SELinux-Permissive-Only-CVE-2025-21479

SELinux-Permissive-Only-version-of-Cheese-aka-CVE-2025-21479 これは、現時点では SELinux permissive のみに対応した Cheese エクスプロイトのバージョンです。別名 CVE-2025-21479 としても知られ、Samsung Snapdragon デバイスを含む多くのデバイスの adreno kgsl に影響を与えました。 以下のリポジトリから一部のコードを再利用しています。PoC を最初に立ち上げてくれた zhuowei 氏と、維持管理が行き届いた活発なリポジトリを公開してくれている...

s26-m1q-ghostlock-selinux

S26 SM-S942U1 / m1q GhostLock CVE-2026-43499 — uid=0 root + KernelSU 激活达成 针对 Samsung Galaxy S26（SM-S942U1，codename m1q，SoC SM8850 骁龙 8 Elite Gen2， 内核 6.12.30-android16-5-android16-5-pd30ff70，Android 16）的 CVE-2026-43499（GhostLock）提权研究。 ✅ 最终结果：uid=0 root + KernelSU 激活达成 exploit 后通过 root helper 验证 $...

aquos-r6-ghostlock

AQUOS R6 GhostLock 一時 root Sharp AQUOS R6 向けの GhostLock CVE-2026-43499 のデバイス固有 Linux 5.4 ポート。検証済みのターゲットは SoftBank A101SH Judau で、Android 11 ビルド S0029 / 01.00.06、カーネル 5.4.61-qgki が動作している。 ghostlock54 ターゲットは実際の UID/GID 0 を取得し、SELinux を permissive に変更し、既存の ADB トランスポートを介して直接インタラクティブな root シェルを開く。TCP...

aquos-r7-ghostlock

AQUOS R7 GhostLock temporary root Device-specific Linux 5.10 port of GhostLock CVE-2026-43499 for the Sharp AQUOS R7. The validated target is the AQUOS R7 Mineva, SGA202SH/A202SH running Android 14 build 03.00.11, kernel 5.10.237-android12-9-00013-gd09ef2e980e0-ab13968955 SM8450. The previous...

cve-2026-43499-m3q-azf1

GhostLock SELinux park — SM-S948U1 / AZF1 m3q Samsung Galaxy S26 Ultra（SM-S948U1、コードネーム m3q ）をファームウェア S948U1UES3AZF1 （GKI 6.12.30-android16-5）上で動作させる、機能するSELinux専用park の研究スナップショット。 このパッケージは完全なrootではありません 。SELinuxをPermissiveに切り替え、後続の作業に十分な期間reclaimを保持します。ここではホストuid=0は達成されません。 これはGhostLock /...

IonStack-S22-cve-2026-43499

IonStack-S22-cve-2026-43499 元のリポジトリと統合済み: こちらにあります https://github.com/CamsShaft/IonStack-S22 私のSM-S901W S22 5.10.168-android12-9-27760517-abS901WVLS4DWL3で、selinux permissiveのカーネルドメインにおける完全なroot権限を取得。 注記:...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock — PFEM10 CVE-2026-43499 IonStack exploit for OP...

EUVD-2017-14655

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2021-23240

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - selinuxeditcopytfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary...

selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.

...

DEBIAN-CVE-2021-23240

selinuxeditcopytfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not...

ALPINE-CVE-2021-23240

selinuxeditcopytfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not...

[SECURITY] Fedora 25 Update: knot-resolver-1.3.2-1.fc25

The Knot DNS Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as...

[SECURITY] Fedora 26 Update: knot-resolver-1.3.2-1.fc26

The Knot DNS Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as...

[SECURITY] Fedora 26 Update: knot-resolver-1.3.1-1.fc26

The Knot DNS Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as...

[SECURITY] Fedora 26 Update: knot-resolver-1.2.4-1.fc26

The Knot DNS Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as...

PT-2017-16574

Name of the Vulnerable Software and Affected Versions OnePlus 3 and 3T OxygenOS versions prior to 4.0.2 Description An issue was discovered in ABOOT that allows an attacker to reboot the device into fastboot mode without authentication. This can be achieved by either physically pressing the "Volu...