CVE-2026-98425

A flaw was found in the Linux kernel's mac80211 wireless subsystem. An unnecessary warning is triggered during an ad-hoc wireless network Independent Basic Service Set or IBSS scan when a regulatory domain change leaves no permitted channels available. A local user initiating network scans during...

CVE-2026-98421

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A local attacker can cause a denial of service DoS by requesting a Tunneled Direct Link Setup TDLS setup confirmation for a nonexistent peer station. Because the subsystem does not verify that the peer station exists before...

ssbd-tools

Tools for exercising Speculative Store Bypass Disable The ssbd-tools project is a collection of programs that makes use of the Speculative Store Bypass Disable SSBD functionality provided in x86 processors. SSBD is a processor based mitigation for the Speculative Store Bypass attack that is...

CVE-2026-98394

A flaw was found in the Linux kernel's UNIX domain socket afunix implementation. When a blocking receive operation is performed using a zero-length buffer and the peek flag on a socket where the last queued message contains out-of-band OOB data, the kernel fails to return properly. A local attack...

CVE-2026-98393

A flaw was found in the Linux kernel. A local user can trigger an integer overflow when transmitting large User Datagram Protocol UDP packets over a network interface configured with an unusually large Maximum Transmission Unit MTU. By enabling Path MTU discovery socket options and sending an...

CVE-2026-98391

A flaw was found in the Linux kernel's Intel Xe graphics driver. During graphics virtual memory teardown, the driver asynchronously releases its runtime power management reference, allowing the graphics device to enter a suspended state while page-fault events remain queued. When the driver...

CVE-2026-98389

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. During recovery from a graphics processing unit GPU reset, background power management tasks can attempt to change power profiles before the reset completes. This improper synchronization causes hardware register access while reset loc...

CVE-2026-98390

A flaw was found in the Linux kernel. When running in certain virtualized environments, an unexpected hardware topology reported by the hypervisor can cause the AMD node initialization logic to calculate a divisor of zero. This condition triggers an unhandled divide-by-zero error during system...

CVE-2026-98388

A flaw was found in the Linux kernel. During program execution, the kernel closes file descriptors marked for close-on-exec while holding an internal process state lock. If closing a file descriptor stalls on an unresponsive or user-space filesystem, the lock remains held and blocks related syste...

CVE-2026-98423

A flaw was found in the Linux kernel's mac80211hwsim virtual wireless driver. A local attacker can cause a denial of service DoS by triggering a race condition between simulated radio shutdown and incoming network frame delivery from user space. Stopping the radio while frames are being processed...

CVE-2026-98420

A flaw was found in the Linux kernel's ksmbd module. A remote client can cause a Denial of Service DoS by initiating a new session setup exchange on an existing Server Message Block SMB connection. Due to an error where session idle time is confused with credential expiration time, the server...

CVE-2026-98392

A flaw was found in the Linux kernel's Intel Bluetooth PCIe driver. An off-by-one boundary check error in the transmission interrupt handler allows an array index to exceed valid buffer limits. A local attacker could exploit this flaw to crash the system, resulting in a denial of service DoS, or...

CVE-2026-90277

A flaw was found in the Linux kernel's md/md-llbitmap component. This vulnerability occurs when a bitmap creation fails, leading to a Use-After-Free UAF condition where the system might attempt to access memory that has already been released. A local attacker could potentially exploit this flaw t...

CVE-2022-23222

CVE-2022-23222 Chinese writeup: https://tr3e.ee/posts/cve-2022-23222-linux-kernel-ebpf-lpe.txt For educational/research purposes only. Use at your own risk. Build & Run $ make cc -I include -static -w -o exploit exploit.c $ ./exploit phase1/8 'create bpf maps' running + phase1/8 'create bpf maps'...

CVE-2026-90206

A flaw was found in the Linux kernel. A timing issue, known as a race condition, can occur within the Non-Volatile Memory Express over Fabrics NVMe-oF target nvmet component. This happens when a system administrator or process changes a queue identifier QID limit while the system is allocating...

Exploiting-a-Linux-kernel-vulnerability

Exploiting-a-Linux-kernel-vulnerability - IT19159140 Local Root vulnerability- CVE-2019-13272 / Security Bypass Vulnerability – CVE-2019-14287 Absolutely, I always choose Linux vulnerability, but then I had to choose different vulnerability else because I didn't know two people could do the same...

Linux-Vulnerability-CVE-2016-0728-and-Exploit

Linux-Vulnerability-CVE-2016-0728-and-Exploit Document on Linux Kernal Vulnerability CVE-2016-0728 and Exploitation -References- https://perception-point.io/resources/research/analysis-and-exploitation-of-a-linux-kernel-vulnerability/...

My-CVEs

A list of vulnerabilities I found. Some vulnerabilities come with deep technical writeups, exploits or even fuzzing session walkthroughs. Some vulnerabilities don't have CVEs because maintainers ghosted me, or because a maintainer didn't agree it's a security bug, I decided to release those as...

CVE-2026-98427

A flaw was found in the Linux kernel's CoDel Controlled Delay network packet scheduling subsystem. An unprivileged local user can trigger a Denial of Service DoS by configuring extremely small packet intervals on network queues. This flaw causes the packet-dropping logic to enter an unbounded loo...

CVE-2026-98428

A flaw was found in the Linux kernel's ALSA USB 6fire audio driver. The driver improperly embeds USB Request Blocks URBs—structures that manage USB communications—directly inside driver objects rather than allocating them dynamically. Because URBs rely on reference counting and can be released...