MitigationToolkit-ROSN-LR5-Full

🧬 ROSN-LR5 – Kernel-LPE-PoC- und Mitigation-Toolkit CVE-2026-31431 Offensives und defensives Werkzeug für die Schwachstelle CVE-2026-31431 auf Linux-Systemen. Es kombiniert einen Proof-of-Concept für lokale Privilegieneskalation LPE mit Dienstprogrammen zur Überprüfung und vorübergehenden...

Copy-Fail

CVE-2026-31431 – „Copy Fail“-Erreichbarkeitsprüfer Ein einfaches, sicheres Python-Skript, das feststellt, ob ein Linux-System anfällig für CVE-2026-31431 „Copy Fail“ ist, eine lokale Privilegieneskalation, die alle gängigen Distributionen seit Kernel 4.14 betrifft. ⚠️ Was ist Copy Fail?...

almalinux-fix-cve-2026-31431

CVE-2026-31431 algifaead und Dirty Frag CVE-2026-43284 Sicherheitslücken-Behebung Aktualisiert das System, um die Sicherheitslücken CVE-2026-31431 algifaead und Dirty Frag CVE-2026-43284 im Linux-Kernel zu schließen, und setzt die sichere Kernel-Version automatisch als Standard. English: This...

copy-fail-CVE-2026-31431

Copy Fail - CVE-2026-31431 Copy Fail（CVE-2026-31431）PoC 与 payload 示例。 Technical Writeup: https://xint.io/blog/copy-fail-linux-distributions Betroffene Linux-Distributionen Distro| Kernel-Version ---|--- Ubuntu 24.04 LTS| 6.17.0-1007-aws Amazon Linux 2023| 6.18.8-9.213.amzn2023 RHEL 10.1|...

Copy-Fail-CVE-2026-31431

Copy-Fail-CVE-2026-31431 Eine Proof-of-Concept-Exploit-Reproduktion der Linux-Kernel-Schwachstelle CVE-2026-31431 , auch bekannt als Copy Fail. Danksagung an: Copy Fail Betroffene Systeme Linux-Kernel-Versionen 4.14 und neuer Die meisten großen Distributionen, die von 2017 bis zur Bereitstellung...

cve-2026-31431-mitigation

Mitigação seccomp para CVE-2026-31431 Uma mitigação leve e reversível baseada em seccomp para CVE-2026-31431, uma vulnerabilidade de escalonamento de privilégios local no subsistema criptográfico algifaead / authencesn do kernel Linux. 中文文档 Visão Geral da Vulnerabilidade Tipo: Escalonamento de...

copy-fail

Copy Fail PoC Deutsch Python-PoC für CVE-2026-31431 , vorgesehen für kontrollierte Labortests auf autorisierten Linux-Systemen. Nur zur Verwendung in eigenen Umgebungen, Laboren oder Systemen, für die du eine ausdrückliche Genehmigung hast. Führe diesen Code nicht gegen Systeme Dritter aus...

CVE-2026-23398

CVE-2026-23398 Linux-Kernel icmptagvalidation NULL-Pointer-Dereferenz Remote DoS Beschreibung icmptagvalidation in net/ipv4/icmp.c dereferenziert inetprotosproto ohne NULL-Prüfung. Ein entfernter Angreifer kann ein einzelnes manipuliertes ICMP- Fragmentation-Needed-Paket mit einer nicht...

copy-fail_LPE_Interactive

CVE-2026-31431 Copy Fail Exploit Linux-Kernel-Page-Cache-Pollution-Exploit-Tool mit Unterstützung für nicht-interaktive Befehlsausführung. Schwachstellenübersicht CVE-2026-31431 ist eine logische Schwachstelle im Linux-Kernel, die in der Implementierung des authesn-AEAD-Algorithmus existiert. Übe...

CVE-2026-31431

CVE-2026-31431 LPE PoC Rust-Implementierung Dieses Projekt ist ein Proof of Concept PoC, implementiert in Rust, für eine lokale Privilegienausweitung LPE-Schwachstelle Simulation von CVE-2026-31431. Es demonstriert, wie der Linux-Kernel-Page-Cache durch Ausnutzung der Crypto API manipuliert werde...

kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink

A flaw was found in the Linux kernel's VXLAN Virtual Extensible LAN implementation. A local attacker, with CAPNETADMIN network administration capability in one network namespace, could exploit an incorrect privilege check in the rtnl changelink path. This allows the attacker to modify the...

kernel: netfilter: flowtable: publish GC-visible tuple last

A flaw was found in the netfilter flowtable component of the Linux kernel. This vulnerability occurs due to a timing issue where the system's garbage collection can free a network flow while it is still being set up. This can lead to a 'use-after-free' condition, where the system attempts to acce...

kernel: nvme-tcp: fix host memory disclosure on R2T for a read command

A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express over TCP nvme-tcp component. A malicious NVMe controller can exploit this vulnerability by sending a Ready to Transfer R2T command for a read request. The host system, failing to properly validate the request direction, will...

kernel: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()

A flaw was found in the Linux kernel's IPv6 Routing Protocol for Low-Power and Lossy Networks RPL segment routing header SRH decompression function, ipv6rplsrhdecompress. An integer overflow occurs when processing a specially crafted IPv6 packet, causing the header length calculation to truncate...

kernel: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock()

A flaw was found in the Linux kernel’s TLS implementation net/tls/tlsdevice.c. The function getnetdevforsock is invoked during setsockopt, which is not executed under RCU Read-Copy-Update protection. It previously used skdstgetsk-dev, which can lead to a use-after-free UAF if the sk’s destination...

kernel: netfilter: nf_conntrack_sip: don't use simple_strtoul

A flaw was found in the Linux kernel's netfilter SIP Session Initiation Protocol connection tracking module. This vulnerability, caused by unsafe port parsing, allows a remote attacker to send specially crafted malformed packets. Such packets could lead to excessive resource consumption,...

kernel: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()

A flaw was found in the Linux kernel's tunnels module. This vulnerability, categorized as a Use-After-Free UAF, arises from improper handling of network header pointers during certain packet processing operations. Specifically, functions responsible for building Internet Control Message Protocol...

kernel: thermal: core: Fix thermal zone device registration error path

A flaw was found in the Linux kernel's thermal core subsystem. When thermalzonedeviceregisterwithtrips fails during device registration, it does not properly wait for the thermal zone device's removal completion. This can lead to the premature freeing of the device's memory, creating a...

kernel: netfilter: nf_log: validate MAC header was set before dumping it

A flaw was found in the Linux kernel's netfilter logging component. This vulnerability occurs because the system does not properly check if a network packet's Media Access Control MAC header is valid before attempting to log it. A local attacker could send a specially crafted network packet,...

kernel: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst

A flaw was found in the Linux kernel's netfilter component, specifically within the nfqueue functionality. When a bridged packet is queued to NFQUEUE, it can retain a reference to a bridge's private fake destination 'dst' even after the bridge teardown has begun. This can lead to a use-after-free...