SELinux-Permissive-Only-CVE-2025-21479

SELinux-Permissive-Only-version-of-Cheese-aka-CVE-2025-21479 目前这只是 Cheese 漏洞利用（又称 CVE-2025-21479）的仅 SELinux 宽容版本，该漏洞影响了包括三星骁龙设备在内的许多设备上的 adreno kgsl。 部分代码取自以下仓库，我要感谢 zhuowei 最初启动了这个概念验证，也感谢 sarabpal-dev 保持着一个维护良好且活跃的仓库 https://github.com/zhuowei/cheese https://github.com/sarabpal-dev/cheese-cake...

s26-m1q-ghostlock-selinux

S26 SM-S942U1 / m1q GhostLock CVE-2026-43499 — uid=0 root + KernelSU 激活达成 针对 Samsung Galaxy S26（SM-S942U1，codename m1q，SoC SM8850 骁龙 8 Elite Gen2， 内核 6.12.30-android16-5-android16-5-pd30ff70，Android 16）的 CVE-2026-43499（GhostLock）提权研究。 ✅ 最终结果：uid=0 root + KernelSU 激活达成 exploit 后通过 root helper 验证 $...

aquos-r6-ghostlock

AQUOS R6 GhostLock 临时 root 针对 Sharp AQUOS R6 的设备专用 Linux 5.4 移植版 GhostLock（CVE-2026-43499）。已验证的目标是运行 Android 11 构建版本 S0029 / 01.00.06、内核 5.4.61-qgki 的 SoftBank A101SH（Judau）。 ghostlock54 目标可获取真实的 UID/GID 0，将 SELinux 更改为 permissive，并直接通过现有的 ADB 传输打开交互式 root shell。它不监听 TCP，也不授予完整的 Linux 能力集。 构建 需要...

aquos-r7-ghostlock

AQUOS R7 GhostLock temporary root Device-specific Linux 5.10 port of GhostLock CVE-2026-43499 for the Sharp AQUOS R7. The validated target is the AQUOS R7 Mineva, SGA202SH/A202SH running Android 14 build 03.00.11, kernel 5.10.237-android12-9-00013-gd09ef2e980e0-ab13968955 SM8450. The previous...

cve-2026-43499-m3q-azf1

GhostLock SELinux 驻留（park）— SM-S948U1 / AZF1 m3q 一份针对三星 Galaxy S26 Ultra（SM-S948U1，代号 m3q ）在固件 S948U1UES3AZF1 （GKI 6.12.30-android16-5）上可用的仅 SELinux 驻留（park）研究快照。 此包并非 完整的 root。它将 SELinux 切换为 Permissive，并维持回收（reclaim）足够长的时间以衔接后续工作。此处未实现主机uid=0。 基于 GhostLock / CVE-2026-43499 系列工作构建：小米 popsicle...

IonStack-S22-cve-2026-43499

IonStack-S22-cve-2026-43499 已与原始仓库合并： 在此处查找 https://github.com/CamsShaft/IonStack-S22 在我的 SM-S901W S22（5.10.168-android12-9-27760517-abS901WVLS4DWL3）上，以 selinux permissive 模式在内核域中实现了完整 root。 备注： 这次我不会深入细节或长篇大论，因为外面已经有大约 5,000...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock — PFEM10 CVE-2026-43499 IonStack exploit for OP...

EUVD-2017-14655

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2021-23240

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - selinuxeditcopytfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary...

selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.

...

DEBIAN-CVE-2021-23240

selinuxeditcopytfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not...

ALPINE-CVE-2021-23240

selinuxeditcopytfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not...

[SECURITY] Fedora 25 Update: knot-resolver-1.3.2-1.fc25

The Knot DNS Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as...

[SECURITY] Fedora 26 Update: knot-resolver-1.3.2-1.fc26

The Knot DNS Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as...

[SECURITY] Fedora 26 Update: knot-resolver-1.3.1-1.fc26

The Knot DNS Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as...

[SECURITY] Fedora 26 Update: knot-resolver-1.2.4-1.fc26

The Knot DNS Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as...

PT-2017-16574

Name of the Vulnerable Software and Affected Versions OnePlus 3 and 3T OxygenOS versions prior to 4.0.2 Description An issue was discovered in ABOOT that allows an attacker to reboot the device into fastboot mode without authentication. This can be achieved by either physically pressing the "Volu...