libpcap

LIBPCAP 1.x.y by The Tcpdump Group To report a security issue please send an e-mail to [email protected]. To report bugs and other problems, contribute patches, request a feature, provide generic feedback etc please see the guidelines for contributing. The documentation directory has README...

firejail

Firejail Firejail은 잠재적으로 신뢰할 수 없는 애플리케이션을 실행하기 위한 제한된 환경을 설정하여 Linux 시스템을 보호하도록 설계된 경량 보안 도구입니다. 보다 구체적으로, Linux 네임스페이스namespaces, seccomp-bpf 및 Linux capabilities를 사용하여 보안 침해 위험을 줄이는 SUID 샌드박스 프로그램입니다. 프로세스와 그 모든 하위 프로세스가 네트워크 스택, 프로세스 테이블, 마운트 테이블과 같은 전역적으로 공유되는 커널 리소스를 각자의 전용 뷰private view로 가질...

Ubuntu-0day

Ubuntu16.04-0day Затронутые версии: уязвимы все экземпляры Ubuntu AWS с ядром 4.4 Jann Horn обнаружил, что в некоторых случаях Berkeley Packet Filter BPF в ядре Linux некорректно выполняет проверку расширения знака в checkaluop. Локальный злоумышленник может использовать эту уязвимость для...

IPCDump

ipcdump Ankündigungsbeitrag ipcdump ist ein Werkzeug zur Verfolgung der Interprozesskommunikation IPC unter Linux. Es deckt die meisten gängigen IPC-Mechanismen ab – Pipes, Fifos, Signale, Unix-Sockets, Loopback-Netzwerk und Pseudoterminals. Es ist ein nützliches Werkzeug zum Debuggen von...

CVE-2021-3490-POC

CVE-2021-3490 श्रेय: https://github.com/chompie1337 पुनरुत्पादन के चरण Ubuntu Releases से ubuntu-20.04.6-live-server-amd64.iso डाउनलोड करें और वर्चुअल मशीन में इंस्टॉल करें। root@kitploit: wget https://releases.ubuntu.com/20.04/ubuntu-20.04.6-live-server-amd64.iso ISO इंस्टॉल करने के बाद, Ubuntu...

CVE-2026-31413-BPF-Container-Escape

CVE-2026-31413: Un byte nel verificatore BPF per la fuga dal container Ho trovato un bug di soundness nel verificatore BPF di Linux - un + 1 in una chiamata a pushstack che fa saltare al verificatore un'istruzione ALU su un percorso forkato. Per BPFOR, questo significa che il verificatore traccia...

ScreenOff

ScreenOff CVE-2026-52910 PoC di crash del kernel. riferimento: https://github.com/5unkn0wn/security-research/tree/CVE-2026-52910ltscosmitigation Cosa socket + SOATTACHREUSEPORTCBPF + setsockopt race condition. La tempesta di callback timerfd/epoll rallenta il percorso di ricezione. Sostituire il...

CVE-2021-29155

Questo è il codice Proof of Concept per CVE-2021-29155. Il sistema di tracciamento dell'intervallo per l'aritmetica dei puntatori nel dominio speculativo era insufficiente. Era possibile estrarre dati del kernel tramite un canale laterale. Questo è un proof of concept, puoi leggere fino a 0x5fff...

CVE-2021-33624

Proof of Concept für CVE-2021-33624 kompilieren mit gcc -pthread -o bpfspectretypeconfusion bpfspectretypeconfusion.c -Wall -ggdb -std=gnu99 ausführen mit sudo ./bpfspectretypeconfusion 1 2 ffffffffa4925620 0x10 wobei 1 und 2 CPU-Threads sind, die auf zwei verschiedenen Hardware-Kernen laufen,...

CVE-2017-16995-Linux-Kernel---BPF-Sign-Extension-Local-Privilege-Escalation-

Dieses Repository hat keine README-Datei...

CVE-2026-80669

In the Linux kernel, the following vulnerability has been resolved: bpf: Disable xfrmdecodesession hook attachment BPF LSM programs can currently attach to xfrmdecodesession. That hook may return an error, but securityskbclassifyflow calls it from a void path and triggers BUGON if an error is...

EUVD-2026-67551

In the Linux kernel, the following vulnerability has been resolved: libbpf: Reject non-exclusive metadata maps in the signed loader The loader verifies map-sha against the metadata hash in its instructions. map-sha is calculated when BPFOBJGETINFOBYFD is called on the frozen map. While the map is...

EUVD-2026-67545

In the Linux kernel, the following vulnerability has been resolved: bpf: Disable xfrmdecodesession hook attachment BPF LSM programs can currently attach to xfrmdecodesession. That hook may return an error, but securityskbclassifyflow calls it from a void path and triggers BUGON if an error is...

CVE-2026-80669

This Linux kernel vulnerability affects the interaction between BPF LSM programs and the xfrm_decode_session() hook. BPF LSM programs can attach to this hook, which may return an error. However, security_skb_classify_flow() invokes the hook from a void path and triggers a BUG_ON() if an error is ...

CVE-2026-80669

In the Linux kernel, the following vulnerability has been resolved: bpf: Disable xfrmdecodesession hook attachment BPF LSM programs can currently attach to xfrmdecodesession. That hook may return an error, but securityskbclassifyflow calls it from a void path and triggers BUGON if an error is...

CVE-2020-8835

CVE-2020-8835 root@kitploit: Nel kernel Linux 5.5.0 e successivi, il bpf verifier kernel/bpf/verifier.c non limita correttamente i registri per le operazioni a 32 bit, portando a letture e scritture fuori dai limiti nella memoria del kernel. Questa vulnerabilità colpisce anche la serie stabile...

CVE-2017-16995

CVE-2017-16995 Dokumentation meiner eigenen Bastelei mit der CVE-2017-16995-Schwachstelle und der zugehörigen Analyse Hoffentlich finde ich selbst eine, lol Überblick Diese Schwachstelle ist eine LPE, die durch eine fehlerhafte Verzweigungsprüfung des Verifiers während der virtuellen bpf-Ausführu...

cve-2017-16995

CVE-2017-16995 Analisi La cartella contiene un'analisi riga per riga del codice sorgente per CVE-2017-16995 escalation dei privilegi locale in Linux BPF. Exploit e patch testati sul kernel 4.4.0.116. Crediti Un ringraziamento speciale a difengtang che ha contribuito anche a questa analisi. Gli...

PS4-5.05-Kernel-Exploit

PS4 5.05 Kernel-Exploit Zusammenfassung In diesem Projekt finden Sie eine vollständige Implementierung des zweiten „bpf"-Kernel-Exploits für die PlayStation 4 auf 5.05. Er ermöglicht es Ihnen, beliebigen Code als Kernel auszuführen, um Jailbreaking und Kernel-Level-Modifikationen am System zu...

block-copyfail

Zusammenfassung CVE-2026-31431 „Copy Fail" ist eine Privilege-Escalation-Schwachstelle im Linux-Kernel in der kryptografischen Schnittstelle algifaead. Ein Angreifer nutzt AFALG-Sockets mit dem Algorithmus authencesn und splice, um beliebige Dateien im Kernel-Page-Cache zu korrumpieren –...