SUSE CVE-2026-98711

In the Linux kernel, the following vulnerability has been resolved: wifi: cw1200: fix TX padding OOB read leaking heap data to device The TX path rounds the transfer size up to the bus alignment alignsize, up to 511 bytes for SDIO, 1 byte for SPI but sends the padded length straight from the fram...

CVE-2022-0847

CVE-2022-0847 my personal poc and exploit of CVE-2022-0847dirty pipe Usage POC: write files arbitrarily Just a simply POC of this CVE, compile the file poc.c as follow: $ gcc poc.c -o poc -static You shall run it as follow: ./poc targetfile offsetinfile data You shall make sure the destination fi...

SUSE CVE-2026-98826

In the Linux kernel, the following vulnerability has been resolved: rtc: ac100: Fix clock provider use-after-free on probe failure ac100rtcregisterclks registers the RTC-32k clock with clkhwregisterfixedrate and the clock provider with ofclkaddhwprovider. Neither is device managed, and both are...

overlayFS-CVE-2021-3493

overlayFS CVE-2021-3493 OverlayFs OverlayFS is a Linux kernel module that allows the system to combine multiple mount points into one, so that it can access all files from each within a single directory structure. About the vulnerability Recently SSD-Discloure released a PoC for an exploit of the...

CVE-2022-0847-Exploit-Implementation

CVE-2022-0847-Exploit-Implementation This is a POC showing how to pop a reverse bash shell for arbitrary code execution on a foreign machine using CVE-2022-0847, "Dirty Pipe Exploit". This vulnerability only affects Linux kernel versions 5.8 or newer but was patched in versions 5.16.11, 5.15.25,...

POC-CVE-2023-32233

Use-After-Free in Netfilter nftables when processing batch requests Demo Vulnerability Details The affected code originates from the official Linux kernel from https://kernel.org/ and is part of the Netfilter nftables component net/netfilter/nftablesapi.c. Netfilter nftables allows to update its...

CVE-2022-0847_dirty-pipe

CVE-2022-0847 / Dirty Pipe Hacked up Dirty Pipe CVE-2022-0847 PoC that hijacks a SUID binary to spawn a root shell. and attempts to restore the damaged binary as well Score CVSS : 7.8 HIGH A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper...

CVE-2019-13272

CVE-2019-13272 The exploit for CVE-2019-13272 Vulnerability Type: Linux Local Privilege Escalation Vulnerability Scope: Linux kernel versions below 5.1.17 Local test environment: Vulnerability related information: https://bugs.chromium.org/p/project-zero/issues/detail?id=1903...

scumjrs

scumjrs PoC for Dirty COW CVE-2016-5195...

ghostlock-aak-apk

GhostLock AAK Launcher CVE-2026-43499 · Linux kernel rtmutex stack Use-After-Free local privilege escalation LPE loader/trigger This repository is a security research and proof-of-concept PoC project , used to demonstrate and verify the trigger flow of the CVE-2026-43499 GhostLock vulnerability i...

CVE-2020-27194

CVE-2020-27194 my exp for CVE-2020-27194, tested on linux kernel 5.8.14. More details : https://ama2in9.top/2020/12/14/CVE-2020-27194/ reference CVE-2020-8835 pwn2own 2020 ebpf 提权漏洞分析 CVE-2020-8835 pwn2own 2020 ebpf 通过任意读写提权分析...

SPiCa

SPiCa System Process Integrity & Cross-view Analysis "I'm going to sing, so shine bright, SPiCa..." SPiCa is an eBPF-based Linux rootkit detector written in Rust. The name comes from the Hatsune Miku song SPiCa and the star it references — Spica Alpha Virginis, the brightest point in Virgo. What...

CVE-2020-27786-Kernel-Exploit

CVE-2020-27786 Kernel Exploit Details You can find full details and explaination here: https://1day.dev/notes/Linux-Kernel-n-day-exploit-development TL;DR The vulnerability is a Race Condition that causes a write Use-After-Free. The race window has been extended using the userfaultd technique...

page-cache-corruption-lpes

Page Cache Corruption LPEs 3 Linux kernel local privilege escalation exploits. Same bug class as Dirty COW and Dirty Pipe. Root shell in seconds. Every major distro affected. All three corrupt the kernel's page cache — the in-memory copy of files that processes actually read and execute. The...

ghostlock-emerald

GhostLock for POCO M6 Pro emerald GhostLock CVE-2026-43499 is a 15-year-old Linux kernel use-after-free in the futex priority-inheritance code that lets any local user gain root. This project uses it to root the POCO M6 Pro MediaTek Helio G99 Ultra / MT6789 and install KernelSU on a locked...

CVE-2018-17182

CVE-2018-17182 Linux Kernel VMA-UAF Privilege Escalation Vulnerability CVE-2018-17182 About Google Project Zero security researchers released details and a proof-of-concept PoC exploit for a high-severity vulnerability in the Linux kernel present since kernel versions 3.16 through 4.18.8...

ScreenOff

ScreenOff CVE-2026-52910 kernel crash poc. ref: https://github.com/5unkn0wn/security-research/tree/CVE-2026-52910ltscosmitigation what socket + SOATTACHREUSEPORTCBPF + setsockopt race. timerfd/epoll callback storm slows down the receive path. replace the cBPF filter while the old prog is still in...

dirtypipe

About: Title: DirtyPipe Description: Exploit for a new Linux vulnerability known as 'Dirty PipeCVE-2022-0847' allows local users to gain root privileges. AUTHOR: drapl0n Version: 1.0 Category: Execution Target: Linux operating systems. Attackmodes: HID, Storage DirtyPipe: Exploit for a new Linux...

CVE-2015-1328-GoldenEye

CVE-2015-1328-GoldenEye about exploit: The overlayfs implementation in the linux aka Linux kernel package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file creation in the upper filesystem directory, which allows local users to obtain root access by leveragi...

ansible-mitigate-copyfail-dirtyfrag

Ansible playbook to mitigate CopyFail, DirtyFrag and Fragnesia vulnerabilities Mitigate CopyFail CVE-2026-31431, DirtyFrag CVE-2026-43284 and Fragnesia CVE-2026-46300 vulnerabilities in the Linux Kernel using a simple but effective Ansible playbook. Use this Ansible Playbook to run against your...