LocalStranger

LocalStranger LocalStranger is a Proof of Concept project designed to demonstrate how dangerous a vulnerable kernel-mode driver actually is. WinNotify.sys as I call it, msft.sys, is a very dangerous vulnerable driver exposing arbitrary kernel primitives due to a complete lack of caller validation...

CVE-2026-80877

A flaw was found in the Linux kernel's AFS Andrew File System module. This vulnerability occurs in the afsupdatecell function when it attempts to update a volume list vllist that is empty. Under specific conditions, the old vllist is not properly released, leading to a memory leak. A local attack...

CVE-2026-80856

A flaw was found in the Linux kernel's FUSE Filesystem in Userspace component. A local user could trigger a lock leak within the fusedosetattr function during a Direct Access DAX truncate operation. If a writeback flush fails, a critical lock is not properly released, causing subsequent file...

CVE-2026-80855

A flaw was found in the Linux kernel's Filesystem in Userspace FUSE component. A local user could exploit this by opening a file with the OTRUNC flag, which attempts to truncate the file. If a signal interrupts the Direct Access DAX page invalidation process during this operation, a lock can be...

CVE-2026-80843

A flaw was found in the Linux kernel's xfrm IPSec framework component. This vulnerability occurs when the xfrmstateconstruct function incorrectly manages memory allocations for authentication algorithms. Specifically, it can overwrite an existing allocation, leading to a memory leak. Over time,...

CVE-2026-80811

A flaw was found in the Linux kernel's iouring/cmd component. This vulnerability allows for a memory leak due to iovec arrays not being properly freed when asynchronous commands are not recycled. An attacker could potentially exploit this by triggering specific workloads, such as NVMe passthrough...

CVE-2026-80821

A flaw was found in the Linux kernel's nvmet PCI Express Endpoint Function PCI-EPF component. A remote attacker can exploit this vulnerability by sending specially crafted Create IO Completion Queue CQ commands. This leads to a resource leak, as the system fails to properly release references to...

CVE-2026-80797

A flaw was found in the Near Field Communication NFC PN533 driver in the Linux kernel. When a PN533 device is removed while data fragments are still queued, the driver's cleanup process fails to properly release these fragments, resulting in a memory leak. This can lead to system instability or...

CVE-2026-80784

A flaw was found in the Linux kernel's Multipath TCP MPTCP component. A race condition exists during socket teardown and concurrent userspace Multipath TCP MPTCP general announce operations. This can allow a local attacker to trigger a memory leak by causing an allocation to occur after a list ha...

cifswitch-check

cifswitch-check A shell script to check whether a Linux system is exposed to CIFSwitch CVE-2026-46243 — a local privilege escalation vulnerability in the Linux kernel's CIFS/SMB client that has been present since 2007. Runs on bare-metal hosts, VMs, and inside containers. Designed to drop straigh...

Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes various security issues: The following security issues were fixed: CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd bsc1272391. CVE-2026-63920: ipv6: validate extension header length...

SUSE-SU-2026:4570-1 Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes various security issues: The following security issues were fixed: - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd bsc1272391. - CVE-2026-63920: ipv6: validate extension header...

Detections-CVE-2026-31431

MOVING TO: https://github.com/insomnisec/publiccvedetections FOR BETTER LONG TERM MANAGEMENT OF DETECTION PUBLICATIONS THIS REPO WILL BE REMOVED IN JUNE 2026 PLEASE USE THE OTHER REPO GOING FORWARD CVE-2026-31431 "Copy Fail" — Detection & Response Package Published: 2026-04-30 CVSSv3: 7.8 High...

CVE-2026-31431-Metasploit-exploit

CVE-2026-31431 - Linux Kernel AFALG "Copy Fail" Local Privilege Escalation An automated Metasploit Post-Exploitation module that leverages CVE-2026-31431 popularly known as "Copy Fail" to perform Local Privilege Escalation LPE on vulnerable Linux kernels versions 4.14 through 6.19.12. Description...

3 lessons from frontier AI vulnerability research

In this article 1. Shift 1. From frontier capability to scale 2. Shift 2. From token consumption to reasoning economics 3. Shift 3. Validation and remediation as a continuous learning loop 4. Transferring security research to help open source projects 5. Open-source vulnerability reporting snapsh...

CVE-2026-80902

A flaw was found in the Linux kernel's sun6i-dma component. When Direct Memory Access DMA transfers are terminated, active descriptors are not correctly reclaimed. This issue leads to a permanent memory leak and can also cause corruption of internal data structures within the kernel...

CVE-2026-80903

A flaw was found in the Linux kernel's Direct Rendering Manager DRM Xe output/audio OA module. When a specific configuration emission function fails, it does not properly release allocated memory for synchronization entries. This oversight leads to a memory leak, where system memory becomes...

CVE-2026-80885

A flaw was found in the Linux kernel's Andrew File System AFS component. The rxrpc Out-of-Band OOB message handler did not properly cancel its processing. This could lead to the handler continuing to process messages even when the network namespace is no longer active, or mishandling security...

Relapse-Exploit

PS5 Relapse Exploit Supported firmware: 7.00 through 13.60. Usage The default payloads are stored in payloads/ after a successful run, the ELF loader listens on port 9021. Stability notes Webkit may need several attempts, reload the page if the browser stalls. The kernel exploit may hang or panic...

CVE-2022-0847-Dirty-Pipe-

CVE-2022-0847-Dirty-Pipe- this is a repo who is facing a escalation issue in their linux system and a news regarding problem of "Dirty pipeline" Max Kellermann, a developer at CM4all a German web hosting company, found it in early 2022 but not by checking for vulnerability. He was debugging when ...