252453 matches found
CVE-2026-74731
A flaw was found in the Linux kernel's schedext component. A race condition can occur during the disabling of a sub-scheduler that was never properly linked into the scheduler hierarchy. This can lead to a use-after-free vulnerability, where exited tasks are re-homed onto a dying hierarchy. This...
CVE-2026-74724
A flaw was found in the Linux kernel's IPVS IP Virtual Server component. A local attacker can exploit this vulnerability by manipulating packets processed by IPVS, specifically within the ipvsnaticmp function. This manipulation can lead to an out-of-bounds write due to improper handling of the IP...
CVE-2026-74723
A flaw was found in the Linux kernel. A local attacker could craft a btrfs image with a malformed LZO compressed file extent. This could lead to an out-of-bounds read during decompression, potentially causing a denial of service...
asm-copyfail
CVE-2026-31431 Copy Fail â Analisi e sviluppo in Assembler x86-64 Prendendo come base il codice sorgente pubblicato su Theori, faremo vari esercizi fino a portarlo completamente in linguaggio Assembly puro senza librerie esterne.python !/usr/bin/env python3 Archivo: copyfail.py import os as...
CVE-2026-74722
A flaw was found in the Linux kernel's btrfs filesystem. A local attacker could exploit a memory leak in the btrfsdoencodedwrite function. This occurs because an extent changeset is not properly freed before the function returns. Successful exploitation of this memory leak could lead to a denial ...
CVE-2026-74721
A flaw was found in the Linux kernel's accel/amxdna component. Specifically, an error in the amdxdnainsertpages function causes system resources to be released too early. This premature release can lead to a critical error when the system later attempts to free the same resources, resulting in a...
CVE-2026-74720
A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. When a scalar value is added to a pointer during certain arithmetic operations, the system fails to fully preserve the pointer's state. This inconsistency in how the pointer's origin and properties are tracked can lead t...
DirtyFrag-for-dummies
Dirty Frag / CVE-2026-43284 â Forschungsnotizen Ăbersicht Dieses Repository enthält ein bereinigtes technisches Diagramm und unterstĂźtzende Notizen zur Linux-Kernel-SicherheitslĂźcke, die allgemein als Dirty Frag bezeichnet und fĂźr den xfrm-ESP-Pfad als CVE-2026-43284 verfolgt wird. Das Problem...
kernel: rtmutex: Use waiter::task instead of current in remove_waiter()
A flaw was found in the Linux kernel. When the kernel's real-time mutex rtmutex component performs a specific operation called 'proxy-lock rollback' during futex requeue, it incorrectly handles task pointers. This can lead to a 'Use-After-Free' UAF vulnerability, where the system attempts to use...
kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A race condition exists in the SCTPSENDALL path where a cached list entry is not properly revalidated after the socket lock is temporarily released. This allows a local attacker or a remote attacker v...
kernel: net: openvswitch: reject oversized nested action attrs
A flaw was found in Open vSwitch in the Linux kernel. Improper handling of oversized nested action attributes can lead to a truncated length field, which could be exploited by a local attacker to alter kernel memory. This alteration might result in the disclosure of sensitive information or a loc...
kernel: gfs2: Fix use-after-free in iomap inline data write path
A flaw was found in the Linux kernel's GFS2 filesystem. This memory corruption vulnerability, a use-after-free, occurs in the iomap inline data write path. The issue arises because a data buffer is released prematurely while still being referenced, leading to a write to freed memory. This could...
kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
A flaw was found in the Linux kernel's xfrm IPSec framework subsystem. This vulnerability, a use-after-free, occurs when the system incorrectly manages memory related to security policies, specifically during the deletion of xfrmstate lists. An attacker with local access could exploit this flaw b...
syscall_exploit_CVE-2018-8897
Questo repository non contiene un README...
dirtycow-lab
dirtycow-lab Sfruttamento della vulnerabilitĂ Dirty COW CVE-2016-5195 su Ubuntu 16.04.1. cat README.md :/. 4. Esecuzione ed elevazione : chmod +x /dirty && /dirty â su root pass dirtyCowFun. 5. Flag : cat /root/flag.txt â 4GEEKSY0uG0tR00t. â Risultato root@kitploit: root@ubuntu:/home/student whoa...
CVE-2026-74716
A flaw was found in the Linux kernel's amdxdna graphics driver. An unprivileged local user could exploit a vulnerability in how the driver handles memory management operations. By performing specific memory mapping and access patterns, a user could trigger an assertion failure, leading to a syste...
CVE-2026-74713
A flaw was found in the Linux kernel's vhostiotlb module. Non-retiring tables within this module can continue to allocate entries even after reaching their configured limits. This allows a local attacker or a malicious guest operating system to trigger a continuous stream of IOTLB updates, leadin...
CVE-2017-16995
Versione del kernel Linux 4.14 - 4.4 Ubuntu && Debian Descrizione Questa vulnerabilitĂ risiede nella chiamata di sistema eBPF bpf2 del kernel Linux. Quando un utente fornisce un programma BPF malevolo, il modulo di verifica eBPF genera un errore di calcolo, causando un problema di lettura/scrittu...
kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A race condition exists in the SCTPSENDALL path where a cached list entry is not properly revalidated after the socket lock is temporarily released. This allows a local attacker or a remote attacker v...
kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
A flaw was found in the Linux kernel's xfrm IPSec framework subsystem. This vulnerability, a use-after-free, occurs when the system incorrectly manages memory related to security policies, specifically during the deletion of xfrmstate lists. An attacker with local access could exploit this flaw b...