cve-2017-5123

CVE-2017-5123 يحتوي هذا المستودع على عرض توضيحي لـ CVE-2017-5123 ، وهو باب خلفي للتحكم والأوامر عبر ICMP، وتطبيق ويب قابل للاستغلال بثغرة CWE-78 حقن أوامر نظام التشغيل. جزء من CSC 4308 - التحدي 3. المتطلبات الأساسية Linux Kernel : من 4.13 حتى وليس بما في ذلك 4.13.7 Node.js : 10.x npm : 6.x نظرة...

CVE-2022-0847-DirtyPipe-Exploit

تم العثور على ثغرة أمنية في نواة لينكس حتى الإصدارات 5.10.101/5.15.24/5.16.10 نظام تشغيل وتم تصنيفها على أنها حرجة. تؤثر هذه المشكلة على معالجة غير معروفة لمكون معالج الأنابيب Pipe Handler. تتأثر السرية والنزاهة والتوافر. تم تقديم الثغرة في 03/08/2022. تتم مشاركة الاستشارة على dirtypipe.cm4all.co...

CVE-2026-31431-Copy-Fail-R-pertoire-de-Pr-vention

🔴 CVE-2026-31431 — Copy Fail تصعيد الصلاحيات المحلي في نواة لينكس LPE — مستودع أبحاث دفاعية 📖 مقدمة Copy Fail CVE-2026-31431 هي ثغرة من نوع تصعيد الصلاحيات المحلي LPE تؤثر على نواة لينكس من خلال تلف متحكم فيه في ذاكرة التخزين المؤقت للصفحات page cache عبر آليات AFALG و splice و authencesn. يهدف ه...

CVE-2022-26937

إثبات المفهوم لتعطل نظام ملفات شبكة ويندوز CVE-2022-26937 nt!KeBugCheckEx: fffff8038996efa0 48894c2408 mov qword ptr rsp+8,rcx ss:0018:ffffd000d589ae60=0000000000000139 1: kd !analyze -v Bugcheck Analysis KERNELSECURITYCHECKFAILURE 139 A kernel component has corrupted a critical data structure. T...

Fragnesia-CVE-2026-46300

🔴 Fragnesia — CVE-2026-46300 رفع الامتيازات في نواة لينكس · CVSS 7.8 · أُعلن عنه في 14 مايو 2026 مستودع للتوعية فقط. لا يحتوي هذا المستودع على أي كود استغلال. هدفه توعية مسؤولي الأنظمة والمهندسين وفرق الأمان بطبيعة الثغرة وإجراءات المعالجة المتاحة. 📋 ملخص الحقل| القيمة ---|--- CVE| CVE-2026-46300...

CVE-2026-98182

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A local user with network administration privileges can cause a Denial of Service DoS by configuring an inactive network interface to active monitor mode and then bringing the interface up. Because the required transmit queue is...

CVE-2026-98179

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. This issue can lead to a Denial of Service DoS caused by resource exhaustion during device removal or driver unloading. Because the cleanup routine fails to release mapped input/output I/O register memory, a privileged local user could...

CVE-2026-98178

A flaw was found in the Linux kernel's AMD GPU driver. When compute subsystem initialization fails, uninitialized device structures remain attached to the graphics driver. A local user capable of triggering a GPU reset can cause the system to dereference an unallocated memory pointer, resulting i...

CVE-2026-98177

A flaw was found in the Linux kernel's AMD GPU driver amdkfd. A local user could trigger a Denial of Service DoS or system instability due to an integer underflow vulnerability during the calculation of the End of Pipe EOP ring buffer size. Under specific conditions, this improper calculation cou...

CVE-2026-98183

A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. An adjacent attacker can trigger an out-of-bounds read by transmitting specially crafted wireless mesh network frames containing empty Path Request PREQ elements. This issue occurs because the kernel reads header field...

cve-2024-1086-writeup

CVE-2024-1086 السبب الجذري والاستغلال النوى المستهدفة: Linux 6.8 netfilter nftables الزاوية الجديدة: الارتباك المنطقي في nftverdictinit يسبب refcount double-free، قابل للاستغلال عبر heap spray لكتابة عشوائية في الذاكرة. جدول المحتويات 1. الخلفية — نظرة عامة على netfilter / nftables 2. تحليل السبب...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcpconnrequest bsc1235944 bsc1269731. CVE-2026-23451: bonding: prevent potential infinite loop in bondheaderparse...

SUSE-SU-2026:4595-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcpconnrequest bsc1235944 bsc1269731. - CVE-2026-23451: bonding: prevent potential infinite loop in bondheaderpars...

CVE-2026-98371

A flaw was found in the Linux kernel's IP Traffic Flow Security IP-TFS subsystem. Incomplete length validation when reassembling fragmented inner packets allows undersized packets to trigger an internal calculation underflow. A local user or remote attacker could exploit this vulnerability by...

CVE-2026-98370

A flaw was found in the Linux kernel's IPsec Internet Protocol Security subsystem. A local attacker can exploit this issue by submitting 32-bit compatibility requests, which triggers a race condition during message translation. This flaw leads to a use-after-free condition, potentially allowing a...

CVE-2026-98369

A flaw was found in the Linux kernel's IPsec xfrm subsystem. This flaw can lead to a Denial of Service DoS due to missing synchronization locks and device references when reinjecting transport-mode network packets through workqueues. A remote attacker could exploit this vulnerability by sending...

CVE-2026-98368

A flaw was found in the Linux kernel's IPsec Encapsulating Security Payload ESP subsystem. When transmitting network packets using zero-copy operations on out-of-place paths, the kernel modifies packet fragment structures without properly updating reference counts for managed memory pages. A loca...

CVE-2026-98181

A flaw was found in the Linux kernel's Generic USB Display GUD driver. An attacker connecting a specially crafted USB device advertising a maximum number of display properties can trigger an array indexing error during property validation. This flaw leads to an out-of-bounds memory write, which c...

CVE-2026-98367

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA Soft-iWARP siw driver. A race condition occurs during connection handling if modifying a queue pair fails, releasing an internal lock before error cleanup completes. A local attacker could exploit this timing window through...

CVE-2026-98180

A flaw was found in the Linux kernel's Direct Rendering Manager DRM MSM driver. When ring buffer or virtual memory objects containing a GPU scheduler are freed, synchronization fences exported to user space continue to reference the deallocated scheduler memory. A local unprivileged attacker can...