CVE-2026-98334

A flaw was found in the Linux kernel's mac80211 wireless subsystem. When starting a wireless Access Point AP fails after setting beacon parameters, the kernel does not properly reset its internal state. A local attacker can exploit this condition by triggering subsequent scanning operations on th...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Local Privesc Affected Versions Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Usage gcc exploit.c -o exploit ./exploit Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it did no...

CVE-2026-98333

A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. When bringing up a wireless interface fails, the system does not reset the radio LED state, leaving an internal throughput timer running. Consequently, when the wireless device is subsequently removed or unregistered,...

CVE-2026-98331

A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. When a network namespace hosting a wireless device is destroyed, memory allocation failures during device migration can leave unregistered network interfaces in internal tracking lists. A local user can exploit this...

CVE-2026-98330

A flaw was found in the Linux kernel's cfg80211 wireless subsystem. When a network namespace is destroyed, the subsystem attempts to move wireless devices back to the default namespace, but a failure during the transfer can leave behind an invalid namespace reference. A local attacker can exploit...

CVE-2026-98329

A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. When packets are injected on a monitor network interface, mac80211 does not verify whether the bandwidth requested in the radiotap header exceeds the operational channel bandwidth before forwarding it to the driver. A...

CVE-2026-98328

A flaw was found in the Linux kernel's mac80211 wireless subsystem. This flaw allows a local user to cause a Denial of Service DoS by initiating a wireless scan on a device supporting 6 GHz High Efficiency HE bands. Because the kernel fails to account for the HE 6 GHz capability element when...

CVE-2026-98327

A flaw was found in the Linux kernel's mac80211 wireless mesh networking subsystem. When leaving or stopping a mesh network while a Channel Switch Announcement CSA is still pending, the kernel fails to reset the switch state and release allocated memory. A local privileged user could exploit this...

CVE-2026-98324

A flaw was found in the Linux kernel's PXA Direct Memory Access DMA driver. A local user could trigger a Denial of Service DoS or memory corruption due to descriptor double-counting during allocation. When processing hardware descriptors, the driver incorrectly increments the descriptor counter,...

Dirty-Pipe-Exploit

Dirty-Pipe-Exploit The Dirty Pipe exploit CVE-2022-0847 is a Linux kernel vulnerability v5.8+ allowing unprivileged attackers to overwrite arbitrary files via a flaw in the pipe mechanism. This leads to privilege escalation, granting root access. Similar to Dirty Cow but easier to exploit. Fix:...

CVE-2019-7489

This repository does not have a README...

Reproduce-CVE-2023-52927

Reproduce-CVE-2023-52927 Target kCTF cos-109-17800.436.33 machine: Kernel image bzImage: https://storage.googleapis.com/kernelctf-build/releases/cos-109-17800.436.33/bzImage Kernel image vmlinux: https://storage.googleapis.com/kernelctf-build/releases/cos-109-17800.436.33/vmlinux.gz Kernel config...

CVE-2025-38676

CVE-2025-38676 — Linux Kernel ≤ 6.17-rc2 AMD IOMMU stack buffer overflow This repo provides safe, non-exploit PoC resources to study CVE-2025-38676: Info-gathering + safety tools QEMU boot harness to exercise long kernel cmdline permutations Hardening guidance GRUB/UEFI/Secure Boot; baseline...

CVE-2026-98323

A flaw was found in the Linux kernel's Software iWARP siw Remote Direct Memory Access RDMA driver. When handling extended protocol headers split across multiple network packets, the driver incorrectly calculates the remaining length during the copy operation, leading to an out-of-bounds memory...

CVE-2026-98322

A flaw was found in the Linux kernel's Netfilter network filtering subsystem. When configuring IPv4 Network Address Translation NAT rules with the netmap feature, the system fails to initialize a temporary memory buffer on the stack. As a result, uninitialized kernel stack data is copied and...

CVE-2023-32233

Building And Configuring The instructions below were tested under Ubuntu 23.04 Lunar Lobster. Installing Build Dependencies Run the following command to install the build dependencies: sudo apt install gcc libmnl-dev libnftnl-dev Building Binary Run the following command to build the PoC binary:...

CVE-2026-98321

A flaw was found in the Linux kernel's netfilter subsystem. When registering Network Address Translation NAT hooks, failure handling during entry insertion does not properly unregister and release allocated hooks. A local attacker could exploit this flaw to cause a memory leak, potentially leadin...

2022-LPE-UAF

2022-LPE-UAF Untested POC code Security researchers discovered 3 vulnerabilities in the Linux kernel that could allow a local attacker to elevate privileges and potentially execute malicious code. The proof-of-concept code is publicly available increasing the likelihood of exploitation in the wil...

CVE-2014-0196

CVE-2014-0196 The nttywrite function in drivers/tty/ntty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service memory corruption and system crash or gain privileges by triggering a race...

like-dbg

LIKE-DBG LIKE-DBG LI nux-KE rnel-D e B u G ger mira ad automatizzare i passaggi noiosi quando si cerca di impostare un ambiente di debug del kernel Linux. Ho deciso di addentrarmi nella ricerca sullo sfruttamento del kernel e ho trovato le soluzioni esistenti non abbastanza utilizzabili. Pertanto...