71 matches found
ghostlock-sabrina
GhostLock Sabrina Root exploit for Chromecast with Google TV sabrina via CVE-2026-43499 -- a use-after-free in the Linux kernel's futex PI priority inheritance subsystem. Achieves root on a locked bootloader device running Android 14 with kernel 5.15.170 PGO+BOLT+LTO, clang 17. The vulnerability...
ghostlock-emerald
GhostLock para POCO M6 Pro emerald GhostLock CVE-2026-43499 es un use-after-free de 15 años de antigüedad en el código de herencia de prioridad de futex del kernel de Linux que permite a cualquier usuario local obtener root. Este proyecto lo utiliza para rootear el POCO M6 Pro MediaTek Helio G99...
CVE-2026-43499
👻 CVE-2026-43499 — GhostLock La falla GhostLock de 15 años permite escalar a root y escapar de contenedores en la mayoría de las distribuciones de Linux GhostLock es una vulnerabilidad Use-After-Free UAF de alta gravedad en el subsistema rtmutex del kernel de Linux. La falla se origina en una...
ghostlock-oneplus
GhostLock — Locked Bootloader Jailbreak Kernel exploit for Android devices with locked bootloader. Achieves temporary root + KernelSU installation without unlocking bootloader or modifying boot image. Runtime auto-detection of kernel version with multi-device offset table. Vulnerability...
GhostLock-OPPO-PCKM00
GhostLock — PoC para OPPO PCKM00 4.14.180 CVE-2026-43499 GhostLock — Escalada de privilegios local por use-after-free en la herencia de prioridad del futex del kernel de Linux, PoC adaptado al OPPO PCKM00 OP4A57, SM6150, Android 11, kernel 4.14.180-perf+. AVISO / 免责声明 Este proyecto es solo para...
pixel-ksu-root
pixel-ksu-root Rootea un Google Pixel de fábrica con el bootloader bloqueado desde un adb shell sin privilegios, usando una CVE del kernel — sin desbloqueo, sin flasheo, sin ayuda del fabricante. Un fallo del kernel alcanzable desde espacio de usuario proporciona una primitiva de lectura/escritur...
PT-2026-93644
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description On PREEMPT RT, a use-after-free issue exists during a Priority Inheritance PI requeue. The problem occurs when FUTEX CMP REQUEUE PI triggers a slab-out-of-bounds report in the futex...
CVE-2026-80778
In the Linux kernel, the following vulnerability has been resolved: futex/pi: Reject cross-mm private futex owners A private futex key borrows the waiter's mm without taking an mmusers reference. Nevertheless, attachtopiowner currently accepts an owner from a different address space and copies th...
Exploit for Use After Free in Linux Linux_Kernel
GhostLock — OPPO PCKM00 4.14.180 PoC CVE-2026-43499 Ghos...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2026-43499 — Linux Kernel Futex PI Use-After-Free Bug...
kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock
A flaw was found in the Linux kernel's futex Fast Userspace Mutex requeue mechanism. When a non-top waiter attempts to requeue a Priority Inheritance PI futex it already owns, a NULL pointer dereference can occur. This issue, specifically within the removewaiter function during a self-deadlock...
kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock
A flaw was found in the Linux kernel's futex Fast Userspace Mutex requeue mechanism. When a non-top waiter attempts to requeue a Priority Inheritance PI futex it already owns, a NULL pointer dereference can occur. This issue, specifically within the removewaiter function during a self-deadlock...
kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock
A flaw was found in the Linux kernel's futex Fast Userspace Mutex requeue mechanism. When a non-top waiter attempts to requeue a Priority Inheritance PI futex it already owns, a NULL pointer dereference can occur. This issue, specifically within the removewaiter function during a self-deadlock...
kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock
A flaw was found in the Linux kernel's futex Fast Userspace Mutex requeue mechanism. When a non-top waiter attempts to requeue a Priority Inheritance PI futex it already owns, a NULL pointer dereference can occur. This issue, specifically within the removewaiter function during a self-deadlock...
kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock
A flaw was found in the Linux kernel's futex Fast Userspace Mutex requeue mechanism. When a non-top waiter attempts to requeue a Priority Inheritance PI futex it already owns, a NULL pointer dereference can occur. This issue, specifically within the removewaiter function during a self-deadlock...
kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock
A flaw was found in the Linux kernel's futex Fast Userspace Mutex requeue mechanism. When a non-top waiter attempts to requeue a Priority Inheritance PI futex it already owns, a NULL pointer dereference can occur. This issue, specifically within the removewaiter function during a self-deadlock...
kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock
A flaw was found in the Linux kernel's futex Fast Userspace Mutex requeue mechanism. When a non-top waiter attempts to requeue a Priority Inheritance PI futex it already owns, a NULL pointer dereference can occur. This issue, specifically within the removewaiter function during a self-deadlock...
kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock
A flaw was found in the Linux kernel's futex Fast Userspace Mutex requeue mechanism. When a non-top waiter attempts to requeue a Priority Inheritance PI futex it already owns, a NULL pointer dereference can occur. This issue, specifically within the removewaiter function during a self-deadlock...
SUSE CVE-2026-53327
In the Linux kernel, the following vulnerability has been resolved: debugobjects: Do not fillpool if piblockedon On RT enabled kernels, fillpool ends up calling rtlocklock, which asserts if current::piblockedon is set, because a task can obviously only block on one lock as otherwise the priority...
CVE-2026-53327
A flaw was found in the Linux kernel's debugobjects functionality. On systems with Real-Time RT enabled kernels, the fillpool function can lead to a system assertion if a task is already blocked on a lock, causing corruption of the priority inheritance chain. This issue can result in a Denial of...