CVE-2026-98264

A flaw was found in the Advanced Linux Sound Architecture ALSA virtio sound driver in the Linux kernel. During device removal or system suspend operations, virtual queues are deleted before the virtual device is reset, allowing the device to access queue memory buffers after they have been freed...

CVE-2025-38352-PoC

CVE-2025-38352: Linux Kernel POSIX CPU Timer TOCTOU Race Condition & UAF A reproducible Proof-of-Concept PoC and automated GDB orchestration script for CVE-2025-38352 , a Time-of-Check to Time-of-Use TOCTOU race condition in the Linux kernel's POSIX CPU timer subsystem...

CVE-2026-98263

A flaw was found in the Linux kernel's Realtek RT712 audio codec driver. A local user could exploit this flaw to cause a Denial of Service DoS or unexpected system behavior. The issue arises because audio stream configuration data is left uninitialized before being passed to the SoundWire...

CVE-2026-98261

A flaw was found in the Linux kernel's Common Internet File System CIFS client. When a secondary communication channel is disabled or no longer supported by a remote file server, the client releases session structures from memory while continuing to access them. A malicious server can exploit thi...

CVE-2026-98260

A flaw was found in the Linux kernel. When a multi-threaded program sets up a per-thread timer and executes a new program that subsequently fails during startup, the kernel can free timer memory while it remains referenced in an active queue. A local user could exploit this vulnerability to trigg...

Dirty-Cow-Explanation-CVE-2016-5195-

Dirty-Cow-Explanation-CVE-2016-5195-...

CVE-2026-98259

A flaw was found in the Linux kernel. A local user could exploit this vulnerability to cause a Denial of Service DoS by crashing the system. In the Direct Access DAX subsystem, the kernel fails to verify whether storage entries are zero or empty before converting them, leading to an invalid memor...

CVE-2026-98258

A flaw was found in the Linux kernel's POSIX CPU timer subsystem. A race condition can occur when modifying or deleting a timer concurrently with its expiration handling, allowing the timer to be freed while still queued on an active expiry list. A local user could exploit this use-after-free UAF...

CVE-2026-98257

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. A remote attacker can trigger a Denial of Service DoS by negotiating an incompatible protocol version during connection establishment. This mismatch causes the kernel to attempt a synchronous connection teardown while...

CVE-2026-98256

A flaw was found in the Linux kernel's signal handling subsystem. A race condition occurs during process execution when managing pending timer signals, allowing the system to reference memory after it has been released. A local attacker could exploit this use-after-free flaw to achieve privilege...

dirtypipe

DESCARGO DE RESPONSABILIDAD Este código es solo con fines educativos y de investigación. No lo utilices en sistemas que no poseas o para los que no tengas permiso de prueba. El autor no se hace responsable de ningún uso indebido, daño o consecuencia legal derivada del uso de este código. DirtyPip...

CVE-2026-98255

A flaw was found in the Linux kernel. Its TCP Transmission Control Protocol fast-path processing logic fails to properly filter out-of-bounds acknowledgment ACK packets before validating them. A remote attacker could exploit this vulnerability by sending network packets with outdated ACK numbers,...

io_uring-n-day

CVE-2024-0582 PoC This repository contains a proof of concept for CVE-2024-0582 page-level use after free in iouring used for academic research. It includes a kernel configuration, build and run scripts for a reproducible QEMU environment, and the PoC exploit used in my analysis. Use this code on...

CVE-2026-98254

A flaw was found in the Linux kernel's Software I/O Translation Lookaside Buffer swiotlb. During Direct Memory Access DMA bounce operations involving high memory, an incorrect address calculation occurs when an offset crosses a page boundary. This error causes data transfers to read from or...

CVE-2026-98252

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem. This flaw allows a local attacker to cause a denial of service DoS due to a race condition in the iWARP port mapper component. Because request structures are added to a shared tracking list before their reference...

CVE-2026-98251

A flaw was found in the Linux kernel's Open vSwitch component. When handling network connection tracking conntrack labels, the kernel may reallocate memory for active connections while another processor accesses it simultaneously. This race condition can lead to memory corruption, allowing an...

cve-2017-11176

cve-2017-11176 Public Information The mqnotify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a Netlink socket, it allows attackers to cause a denial of service use-after-free or possibly have...

PoC-CVE-2026-46331

This repository contains a proof-of-concept PoC exploit for CVE-2026-46331, a Linux kernel local privilege escalation vulnerability in the traffic-control subsystem. Vulnerability Summary The flaw exists in the actpedit packet-editing action, where the kernel may calculate the copy-on-write...

CVE-2026-43499

CVE-2026-43499 — Linux Kernel Futex PI Use-After-Free Bug removewaiter in kernel/locking/rtmutex.c is used by the slowlock paths but also for proxy-lock rollback in rtmutexstartproxylock when invoked from futexrequeue. In the proxy-lock case waiter::task is not current, but removewaiter incorrect...

CVE-2023-2598

CVE-2023-2598 Escalada de privilegios A través de CVE-2023-2598, comprender los mecanismos de Compound Page y folio en Linux, y posteriormente ver si se puede completar la explotación del 1day CVE-2023-6560. Compound Pagehuge page La memoria es cada vez mayor, pero la unidad básica de asignación ...