CVE-2026-98339

A flaw was found in the Linux kernel's cfg80211 wireless subsystem. This flaw allows a nearby attacker operating a rogue wireless access point to cause a Denial of Service DoS. When an access point changes channels, stale Basic Service Set BSS network entries may fail to be removed if unexpected...

CVE-2026-98338

A flaw was found in the Linux kernel's cfg80211 wireless subsystem. A race condition occurs during Independent Basic Service Set IBSS, an ad-hoc wireless network join event handling because the kernel does not hold an active reference to the service set entry before processing the event. A local...

CVE-2026-98337

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A local user can cause a Denial of Service DoS or system instability by initiating a remain-on-channel ROC operation while a wireless network scan is concurrently active. This race condition leads to improper state handling and...

CVE-2026-98336

A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. A local user with network administration privileges can cause a denial of service DoS by configuring hardware traffic control TC offloading on virtual Access Point Virtual Local Area Network APVLAN interfaces. Because...

CVE-2026-98335

A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. When a wireless interface disconnects from a mesh network while a channel switch announcement is in progress, the system releases the channel context without properly canceling the ongoing switch operation. A local use...

CVE-2026-98334

A flaw was found in the Linux kernel's mac80211 wireless subsystem. When starting a wireless Access Point AP fails after setting beacon parameters, the kernel does not properly reset its internal state. A local attacker can exploit this condition by triggering subsequent scanning operations on th...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Local Privesc Affected Versions Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Usage gcc exploit.c -o exploit ./exploit Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it did no...

CVE-2026-98333

A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. When bringing up a wireless interface fails, the system does not reset the radio LED state, leaving an internal throughput timer running. Consequently, when the wireless device is subsequently removed or unregistered,...

CVE-2026-98331

A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. When a network namespace hosting a wireless device is destroyed, memory allocation failures during device migration can leave unregistered network interfaces in internal tracking lists. A local user can exploit this...

CVE-2026-98330

A flaw was found in the Linux kernel's cfg80211 wireless subsystem. When a network namespace is destroyed, the subsystem attempts to move wireless devices back to the default namespace, but a failure during the transfer can leave behind an invalid namespace reference. A local attacker can exploit...

CVE-2026-98329

A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. When packets are injected on a monitor network interface, mac80211 does not verify whether the bandwidth requested in the radiotap header exceeds the operational channel bandwidth before forwarding it to the driver. A...

CVE-2026-98328

A flaw was found in the Linux kernel's mac80211 wireless subsystem. This flaw allows a local user to cause a Denial of Service DoS by initiating a wireless scan on a device supporting 6 GHz High Efficiency HE bands. Because the kernel fails to account for the HE 6 GHz capability element when...

CVE-2026-98327

A flaw was found in the Linux kernel's mac80211 wireless mesh networking subsystem. When leaving or stopping a mesh network while a Channel Switch Announcement CSA is still pending, the kernel fails to reset the switch state and release allocated memory. A local privileged user could exploit this...

CVE-2026-98324

A flaw was found in the Linux kernel's PXA Direct Memory Access DMA driver. A local user could trigger a Denial of Service DoS or memory corruption due to descriptor double-counting during allocation. When processing hardware descriptors, the driver incorrectly increments the descriptor counter,...

Dirty-Pipe-Exploit

Dirty-Pipe-Exploit The Dirty Pipe exploit CVE-2022-0847 is a Linux kernel vulnerability v5.8+ allowing unprivileged attackers to overwrite arbitrary files via a flaw in the pipe mechanism. This leads to privilege escalation, granting root access. Similar to Dirty Cow but easier to exploit. Fix:...

CVE-2019-7489

This repository does not have a README...

Reproduce-CVE-2023-52927

Reproduce-CVE-2023-52927 Target kCTF cos-109-17800.436.33 machine: Kernel image bzImage: https://storage.googleapis.com/kernelctf-build/releases/cos-109-17800.436.33/bzImage Kernel image vmlinux: https://storage.googleapis.com/kernelctf-build/releases/cos-109-17800.436.33/vmlinux.gz Kernel config...

CVE-2025-38676

CVE-2025-38676 — Linux Kernel ≤ 6.17-rc2 AMD IOMMU stack buffer overflow This repo provides safe, non-exploit PoC resources to study CVE-2025-38676: Info-gathering + safety tools QEMU boot harness to exercise long kernel cmdline permutations Hardening guidance GRUB/UEFI/Secure Boot; baseline...

CVE-2026-98323

A flaw was found in the Linux kernel's Software iWARP siw Remote Direct Memory Access RDMA driver. When handling extended protocol headers split across multiple network packets, the driver incorrectly calculates the remaining length during the copy operation, leading to an out-of-bounds memory...

CVE-2026-98322

A flaw was found in the Linux kernel's Netfilter network filtering subsystem. When configuring IPv4 Network Address Translation NAT rules with the netmap feature, the system fails to initialize a temporary memory buffer on the stack. As a result, uninitialized kernel stack data is copied and...