dirtyclone-exploit

DirtyClone Exploit Framework CVE-2026-46331 — Linux Kernel Local Privilege Escalation TC pedit + IPsec TEE Page Cache Corruption · Affected kernels: ≤ 6.12.9 root@kitploit: ╔═══════════════════════════════════════════════════════════════╗ ║ ║ ║ | \ | | / | | ║ ║ | | | | | '| | | | | | | |/ | ' \ ...

cve_2026_31431

CVE-2026-31431 "Copy Fail" Kit de herramientas Detector y LPE de prueba de concepto para el error de escritura temporal en la caché de páginas de Linux algifaead / authencesn divulgado el 2026-04-29. Divulgación del informe: https://xint.io/blog/copy-fail-linux-distributions Autorización Úselo...

CVE-2026-31635

🩸 CVE-2026-31635 – DirtyDecrypt Linux Kernel Local Privilege Escalation via RXGK Page Cache Corruption "DirtyDecrypt" — Part of the 2026 "Dirty" family exploits 📖 Overview DirtyDecrypt CVE-2026-31635 is a local privilege escalation vulnerability in the Linux kernel's rxrpc subsystem specifically...

dirtyclone-CVE-2026-43503

CVE-2026-43503 — DirtyClone Linux local privilege escalation. A cloned skbuff loses the SKBFLSHAREDFRAG flag, so ESP in-place decryption writes into file-backed page-cache memory. The PoC patches /etc/passwd in cache to inject a uid-0 account and gives a root shell. Disk is never modified. Fixed ...

copy-fail-mcp

Copy Fail MCP 📖 Installation Guide — quick start, manual setup, and troubleshooting CVE-2026-31431 — The worst Linux vulnerability ever discovered. Now controllable via MCP. 732 bytes of Python. No compilation. No race condition. No per-distro offsets. One shot, universal root on every Linux kern...

CVE-2022-0847

CVE-2022-0847 Dirty Pipe Linux Kernel Privilege Escalation Analysis toc This article was first published on Huawei Security's official account, this is the blog version more complete First published link: https://mp.weixin.qq.com/s/6VhWBOzJ7uu80nzFxe5jpg Vulnerability Introduction Vulnerability I...

CVE-2022-0847-POC

CVE-2022-0847 CRÉDITOS: root@kitploit: autor de la vulnerabilidad: Max Kellermann explicación de Max Kellermann: https://dirtypipe.cm4all.com/ RECURSOS: root@kitploit: CACHÉ DE PÁGINA: https://manybutfinite.com/post/page-cache-the-affair-between-memory-and-files/ PIPE:...

CVE-2026-31431-copy-fail

CVE-2026-31431 Exploit de Fallo de Copia Parte 1: Concepto Teórico Cómo Funciona CVE-2026-31431 En lugar de que el sistema obtenga archivos directamente del lento disco físico —lo que desperdicia mucho tiempo— el sistema Linux crea una copia temporal del archivo dentro de la RAM, conocida como Pa...

CVE-2026-46300

🛡️ CVE-2026-46300 - Fragnesia Un ataque limpio y mortal a la caché de páginas Variante de la familia "Dirty Frag" 📌 Descripción general CVE-2026-46300 Fragnesia es un fallo lógico de alta gravedad en el manejo de búferes de socket del núcleo Linux skbtrycoalesce dentro del subsistema...

CVE-2019-5489

CVE 2019-5489 This repository contains Page Cache Side Channel Attacks CVE-2019-5489 proof of concept for Linux. In order to evaluate page cache side channel, I have implemented covert channel between two processes. The sender process send confidential data to a receiver process via the page cach...

CVE-2026-46331

🚨 CVE-2026-46331 - Error COW del Kernel de Linux Corrupción de la Caché de Páginas por Copia en Escritura COW Parcial en net/sched del Kernel de Linux -orange?style=for-the-badge Una vulnerabilidad del kernel de Linux causada por un manejo incorrecto de la Copia en Escritura COW en el subsistema ...

packet_edit_meme

PACKETEDITMEME - aka CVE-2026-46331 net/sched actpedit partial-COW page-cache corruption culprit 899ee91156e5, present v5.18 .. fixed v7.1-rc7. packeteditmeme.c turns it into unprivileged local root: a userns CAPNETADMIN child overwrites the cached ELF entry of setuid-root /bin/su with...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mm: Use memallocnofssave in pagecacheraorder See commit f2c817bed58d “mm: Use memallocnofssave in readahead path”. Ensure that pagecacheraorder does not attempt to reclaim file-backed pages too often, as this can lead to a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: net: skbuff: The SKBFLSHAREDFRAG bit was not properly propagated through the frag-transfer helpers. Two frag-transfer helpers pskbcopyfclone and skbshift fail to propagate the SKBFLSHAREDFRAG bit in skbshinfo-flags when moving...

copy-fail-c

Copy Fail CVE-2026-31431 - C port English en ∙ 日本語 ja ∙ 简体中文 zh-cn ∙ 한국어 ko ∙ Русский ru Copy Fail Linux LPE CVE-2026-31431 のクロスプラットフォームC言語による再実装です。この脆弱性はTheori / Xintによって2026年4月29日に公開されました。脆弱性の詳細、タイムライン、Theoriによる発見プロセスについては、copy.fail の公式レポートを参照してください。 公開されているProof-of-Concept PoC...

DIRTY-FRAG-Detection-with-Wazuh-4.14.4

DIRTY FRAG Detection with Wazuh 4.14.4 - CVE-2026-43284 / CVE-2026-43500 Detection engineering for the Dirty Frag kernel LPE - Ubuntu / RHEL / Debian / Amazon Linux What is Dirty Frag? CVE-2026-43284 / CVE-2026-43500 is a Linux kernel Local Privilege Escalation LPE that chains two independent...

CVE-2026-43284

Dirty Frag - kernel Linux critical Vulnerability- CVE-2026-43284 📚 Introduction The exploit chain, classified as a Local Privilege Escalation LPE , allows an unprivileged user to obtain root access on virtually all modern Linux distributions running kernels released since 2017, spanning...

CVE-2026-43494-PinTheft-PoC

SLEY — PinTheft PoC CVE-2026-43494 Proof of concept — uid=1000raken → uid=0root after ./sley on WSL2 6.6.87.2-microsoft-standard-WSL2 Single-file proof-of-concept for CVE-2026-43494 PinTheft: a Linux kernel local privilege escalation that chains an RDS zerocopy reference-count bug with iouring...

CVE-2026-43284-DirtyFrag-PoC

CVE-2026-43284 — 4-byte XFRM/ESP Proof-of-concept local privilege escalation via XFRM/ESP page-cache corruption 4-byte write primitive · 48 iterations · 192-byte ELF overwrite · unprivileged user + netns Proof of concept Left: kernel preflight, setuid scan, and exploit chain · Right: root shell...

CVE-2026-31431

CVE-2026-31431 "Copy Fail" - Research & Pentesting Tool ⚠️ DISCLAIMER This project is provided strictly for: Security research Educational purposes Authorized penetration testing CTF and laboratory environments By using this tool, you agree that: You own the target system or You have explicit...