vulnerability-analysis-

Linuxカーネル脆弱性分析: CVE-2021-26708 概要 このリポジトリには、CVE-2021-26708 の完全な再現と分析が含まれています。これは、Linuxカーネルv5.10.12のAFVSOCKソケット操作における競合状態によって引き起こされるuse-after-free脆弱性です。実験環境全体は、Linuxカーネル脆弱性のための自動脆弱環境生成ツールである KernJC を用いて生成・実行されました。 脆弱性の詳細...

CVE-2026-31431

CVE-2026-31431 CVE-2026-31431の検出とテスト 0x01 クイックスタート 一部のターゲット環境にはPythonがインストールされていないため、この権限昇格 ロジックはC言語で書き直されました。 1. コンパイル LinuxマシンまたはWSLで次のコマンドを実行します（GLIBCのバージョン問題を回避するため、-staticの使用を推奨します）： root@kitploit: gcc -static exploit.c -o exploit 2. デプロイと実行 生成されたバイナリをターゲットマシンにアップロードします： root@kitploit: chmod...

CVE-2026-53365

CVE-2026-53365 — VsockDrop:iouring + AFVSOCK ゼロコピー参照カウントアンダーフロー、Page-Cache 書き換えによる権限昇格 HackSpeak 配布ミラー。このリポジトリは MaherAzzouzi/vsockdrop の配布ミラーであり 、コードはアップストリームと同一です。アップストリームには LICENSE が添付されていないため、ミラーは配布慣例に従って MIT License、Copyright c 2026 HackSpeak を採用しています。ソースコードの著作権は原作者 MaherAzzouzi に帰属します。 ⚠️...

CVE-2020-15801

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:46+00:00| seen| https://t.me/hackingAttack/49651 2026-09-01 20:01:51+00:00| seen| https://t.me/hackingAttack/45703 2026-09-02 01:01:58+00:00| seen| https://t.me/hackingAttack/49651 2026-09-02 01:02:04+00:00| seen|...

Exploit for Missing Release of Memory after Effective Lifetime in Linux Linux_Kernel

CVE-2026-53365 — VsockDrop:iouring + AFVSOCK: Improper refer...

EUVD-2018-6531

Malware in sbrugna...

EUVD-2021-13497

Malware in sbrugna...

CVE-2025-1290

A race condition Use-After-Free vulnerability exists in the virtiotransportspaceupdate function within the Kernel 5.4 on ChromeOS. Concurrent allocation and freeing of the virtiovsocksock structure during an AFVSOCK connect syscall can occur before a worker thread accesses it resulting in a...

The vulnerability of the vsock_remove_sock() function in the net/vmw_vsock/af_vsock.c module, which implements networking functions for the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the vsockremovesock function in the net/vmwvsock/afvsock.c module, which implements networking functions in the Linux kernel, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

CVE-2021-47024

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: free queued packets when closing socket As reported by syzbot 1, there is a memory leak while closing the socket. We partially solved this issue with commit ac03046ece2b "vsock/virtio: free packets during the socket...

CVE-2021-47024 vsock/virtio: free queued packets when closing socket

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: free queued packets when closing socket As reported by syzbot 1, there is a memory leak while closing the socket. We partially solved this issue with commit ac03046ece2b "vsock/virtio: free packets during the socket...

CVE-2021-47024

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: free queued packets when closing socket As reported by syzbot 1, there is a memory leak while closing the socket. We partially solved this issue with commit ac03046ece2b "vsock/virtio: free packets during the socket...

K12915342: Linux kernel vulnerability CVE-2018-14625

Security Advisory Description A flaw was found in the Linux Kernel where an attacker may be able to have an uncontrolled read to kernel-memory from within a vm guest. A race condition between connect and close function may allow an attacker using the AFVSOCK protocol to gather a 4 byte informatio...

Linux kernel 安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system, Linux. Linux kernel is vulnerable to a security flaw that affects the function vsockconnect in the component IPsec's file net/vmwvsock/afvsock.c. This operation results in a memory leak. No detailed...

Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.10.14 and fixes at least the following security issues: nbdaddsocket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndbqueuerq use-after-free that could be triggered by local attackers with access to the nbd device via an I/O...

Updated kernel packages fix security vulnerability

This kernel update is based on upstream 5.10.14 and fixes at least the following security issues: A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AFVSOCK implementation are caused by wrong locking in net/vmwvsock/afvsock.c...

Ubuntu: Security Advisory (USN-4727-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4727-1: Linux kernel vulnerability

Alexander Popov discovered that multiple race conditions existed in the AFVSOCK implementation in the Linux kernel. A local attacker could use this to cause a denial of service system crash or execute arbitrary code...

Linux kernel local elevation of privilege vulnerability (CNVD-2021-10822)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A local elevation of privilege vulnerability exists in Linux kernel versions prior to 5.10.13. The vulnerability stem...

CVE-2021-26708

A flaw was found in the Linux kernel. Wrong locking in the AFVSOCK socket can cause a local privilege escalation, bypassing SMEP and SMAP. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...