CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS स्थानीय विशेषाधिकार वृद्धि विवरण "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it did not properly validate the application of file system capabilities with respect to user namespaces. A local attacker could use this to gain elevated...

CVE-2017-16995

CVE-2017-16995 تم اختباره على Ubuntu 16.04.01 - Linux 4.4.0-31-generic 50-Ubuntu SMP Wed Jul 13 00:07:12 UTC 2016 x8664 تسمح هذه الثغرة لمستخدم عادي بتنفيذ تصعيد صلاحيات والحصول على شل جذر إذا كان النواة مختلفة، اضبط إزاحة CRED + تحقق من حجم مكدس النواة...

DirtyPipe-Exploit

CSE 5380: ورقة أمن المعلومات CVE-2022-0847 Dirty Pipe بقلم Karan Vasudevamurthy UTA ID: 1002164438 ما هو CVE؟ قائمة الثغرات والتعرضات الشائعة CVE هي قائمة بالثغرات والتعرضات الأمنية للمعلومات التي تم الكشف عنها علنًا. قدمت مؤسسة MITRE نظام CVE في عام 1999 لتحديد وتصنيف الثغرات في البرمجيات والبرا...

CVE-2022-2588

CVE-2022-2588 الإصلاح تم إصلاح الثغرة في Linux v5.19 بواسطة هذا commit. الخلل تم إدخال الخلل في Linux v3.17 بواسطة هذا commit في عام 2014. يتطلب تفعيله User Namespaces. هذا الخلل مشابه جدًا لـ CVE-2021-3715، الذي نتج عن عملية غير صحيحة على القائمة المرتبطة بـ route4filter. يمكن العثور على مزيد من...

CVE-2018-18955

CVE-2018-18955 استغلال ثغرة محلية للجذر في لينكس. غلاف لـاستغلال جيان هورن لـCVE-2018-18955، مستنسخ من kernel-exploits. في نواة لينكس من الإصدار 4.15.x حتى 4.19.x قبل 4.19.2، تسمح دالة mapwrite في kernel/usernamespace.c بتصعيد الامتيازات لأنها تتعامل بشكل خاطئ مع مساحات أسماء المستخدمين المتداخلة...

CVE-2026-98196

A flaw was found in the Linux kernel's brcmsmac wireless driver. When a timer is released, the driver fails to wait for running background tasks associated with the timer to finish before freeing memory. A local attacker could exploit this race condition to trigger a use-after-free condition,...

CVE-2026-98190

A flaw was found in the Linux kernel's wilc1000 wireless driver. The driver fails to adequately validate the length of incoming Wi-Fi Direct P2P public action frames before reading the frame header, leading to an integer underflow and out-of-bounds memory read. A nearby unauthenticated attacker c...

CVE-2026-98195

A flaw was found in the Linux kernel's iwlegacy wireless driver. This flaw allows a local user to cause a Denial of Service DoS by toggling the radio frequency kill RFKILL switch during driver initialization. Improper state tracking in the error-handling path leads to the duplicate deallocation o...

CVE-2026-98187

A flaw was found in the Linux kernel's p54 Wi-Fi driver. The driver fails to verify that an entire interface record fits within the buffer boundaries when parsing EEPROM Electrically Erasable Programmable Read-Only Memory data. An attacker capable of attaching a crafted wireless device or supplyi...

CVE-2026-98189

A flaw was found in the Linux kernel's wilc1000 wireless driver. An attacker utilizing a malicious or compromised SDIO Secure Digital Input Output hardware device can cause a Denial of Service DoS or kernel memory corruption by triggering an out-of-bounds write. This issue occurs because the driv...

CVE-2026-98198

A flaw was found in the Linux kernel's PWM fan driver. A local privileged user can cause a Denial of Service DoS or memory corruption by unbinding or detaching the driver. Due to an improper cleanup sequence, internal data structures are released while the sampling timer is still active, resultin...

CVE-2026-98193

A flaw was found in the Linux kernel's libipw wireless driver. When processing Temporal Key Integrity Protocol TKIP network frames, the driver assumes the frame contains a complete Message Integrity Check MIC without verifying that the packet meets the minimum expected length. An attacker within...

CVE-2026-98199

A flaw was found in the Linux kernel's Power Management Bus PMBus subsystem. This vulnerability allows an attacker capable of triggering the probing of affected power management devices to cause a Denial of Service DoS or memory corruption. The issue stems from certain hardware drivers supporting...

CVE-2026-98192

A flaw was found in the Linux kernel's wcn36xx Wi-Fi driver. This vulnerability can lead to a Denial of Service DoS or system instability due to a use-after-free condition. When deinitializing the transmission acknowledgement timer during device removal, the driver stops the timer without waiting...

CVE-2026-98200

A flaw was found in the Linux kernel's HP WMI Sensors hp-wmi-sensors driver. Due to a missing lock when reading sensor properties, a race condition can occur when sensor data is freed and replaced during an update while another operation is reading it. A local user could exploit this flaw by...

CVE-2026-98194

A flaw was found in the Linux kernel's Libertas TF wireless driver. During device cleanup, the driver releases command memory buffers before stopping the associated timer callback. This timing issue creates a use-after-free condition where an active timer callback accesses released memory, allowi...

CVE-2026-98197

A flaw was found in the Linux kernel's w83791d hardware monitoring driver. This vulnerability allows a local user to cause a Denial of Service DoS by triggering a kernel crash. During driver removal, the driver fails to unregister optional sysfs interface files, leaving them accessible after the...

CVE-2026-98185

A flaw was found in the mwifiex driver in the Linux kernel. When processing wireless scan responses, the driver fails to properly validate response extents before calculating internal buffer boundaries. A malicious or compromised wireless device sending malformed scan response data can trigger an...

af_packet.c

afpacket.c CVE-2021-22600 के सफल शोषण पर किसी हैकर द्वारा प्राप्त विशेषाधिकारों को मान्य करने के लिए afpacket.c के विशेषाधिकारों की जाँच करने का प्रूफ-ऑफ-कॉन्सेप्ट यह केवल LLM द्वारा उत्पन्न एक नमूना प्रूफ ऑफ कॉन्सेप्ट है और सभी मामलों को कवर नहीं करता है। इस प्रूफ ऑफ कॉन्सेप्ट के पीछे मूल विचार ...

CVE-2022-0185

CVE-2022-0185 تصعيد الامتيازات الهروب لنواة Linux toc مقدمة الثغرة رقم الثغرة: CVE-2022-0185 تقييم الثغرة: المنتج المتأثر: linux kernel - fsconfig syscall النطاق المتأثر: linux kernel 5.1-rc1 5.16.2 شروط الاستغلال: محلي على Linux; يتطلب صلاحية CAPSYSADMIN يمكن الحصول عليها مباشرة عن طريق unshare،...