CVE-2026-90042

A flaw was found in the Ceph filesystem client within the Linux kernel. This vulnerability arises from the improper handling of memory buffers during filename decryption, specifically when buffers are allocated in the vmalloc region. This can lead to a kernel panic, causing the system to crash. A...

CVE-2026-89991

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. When a Non-Maskable Interrupt NMI re-enters the pcpufreelistpush function on a system configured with a single possible CPU, and the interrupted context holds the freelist lock, an infinite loop can occur. This prevents...

CVE-2026-89842

A flaw was found in the Linux kernel's qla2xxx SCSI driver. Under certain conditions, specifically when the firmware is not fully initialized or is in a reset state, the driver attempts to communicate with it. This can cause the system to try and process an invalid command, leading to instability...

CVE-2026-89942

A flaw was found in the Linux kernel's Industrial I/O IIO buffer subsystem. An anonymous buffer handle, which maintains a reference to an IIO device, can be improperly released if it holds the last reference when the device is removed. This improper handling of a mutex during the buffer's release...

CVE-2026-89893

A flaw was found in the Linux kernel's cx23885 NetUP CI driver. This use-after-free vulnerability occurs when the netupciexit function frees a netupcistate structure while a related work item may still be pending or running. A local attacker could exploit this by triggering the module's removal,...

CVE-2026-90025

A flaw was found in the Linux kernel's USB Type-C DisplayPort UCSI displayport driver. An attacker with physical proximity or control over a connected USB-C device could provide a specially crafted response from the Port Partner Manager PPM. This invalid response could cause an out-of-bounds arra...

CVE-2026-89878

A flaw was found in the Linux kernel's s2255 media driver. The driver attempts to read a trailing marker and version from the end of a firmware blob without properly validating the firmware file's size. A local attacker could provide a specially crafted firmware file shorter than 8 bytes, leading...

CVE-2022-2588

CVE-2022-2588 The fix The bug is fixed in Linux v5.19 by this commit. The bug The bug was introduced in Linux v3.17 by this commit back to 2014. It requires User Namespaces to trigger. This bug is very similar to CVE-2021-3715, which was caused by improper operation on the route4filter's linked...

copyfail-guard

copyfail-guard Automated detection and mitigation tool for the vulnerability CVE-2026-31431 "Copy Fail", a local privilege escalation LPE in the algifaead module AFALG interface of the Linux kernel. ⚠️ Scope: this project is purely defensive. It does not contain, generate, or reference exploit...

CVE-2026-89984

A flaw was found in the Linux kernel's perf/x86/intel component. Insufficient validation of privilege levels in the Last Branch Record LBR stack allows a local attacker to expose kernel branch records to user space. This information disclosure vulnerability can lead to kernel addresses appearing ...

CVE-2026-89850

A flaw was found in the Linux kernel's qla2xxx SCSI driver. This issue arises when the system attempts to check the firmware status of the qla2xxx chip while it is not operational or is recovering from an error. This can cause the system to repeatedly send a command to the hardware, which may...

CVE-2026-89819

A flaw was found in the Linux kernel's drm/amd/display component. This vulnerability arises from insufficient validation of the plane degamma Look-Up Table LUT size. A local attacker, with access to the AMDPLANEDEGAMMALUT property available on systems with AMDPRIVATECOLOR defined, could provide a...

rootkit

Linux Rootkit A simple Linux kernel rootkit written for fun, not evil. Functionality The rootkit can do the following: Grant root privileges to a userland process Hide process by PID Unhide a previously hidden process by PID Hide files or directories by their name Unhide previously hidden files o...

CVE

CVE A collection of proof-of-concept exploit scripts written by the STAR Labs team for various CVEs that they discovered or found by others. CVE-2026-53264 Target: Linux Kernel Version: CentOS 9 kernel version 5.14.0-721 Exploit Written By: Lee Jia Jie CVE-2025-29824 Target: Windows Common Log Fi...

CVE-2026-31431-Advanced-Exploit

CVE-2026-31431 — Copy Fail Linux Kernel Page Cache Out-of-Bounds Write Vulnerability AFALG AEAD Scatterlist Chain Error Overview The Linux kernel algifaead interface contains a vulnerability that allows unprivileged users to write arbitrary data to the page cache of any readable file — completely...

CVE-2026-89818

A flaw was found in the Linux kernel's drm/amdgpu/vcn component. An integer overflow vulnerability exists in the decmsg buffer count check. A local attacker could exploit this by providing a specially crafted message, causing the buffer count expression to wrap around. This allows the parser to...

CVE-2026-89952

A flaw was found in the Linux kernel's mtd: rawnand component. The nandflashdetectextparampage function fails to validate if the fixed page and subsequent variable-length sections of an ONFI Open NAND Flash Interface extended parameter page fit within the allocated memory. This improper validatio...

linux-insides

linux-insides A book-in-progress about the Linux kernel and its insides. Introduction • Chapter status • Requirements • Translations • Contributing • Author Introduction linux-insides is a book-in-progress about the Linux kernel and its insides. The goal of this project is simple - to share...

CVE-2022-0847

CVE-2022-0847 - Dirty Pipe Exploit A proof-of-concept exploit for CVE-2022-0847 Dirty Pipe, a Linux kernel vulnerability that allows unprivileged users to write to read-only files. Vulnerability Details CVE-2022-0847 affects Linux kernels 5.8 through 5.16. It exploits a race condition in the Linu...

Detection-Tool-Kit-for-CVE-2026-31431

copyfail-detect Detection toolkit for CVE-2026-31431 "Copy Fail", a Linux kernel local privilege escalation technique that corrupts page-cache data without changing the file on disk. Why This Exists Copy Fail can bypass traditional file integrity monitoring because the on-disk file is not modifie...