable of specifying system boot or network parameters to cause a Denial of Service DoS or memory corruption. During Dynamic Host Configuration Protocol DHCP autoconfiguration, the kernel appends options into a fixed-siz...

CVE-2024-27815

CVE-2024-27815 XNU kernel heap buffer overflow in sbconcatmbufs bsd/kern/uipcsocket2.c, reachable by an unprivileged local user over the AFUNIX datagram socket layer. A socket address of up to SOCKMAXADDRLEN 255 bytes is copied into an mbuf data area only MLEN 224 bytes long, overwriting up to 31...

CVE-2026-93135

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF. When the Just-In-Time JIT compiler is unavailable or fails, BPF programs that use inlined helper functions are processed by the interpreter with unpatched helper identifiers. This incorrect processing can lead to an instruction...

CVE-2023-6931

CVE-2023-6931 Kernel Panic PoC for CVE-2023-6931 Description CVE-2023-6931 is a vulnerability in perfevent that leads to a heap buffer overflow caused by an integer overflow in the readsize of a group. What is a Performance Event perf event? perfevents is a performance monitoring and analysis...

CVE-2026-90366

A flaw was found in the Linux kernel's mt76 Wi-Fi driver, specifically affecting mt7996 devices. When a Channel Switch Announcement CSA countdown is active and Multiple Basic Service Set Identifier MBSSID is enabled, the driver may attempt to write more beacon data than allocated. This can lead t...

CVE-2026-80925

A flaw was found in the Linux kernel's VLAN module. When hardware VLAN TX offload is enabled or disabled, it can lead to timing issues, known as data races, where different parts of the system access and modify shared data concurrently without proper synchronization. This can cause the system to...

cve-2026-23398-poc

Lab: CVE-2026-23398 ICMP / ipnopmtudisc=3 Reproducible lab for the Linux kernel bug in icmptagvalidation NULL dereference when net.ipv4.ipnopmtudisc = 3 and a Fragmentation Needed ICMP arrives whose quoted inner IPv4 header uses a protocol number with no handler in inetprotos. Authorized use only...

CVE-2019-14079

USB device fuzzing on Android CVE-2019-14079 This blog post is about a simple bug I found in my android deviceMI A2 - runs stock android using USB device fuzzing and was marked as high severity by google. The bug was in Qualcomm USB driver which was later patched and disclosed in March 2020 Andro...

CVE-2025-29338

CVE-2025-29338 — Security Advisory Buffer Overflow in NXP moal.ko Wi-Fi Kernel Driver woalsetupmoduleparam / parsecfggetline Field| Value ---|--- CVE ID| CVE-2025-29338 Severity| High CVSS v3.1 Score| 7.8 CVSS v3.1 Vector| CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Vulnerability Type| Stack-Bas...

CVE-2017-2671

Linux kernel CVE-2017-2671 Local Denial of Service Vulnerability what !! CVE-2017-2671 1 Linux kernel CVE-2017-2671 Local Denial of Service consequently cannot ensure that disconnect function calls are safe, which allows local users to cause a denial of service panic by leveraging access to the...

Linux Distros Unpatched Vulnerability : CVE-2026-98485

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: ip6trt: fix zero-address non-strict match out-of-bounds read rtmt6check permits rules to be configured with rtinfo-addrnr == 0 even when address...