CVE-2026-64600-Refluxfs-PoC

RefluXFS CVE-2026-64600 PoC Questa repo contiene un PoC della vulnerabilità di race condition recentemente scoperta che interessa il COW su XFS, segnalata dall'eccellente Qualys Security Team. 1 2 Info sul PoC Scritto a mano basandosi sull'eccellente analisi dell'advisory di Qualys. Riscrive i...

CVE-2025-6019

CVE-2025-6019 Prova di Concetto PoC Questo repository contiene uno script di Prova di Concetto PoC per CVE-2025-6019 , una vulnerabilità di escalation dei privilegi locali LPE in libblockdev e udisks. Lo script crea un'immagine del filesystem XFS con un binario SUID bash e sfrutta la vulnerabilit...

CVE-2026-64600

CVE-2026-64600 – Ferramenta de Detecção e Mitigação RefluXFS Este repositório fornece um utilitário C abrangente para detectar , verificar com segurança e mitigar a vulnerabilidade RefluXFS CVE‑2026‑64600 em sistemas Linux que utilizam o sistema de arquivos XFS. A ferramenta verifica se o kernel ...

CVE-2025-6018

CVE-2025-6018 + CVE-2025-6019 Guida all'Escalation dei Privilegi 中文 📋 Passaggi Rapidi per lo Sfruttamento Passo 1: Preparare l'Immagine XFS Macchina Locale Create 300MB XFS image dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image Mount and install SUID bash mkdir mnt sudo mount -t...

CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit

CVE-2025-6018 + CVE-2025-6019 Guida all'Escalation dei Privilegi 📋 Passaggi Rapidi per lo Sfruttamento Passo 1: Preparare l'immagine XFS Macchina locale Create 300MB XFS image dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image Mount and install SUID bash mkdir mnt sudo mount -t xf...

CVE-2025-6019

CVE-2025-6019: Escalation dei privilegi locali in libblockdev Sommario CVE-2025-6019 è una vulnerabilità di escalation dei privilegi locali LPE trovata nella libreria libblockdev, che interagisce con il demone udisks2 e Polkit. Descrizione della vulnerabilità Un attaccante locale con privilegi...

CVE-2025-6019_Exploit

CVE-2025-6019Exploit Primo passo: esegui 1.sh su un dispositivo Linux per costruire xfs.image Secondo passo: trasferisci xfs.image sul dispositivo vittima ed esegui 2.sh. Di seguito un esempio di successo: neko@aosc-neko205 tmp $ bash 2.sh 当前用户: neko uid=1000neko gid=1001neko...

CVE-2025-6019

CVE-2025-6019 PoC Semplice proof-of-concept per un'escalation dei privilegi nel ridimensionamento XFS di UDisks2. File createpayload.sh: Crea un'immagine XFS con un payload SUID rootbash. exploit.sh: Innesca il percorso di ridimensionamento e avvia la shell SUID. Requisiti mkfs.xfs, udisksctl,...

Lifecycle-Based Design and Evaluation of Real-Time Backup Triggers for Ransomware Damage Mitigation

Ransomware continues to encrypt files during the interval between attack onset and detection. Real-time backups can mitigate this damage by preserving files before they are modified. The previously proposed Real-Time Open-File Backup System ROFBS triggers backups primarily on file-open events...

ROS-20261006-73-0420

The vulnerability of the xfsaildpush function in the fs/xfs/xfstransail.c module of the Xfs file system in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_21557)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202621557 advisory. kernel: can: j1939: j1939sessionnew: fix skb reference counting CVE-2024-56645 kernel: ima: don't clear IMADIGSIG flag when setting or removing non-IMA...

CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation

CVE-2025-6019: Escalation dei privilegi TOCTOU tramite ridimensionamento XFS in udisks2 Questo repository contiene una Proof of Concept PoC per CVE-2025-6019, una vulnerabilità di race condition in udisks2 che consente l'escalation locale dei privilegi tramite il ridimensionamento del filesystem...

CVE-2026-90384

A flaw was found in the Linux kernel's iomap subsystem. This issue arises when iomap callback functions, specifically -iomapbegin, fail to release a "folio batch" of memory pages during certain error conditions. This resource management oversight, particularly when used by filesystems like XFS,...

CVE-2025-6019-udisks-lpe-no-image

CVE-2025-6019-udisks-lpe-no-image Catena di escalation dei privilegi basata solo su script che utilizza CVE-2025-6019 e UDisks2 nessuna immagine del filesystem inclusa. Crediti, Contesto e Catena dell'Exploit Questo repository non introduce una nuova vulnerabilità. La tecnica di escalation dei...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: xfs: Avoid dereferencing log items after pushing callbacks. After xfsaildpushitem calls ioppush, the log item may have been freed if the AIL lock was dropped during the push operation. Background inode reclaim or the dquot shrink...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: dm: Fixed unconditional IO throttling caused by REQPREFLUSH When a bio with REQPREFLUSH is submitted to dm, sendemptyflush generates a flushbio with REQOPWRITE | REQPREFLUSH | REQSYNC, which causes the flushbio to be throttled by...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mm, thp: Bail out early for writeback pages in collapsefile Currently, collapsefile does not explicitly check PGwriteback. Instead, pagehasprivate and trytoreleasepage are used to filter writeback pages. This approach does not wo...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: xfs: Fixed the allocation of the log recovery buffer for the legacy hsize parameter. The commit a70f9fe52daa “xfs: detects and handles invalid iclog size settings provided by mkfs“” added a fix for incorrect hsize values used ...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: xfs: added bounds checking to xlogrecoverprocessdata There is a lack of verification of the space occupied by fixed members of xlogopheader in xlogrecoverprocessdata. We can create a crafted image to trigger an out-of-bounds read...

CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit

Guida all'Escalation dei Privilegi CVE-2025-6018 + CVE-2025-6019 Cinese 📋 Passaggi rapidi per lo sfruttamento Passaggio 1: Preparare l'immagine XFS macchina locale Create 300MB XFS image dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image Mount and install SUID bash mkdir mnt sudo...