CVE-2026-74633

A flaw was found in the Linux kernel's tracing module. A local user can trigger a NULL pointer dereference by attempting to remove a specific event filter for an unloaded module. This vulnerability arises when a module-only event filter is cached with a null match, and a subsequent write operatio...

CVE-2026-74622

A flaw was found in the Linux kernel's 'atlantic' network driver. The aqringrxdeinit function, responsible for deinitializing receive RX buffers, fails to properly free pages and their associated Direct Memory Access DMA mappings for buffers that have been consumed but not yet refilled. This...

CVE-2026-74708

A flaw was found in the Linux kernel's xsk AFXDP socket component. This vulnerability arises from improper validation of launch-time metadata size, where the metadata can extend beyond its allocated structure. This could lead to inconsistent decisions if user space concurrently changes flags,...

CVE-2026-74601

A flaw was found in the Linux kernel's ring-buffer component. A race condition exists within the ringbufferswapcpu function, where a committing counter can temporarily drop to zero during a write operation. This allows a buffer swap to occur while a write is still in progress, resulting in an...

CVE-2026-74718

A flaw was found in the devlink component of the Linux kernel. When the devlinknlreloaddoit function is called, it may fail to release a network namespace reference under specific error conditions. This oversight occurs when the requested network namespace differs from the current one and the...

CVE-2026-74698

A flaw was found in the Linux kernel's net/mlx5e driver. When a Send Queue SQ is re-activated, the Byte Queue Limits BQL counters are incorrectly reset even if there are still network transmissions in progress. This can lead to an inconsistent state, causing the kernel to trigger an error and...

CVE-2026-74699

A flaw was found in the drm/xe component of the Linux kernel. This vulnerability occurs due to improper handling of the q-replaystate, where it is blindly overwritten. This can lead to a memory leak of previously allocated resources. An attacker could exploit this flaw to exhaust system memory,...

CVE-2026-74680

A flaw was found in the Linux kernel's cxacru USB ATM driver. When the cxacrucm function encounters an error, it fails to properly terminate an already submitted receive USB Request Block URB. This oversight can lead to the driver attempting to resubmit an active URB, which triggers a warning in...

CVE-2026-74654

A flaw was found in the Linux kernel's 8250dma serial driver. When a serial port is closed while an RX receive transfer is active, a stale state can persist where the rxrunning flag remains set even though the receive channel is no longer available. If the port is subsequently reopened, a specifi...

Dirty-Frag-CVE-2026-43284

Dirty-Frag-CVE-2026-43284 Dirty Frag CVE‑2026‑43284 & CVE‑2026‑43500 — Laboratorio di Riproduzione e Rilevamento dell'Exploit Questo repository documenta la riproduzione end‑to‑end, l'ingegneria del rilevamento e la risposta agli incidenti per la catena di escalation dei privilegi locali LPE Dirt...

Copy-Fail-CVE-2026-31431-Lab

Copy Fail CVE-2026-31431 — Laboratório de Reprodução e Detecção de Exploit Este repositório documenta a reprodução de ponta a ponta, a engenharia de detecção e a resposta a incidentes para CVE-2026-31431 "Copy Fail" , uma vulnerabilidade crítica de escalonamento de privilégios local no kernel Lin...

CVE-2026-75037 Polkit authentication bypass in LACT

Polkit Authentication Based on UnixProcessSubject / Peer PID in LACT on Linux allows an Authentication Bypass. This issue affects LACT through 0.10.0. Fixed by commit d0478fe42c2219454e272f96b1cbd29ab37ee566...

CVE-2026-75037

LACT (Linux AppContainer Tool), a Linux-based application container management tool, is vulnerable to an authentication bypass through its Polkit authorization mechanism. The root cause lies in the reliance on UnixProcessSubject / Peer PID for Polkit authentication, which can be exploited locally...

EUVD-2026-65390

Polkit Authentication Based on UnixProcessSubject / Peer PID in LACT on Linux allows an Authentication Bypass. This issue affects LACT through 0.10.0. Fixed by commit d0478fe42c2219454e272f96b1cbd29ab37ee566...

vcheck

vcheck Controlla un host Linux remoto via SSH per le vulnerabilità dei moduli del kernel Copy Fail e Dirty Frag e, opzionalmente, applica le mitigazioni:...

IT19115276

IT19115276 Relazione del Compito 1 di SNP - Sfruttamento di una macchina Linux Vulnerabilità CVE-2014-0038 Ho spiegato come sfruttare questa vulnerabilità con degli screenshot...

rootpacket-cve-2026-31431

rootpacket CVE-2026-31431 Un toolkit di cryptojacking Linux da Docker all'host catturato da attacchi live su Kinryū Labs honeypot. Entra attraverso un'API del motore Docker esposta, evade dal container per ottenere root sull'host con CVE-2026-31431 , installa un rootkit del kernel ed esegue un...

CVE-2024-1086-Exploit

🔒 Projeto de Exploit CVE-2024-1086 🛡️ Exploit educacional polido do kernel Linux para pesquisa em segurança Este projeto fornece um modelo robusto e não funcional para estudar CVE-2024-1086, uma vulnerabilidade de use-after-free no componente netfilter: nftables do kernel Linux, possibilitando...

CVE-2026-22009-Linux-eBPF-Map-Locking-Race-Use-After-Free

CVE-2026-22009 – Linux eBPF Map Locking Race → Use‑After‑Free Programmcode C-Simulation root@kitploit: // ebpfmapuaf.c - Simulated concurrent map update/free include include include include void mapdata = NULL; int mapfreed = 0; void updatemapvoid arg // Simulate eBPF program updating map if...

copyfail-guard

CopyFail Guard root@kitploit: / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / // // / // / // / / / // / / / / // / // / // / / / // / // ./, // ,/// /,/,// ,/ // // Valutazione rapida e verificabile dell'esposizione Linux e mitigazione per CVE-2026-31431 “Copy Fail” in...