CVE-2026-23111

CVE-2026-23111 PoC Linux Kernel nftables Use-After-Free Local Privilege Escalation poc by baba01hacker Vulnerability Summary CVE : CVE-2026-23111 Type : Use-After-Free CWE-416 CVSS : 7.8 HIGH Component : net/netfilter/nftablesapi.c — nftmapcatchallactivate Root Cause : Inverted genmask check caus...

CVE-2026-43499

👻 CVE-2026-43499 — GhostLock 15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros GhostLock is a high-severity Use-After-Free UAF vulnerability in the Linux Kernel rtmutex subsystem. The flaw originates from incorrect waiter cleanup during Priority Inheritance PI...

DIRTYFAIL

DIRTYFAIL A unified detector and PoC harness for the Copy Fail and Dirty Frag Linux page-cache write vulnerability families. ██████╗ ██╗██████╗ ████████╗██╗ ██╗███████╗ █████╗ ██╗██╗ ██╔══██╗██║██╔══██╗╚══██╔══╝╚██╗ ██╔╝██╔════╝██╔══██╗██║██║ ██║ ██║██║██████╔╝ ██║ ╚████╔╝ █████╗ ███████║██║██║ █...

CVE-2026-22009-Linux-eBPF-Map-Locking-Race-Use-After-Free

CVE-2026-22009 – Linux eBPF Map Locking Race → Use‑After‑Free Program Code C simulation // ebpfmapuaf.c - Simulated concurrent map update/free include include include include void mapdata = NULL; int mapfreed = 0; void updatemapvoid arg // Simulate eBPF program updating map if !mapfreed char...

CVE-2026-31635

🩸 CVE-2026-31635 – DirtyDecrypt Linux Kernel Local Privilege Escalation via RXGK Page Cache Corruption "DirtyDecrypt" — Part of the 2026 "Dirty" family exploits 📖 Overview DirtyDecrypt CVE-2026-31635 is a local privilege escalation vulnerability in the Linux kernel's rxrpc subsystem specifically...

copy-fail-mcp

Copy Fail MCP 📖 Installation Guide — quick start, manual setup, and troubleshooting CVE-2026-31431 — The worst Linux vulnerability ever discovered. Now controllable via MCP. 732 bytes of Python. No compilation. No race condition. No per-distro offsets. One shot, universal root on every Linux kern...

asm-copyfail

CVE-2026-31431 Copy Fail — Analysis and development in x86-64 Assembly Based on the source code published in Theori, we will do several exercises until we fully convert it to pure Assembly language without external libraries.python !/usr/bin/env python3 Archivo: copyfail.py import os as...

2005

2005 Эксплойты для ядра Linux - CVE-2005-0736 + CVE-2005-1263...

CVE-2017-16995

CVE-2017-16995 CVE ID: CVE-2017-16995 Publish date: 2017-12-27T17:08:17.670 Base score CVSS 3.0/3.1: 7.8 Description: The checkaluop function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service memory corruption or possibly have unspecified oth...

CVE-2026-46243

🚨 CVE-2026-46243 - CIFSwitch Linux Kernel Local Privilege Escalation LPE Local Privilege Escalation vulnerability affecting the Linux Kernel CIFS/SMB client. 📖 Overview CVE-2026-46243 is a Local Privilege Escalation LPE vulnerability within the Linux Kernel's CIFS/SMB client. Improper validation ...

CVE-2026-90254

A flaw was found in the Linux kernel's Bluetooth subsystem. Specifically, a memory leak occurs in the hcisync component when an advertising instance is not properly freed during certain failure or cancellation scenarios. This happens because the advtimeoutexpire function passes a memory-allocated...

CVE-2026-90187

A flaw was found in the nullblk module of the Linux kernel. When a zoned nullblk device is powered off and then on again, the memory allocated for device zones is not properly freed. This oversight causes a memory leak with each power cycle, which could lead to resource exhaustion over time...

CVE-2026-89982

A flaw was found in the Linux kernel's I2C Inter-Integrated Circuit multiplexer mux subsystem. This vulnerability can lead to a resource leak if an adapter fails to register, as a system resource is not properly released. Over time, this could result in resource exhaustion, potentially causing...

CVE-2026-89975

A flaw was found in the Linux kernel's nvme-fabrics module. A local attacker could repeatedly provide malformed DHCHAP Diffie-Hellman Challenge-Handshake Authentication Protocol secrets, leading to a memory leak. This vulnerability occurs during the parsing of these secrets, where temporary strin...

CVE-2026-89953

A flaw was found in the Linux kernel's mtdoops module. When a Memory Technology Device MTD is removed and then re-registered, the mtdoops module fails to properly free a previously allocated memory bitmap. This oversight leads to a memory leak, where memory is continuously consumed without being...

CVE-2026-89924

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine component for s390 architecture. When handling guest debug requests, a memory leak occurs if a watchpoint import fails. A local guest user could repeatedly trigger this flaw, leading to a continuous leak of memory buffers. Th...

CVE-2026-89877

A flaw was found in the saa7164 media driver in the Linux kernel. When the saa7164devsetup function fails to allocate PCI BAR memory regions, it incorrectly leaves a dangling entry on the global device list. This improper cleanup of resources can lead to a resource leak, potentially allowing a...

CVE-2026-89815

A flaw was found in the Linux kernel's Direct Rendering Manager DRM TTM memory manager. During a memory restore operation, the tt-restore object is not properly released after a successful restore. This oversight can lead to shared memory shmem handles remaining active, causing subsequent backup...

CVE-2026-93089

A flaw was found in the armscmi firmware component of the Linux kernel. This vulnerability occurs when a transport channel setup succeeds but the subsequent IDR ID allocator insertion fails. In such a scenario, the error handling path incorrectly destroys the transport device and frees channel...

CVE-2026-90434

A flaw was found in the Linux kernel's isofs filesystem driver. When processing compressed block pointer tables via the zisofsfillpages function, a memory resource is not properly released upon successful operation. A local attacker could potentially exploit this resource mismanagement, possibly ...