CVE-2025-38001

CVE-2025-38001---Linux-Kernel-HFSC-RBTree-Use-After-Free-Research This repository contains a Proof of Concept PoC for the CVE-2025-38001 security vulnerability that targets the HFSC module in the Linux Kernel. Created specifically as learning material for kernel memory corruption and security...

CVE-2026-74586

CVE-2026-74586 — SCTP ASCONF newtransport use-after-free trigger A self-contained, unprivileged PoC for CVE-2026-74586, a use-after-free in the Linux kernel's SCTP ASCONF dynamic address reconfiguration handling. Credit for the bug itself goes to Qing Ming, who reported it upstream; the fix is...

Dirty-Pipe

CVE-2022-0847 Dirty Pipe Exploit Affected versions =5.8, 5.16.11, 5.15.25 and 5.10.102 exp.c Use this vulnerability to overwrite read-only files exp-root-shell.c Generate shellcode that executes /bin/sh to overwrite a SUID program owned by root, using passwd as an example. Then run the overwritte...

LInux-Kernel-InfoLeak-6.12.-Leveraged-to-do-cross-container-info-leak.-

LInux-Kernel-InfoLeak-6.12.-Leveraged-to-do-cross-container-info-leak.- POC shows how to leak postgresql stuff cause hugefile sub-system. Based on https://x.com/spendergrsec/status/1993794163880718700?s=20...

CVE-2026-64561

CVE-2026-64561 — Zapscape: KVM/x86 shadow MMU UAF, guest escape to host root HackSpeak distribution mirror. This repository is a distribution mirror of the complete PoC + technical write-up publicly released by researcher Hyunwoo Kim @v4bel , with code and documentation identical to upstream. ⚠️...

dirtypipe2

dirtypipe2 Linux Kernel 5.8 5.15.25 - Local Privilege Escalation DirtyPipe 2 Exploit Author: Antonius w1sdom github : https://github.com/bluedragonsecurity web : https://www.bluedragonsec.com tested on : linux kernel 5.13.0-21-generic compiled on lubuntu 20.04.5 linux lubuntu 20.04.2 - linux kern...

CVE-2026-93239

A flaw was found in the Linux kernel. A race condition in the ARM64 page-table walk routine occurs when inspecting memory mappings without proper synchronization while interrupts remain enabled. A local user can trigger this flaw during concurrent memory cleanup operations, causing the kernel to...

CVE-2026-93238

A flaw was found in the Linux kernel's s390 VFIO-AP Virtual Function I/O Adjunct Processor device driver. During certain device hot-plug configuration updates, the driver fails to initialize a memory structure before processing it. A local privileged user could trigger this issue to cause the...

CVE-2026-31431-CopyFail-static-ELF--POC

CVE-2026-31431: Copy Fail - 587-byte static ELF I did not find this bug. Credit goes to Xint Code / Theori. This repo is my take on making the exploit as small as possible - a hand-rolled x8664 ELF that does the full LPE in 587 bytes. No libc, no linker, no runtime. Just NASM and stubbornness. In...

CVE-2026-93205

A flaw was found in the Linux kernel's iommu/arm-smmu-v3 component. During device removal, the system incorrectly frees the Input-Output Memory Management Unit IOMMU Page Fault IOPF queue before its associated interrupt request IRQ handler finishes using it. This improper cleanup order leads to a...

CVE-2026-93784

A flaw was found in the Linux kernel's cfg80211 wireless configuration subsystem. A local user can cause a Denial of Service DoS or potential information disclosure by submitting a malformed Information Element IE buffer through wireless configuration commands. The kernel fails to properly valida...

cve-2024-1086-writeup

CVE-2024-1086 Root Cause & Exploitation Target kernels: Linux 6.8 netfilter nftables Novel angle: Logic confusion in nftverdictinit causes refcount double-free, exploitable via heap spray to arbitrary memory write. Table of Contents 1. Background — netfilter / nftables overview 2. Root Cause...

CVE-2023-32233

Building And Configuring The instructions below were tested under Ubuntu 23.04 Lunar Lobster. Installing Build Dependencies Run the following command to install the build dependencies: sudo apt install gcc libmnl-dev libnftnl-dev Building Binary Run the following command to build the PoC binary:...

CVE-2026-31402

🛡️ CVE-2026-31402 – NFSv4 LOCK Replay Cache Heap Overflow CVE-2026-31402: Linux NFS Bug Hidden for 23 Years 📌 Overview CVE-2026-31402 is a heap overflow vulnerability in the NFSv4.0 LOCK replay cache of the Linux kernel. It arises due to improper handling of responses larger than the fixed buffer...

CVE-2026-31431

CVE-2026-31431 — Copy Fail Local Privilege Escalation in the Linux kernel's authencesn cryptographic template via AFALG + splice. Disclosed April 29, 2026 by Theori Xint Code. Overview Field| Detail ---|--- CVE| CVE-2026-31431 Nickname| Copy Fail CVSS| 7.8 HIGH Type| Local Privilege Escalation LP...

CVE-2026-93260

A flaw was found in the Linux kernel. When initialization of inter-processor interrupts fails within the PowerPC External Interrupt Virtualization Engine XIVE, the system ignores the failure after freeing allocated memory structures. This leads to a use-after-free condition when subsequent setup...

CVE-2026-93251

A flaw was found in the Linux kernel's ACPI Advanced Configuration and Power Interface subsystem. Due to improper synchronization during physical device lookups, a race condition can occur when a device is unbound concurrently. A local user could exploit this timing flaw to cause a use-after-free...

CVE-2026-93259

A flaw was found in the Linux kernel. In PowerPC builds configured with position-relative code support, inline assembly routines responsible for handling interrupts fail to declare modified processor registers. This omission can result in register corruption during interrupt processing, allowing ...

CVE-2024-21345

Usage - python3 CVE-2024-21345.py All kernel is exploitable Get root access easily...

CVE-2026-98102

A flaw was found in the Linux kernel's IPv6 multicast implementation. When removing an active multicast source filter, an internal list pointer is updated before the read-copy update RCU grace period elapses. A local user can exploit this race condition during concurrent multicast address lookups...