CVE-2026-99155

A flaw was found in the Linux kernel's Xen virtual Small Computer System Interface SCSI frontend driver. This vulnerability allows a malicious or compromised backend service to trigger a Denial of Service DoS by crashing the guest virtual machine. The issue occurs when the driver processes a...

CVE-2026-99154

A flaw was found in the Linux kernel's libiscsi module. A remote iSCSI target can trigger an out-of-bounds memory read by sending a crafted Protocol Data Unit PDU containing a negative task index. This flaw can cause a kernel crash, resulting in a Denial of Service DoS, or potentially lead to...

CVE-2026-99153

A flaw was found in the Linux kernel's SCSI subsystem within the libiscsi module. A malicious or compromised iSCSI storage target can trigger a denial of service DoS or data integrity issues by sending a crafted Reject Protocol Data Unit PDU containing an unvalidated Initiator Task Tag ITT. Becau...

CVE-2026-99152

A flaw was found in the Linux kernel's SCSI iSCSI implementation libiscsi. A remote, connected iSCSI target can cause a Denial of Service DoS by sending a crafted management response that references an uninitialized or free task slot. Because the kernel fails to verify that the task is active...

SUSE-SU-2026:4979-1 Security update for the Linux Kernel (Live Patch 73 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.275 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-68426: xfrm: fix stale skb-prev after async crypto steals a GSO segment...

Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.136 fixes various security issues: The following security issues were fixed: CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. CVE-2026-68426:...

SUSE-SU-2026:4978-1 Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.136 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. -...

SUSE-SU-2026:4977-1 Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.124 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-68426: xfrm: fix stale skb-prev after async crypto steals a GSO...

CVE-2026-74691

A flaw was found in the Linux kernel's Thunderbolt networking driver. During the process of shutting down a Thunderbolt device, the system incorrectly deallocates resources before ensuring that all data has finished transferring through the Direct Memory Access DMA paths. This can cause the...

kernel-exploits

Kernel Exploits Various kernel exploits CVE-2021-22555 Linux local root exploit. Updated version of theflow's exploit for CVE-2021-22555. A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/xtables.c. This allows an attacker to gain privileges or cause a D...

dirtyfrag-detection-rules

dirtyfrag-detection-rules Detection rules and analysis for Dirty Frag CVE-2026-43284/CVE-2026-43500 Linux kernel LPE vulnerability. Based on community research and health probe configurations...

CVE-2021-22555

CVE-2021-22555 This repo hosts TUKRU's Linux Privilege Escalation exploit CVE-2021-22555. It demonstrates gaining root privileges via a vulnerability. Tested on Ubuntu 5.8.0-48-generic and COS 5.4.89+. Use responsibly and ethically. CVE-2021-22555: Linux Privilege Escalation Exploit This reposito...

packet_edit_meme

PACKETEDITMEME - aka CVE-2026-46331 net/sched actpedit partial-COW page-cache corruption culprit 899ee91156e5, present v5.18 .. fixed v7.1-rc7. packeteditmeme.c turns it into unprivileged local root: a userns CAPNETADMIN child overwrites the cached ELF entry of setuid-root /bin/su with...

linux-4.19.72_CVE-2022-29581

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

CVE-2021-22600__DirtyPagetable

CVE-2021-22600 DirtyPagetable This project aims to exploit a well-know kernel linux CVE-2021-22600 with DirtyPagetable technique. Author: Telmo Sendino This project is part of my final thesis in the UPV/EHU university for the Computer Engineering degree. Only for educational purposes...

CVE-2026-80749

A flaw was found in the Linux kernel's drm/connector/hdmi component. A helper function responsible for copying audio infoframe data incorrectly used the destination buffer's size instead of the source's, leading to an out-of-bounds memory read. While this is a read operation and cannot corrupt...

CVE-2022-1015

CVE-2022-1015 A write-up and Local Privilege Escalation Proof-of-Concept of an OOB read and write vulnerability in the Linux Kernel. You can find the write-up of this vulnerability on my blog and you can find my introduction to nftables here as well. An Important note The exploit provided in this...

derpyc0w

Disclaimer I am not responsible for anything you do with this code. This code comes with no warranty. Description Exploit for CVE-2016-5195 which maps a readonly SUID executable to memory readonly and uses the race condition to overwrite it with an ELF of our choice. Payloads are available in NAS...

fix-cve-2013-2094

CVE-2013-2094 Mitigation Fix This script provides an easy mechnism for generating portable SystemTap modules that can be loaded with systemtap-runtime to mitigate the vulnerability described in CVE-2013-2094. This toolset is aimed towards RHEL6, but will likely work without modification on other...

CVE-2026-80747

A flaw was found in the drm/amdkfd component of the Linux kernel. A remote attacker could exploit this vulnerability by providing a malformed Cache Region Allocation Table CRAT with an oversized length field. This oversight in the CRAT parser, which validates the subtype header but not its...