PS4-5.05-Kernel-Exploit

Exploit del kernel PS4 5.05 Riepilogo In questo progetto troverai un'implementazione completa del secondo exploit del kernel "bpf" per PlayStation 4 sulla versione 5.05. Ti permetterà di eseguire codice arbitrario in modalità kernel, per consentire il jailbreak e modifiche a livello di kernel del...

AZL-96998 CVE-2026-74583 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsroute: fix fastmap use-after-free on filter The route4 classifier maintains a 16-slot fastmap cache that stores raw struct route4filter pointers indexed by id, iif. The reader route4classify populates this cache via...

CVE-2026-74582

In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hardheaderlen in non-ring send paths packetsnd reads dev-hardheaderlen multiple times while allocating and constructing an skb. Device reconfiguration can change this value concurrently, for example through...

AZL-97001 CVE-2026-74581 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: clear suppressed fib6 rule result fib6rulesuppress drops a suppressed route with ip6rtputflags, but leaves res-rt6 pointing at the released rt6info. If no later rule supplies a replacement, fib6rulelookup still sees...

CVE-2026-74580

In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring metadata cache on vring reconfiguration vq-metaiotlb caches the vhostiotlbmap that backs each vring metadata region, and iotlbaccessok returns early on a cache hit, taking the hit as proof that the region h...

CVE-2026-74581

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: clear suppressed fib6 rule result fib6rulesuppress drops a suppressed route with ip6rtputflags, but leaves res-rt6 pointing at the released rt6info. If no later rule supplies a replacement, fib6rulelookup still sees...

AZL-96995 CVE-2026-74582 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hardheaderlen in non-ring send paths packetsnd reads dev-hardheaderlen multiple times while allocating and constructing an skb. Device reconfiguration can change this value concurrently, for example through...

AZL-96992 CVE-2026-74580 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring metadata cache on vring reconfiguration vq-metaiotlb caches the vhostiotlbmap that backs each vring metadata region, and iotlbaccessok returns early on a cache hit, taking the hit as proof that the region h...

CVE-2026-74583

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsroute: fix fastmap use-after-free on filter The route4 classifier maintains a 16-slot fastmap cache that stores raw struct route4filter pointers indexed by id, iif. The reader route4classify populates this cache via...

AV_Kernel_Vulns

AVKernelVulns POC per le vulnerabilità del kernel di software antivirus trovate da me...

CVE-2026-74582 packet: use consistent hard_header_len in non-ring send paths

In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hardheaderlen in non-ring send paths packetsnd reads dev-hardheaderlen multiple times while allocating and constructing an skb. Device reconfiguration can change this value concurrently, for example through...

CVE-2026-74583

CVE-2026-74583 is a use-after-free race condition in the Linux kernel's cls_route classifier (route4 fastmap cache). The route4_set_fastmap() reader can write a filter pointer into the 16-slot fastmap cache after a concurrent writer (route4_delete/route4_change) has already cleared it via route4_...

CVE-2026-74583

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsroute: fix fastmap use-after-free on filter The route4 classifier maintains a 16-slot fastmap cache that stores raw struct route4filter pointers indexed by id, iif. The reader route4classify populates this cache via...

CVE-2026-74582

In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hardheaderlen in non-ring send paths packetsnd reads dev-hardheaderlen multiple times while allocating and constructing an skb. Device reconfiguration can change this value concurrently, for example through...

CVE-2026-74582

A race condition in the Linux kernel's packet socket layer affects the non-ring send paths in packet_snd() and packet_sendmsg_spkt(). Both functions read dev->hard_header_len multiple times during skb allocation and construction. If a concurrent device reconfiguration (e.g., a bonding type cha...

CVE-2026-74583 net/sched: cls_route: fix fastmap use-after-free on filter

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsroute: fix fastmap use-after-free on filter The route4 classifier maintains a 16-slot fastmap cache that stores raw struct route4filter pointers indexed by id, iif. The reader route4classify populates this cache via...

EUVD-2026-64005

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsroute: fix fastmap use-after-free on filter The route4 classifier maintains a 16-slot fastmap cache that stores raw struct route4filter pointers indexed by id, iif. The reader route4classify populates this cache via...

EUVD-2026-64004

In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hardheaderlen in non-ring send paths packetsnd reads dev-hardheaderlen multiple times while allocating and constructing an skb. Device reconfiguration can change this value concurrently, for example through...

CVE-2026-74583 net/sched: cls_route: fix fastmap use-after-free on filter

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsroute: fix fastmap use-after-free on filter The route4 classifier maintains a 16-slot fastmap cache that stores raw struct route4filter pointers indexed by id, iif. The reader route4classify populates this cache via...

CVE-2026-74582 packet: use consistent hard_header_len in non-ring send paths

In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hardheaderlen in non-ring send paths packetsnd reads dev-hardheaderlen multiple times while allocating and constructing an skb. Device reconfiguration can change this value concurrently, for example through...