2022-LPE-UAF

2022-LPE-UAF 테스트되지 않은 PoC 코드 보안 연구자들은 로컬 공격자가 권한을 상승시키고 잠재적으로 악성 코드를 실행할 수 있는 Linux 커널의 3가지 취약점을 발견했습니다. 개념 증명 코드가 공개적으로 제공되어 실제 환경에서 악용될 가능성이 높아졌습니다. Zhenpeng의 Dirtycred에 관한 논문 https://zplin.me/papers/DirtyCred-Zhenpeng.pdf DirtyCred 및 PoC 공개 릴리스에 대한 패치 https://github.com/Markakd/DirtyCred...

chronomaly-webos

Chronomaly — CVE-2025-38352 on LG webOS CVE-2025-38352 POSIX CPU 타이머 경쟁 조건 / use-after-free에 대한 커널 익스플로잇으로, ARM64에서 커널 5.4.268을 실행하는 LG webOS 스마트 TV에서 지속적인 루트 권한을 얻습니다. 여러 펌웨어 버전의 4개 TV 모델에서 확인되었습니다. LG 보안 연구자 프로그램에 책임 있는 공개를 완료했습니다2026년 2월. farazsth98의 Chronomaly를 기반으로 구축되었습니다. 1단계 UAF 경쟁 로직과 크로...

opace6-cve-2026-64560

OnePlus Ace 6 一時 Root ツール CVE-2026-64560（Linux カーネル POSIX CPU timer UAF）脆弱性を利用して、OnePlus Ace 6 の現在の起動サイクルにおける一時的な root 権限を取得します。再起動後は無効になり、システムパーティションは変更しません。 !WARNING デバイスの再起動やデータ損失を引き起こす可能性があります。ご自身のデバイスでのみ使用し、操作前に重要なデータをバックアップしてください。 対応デバイス 項目| 情報 ---|--- デバイス| OnePlus Ace 6 OP6113L1...

opace6-cve-2026-64560

OnePlus Ace 6 一時 Root ツール CVE-2026-64560（Linux カーネル POSIX CPU timer UAF）脆弱性を利用して、OnePlus Ace 6 の 現在の起動サイクルにおける一時的な root 権限を取得します。再起動後に失効し、システムパーティションは変更しません。 !WARNING デバイスの再起動やデータ損失を引き起こす可能性があります。自分のデバイスでのみ使用し、操作前に重要なデータをバックアップしてください。 対応デバイス 項目| 情報 ---|--- デバイス| OnePlus Ace 6 OP6113L1...

CVE-2025-38352-PoC

CVE-2025-38352: Linux カーネル POSIX CPU タイマー TOCTOU 競合状態と UAF CVE-2025-38352 の再現可能な概念実証 PoC および自動化された GDB オーケストレーションスクリプトです。これは Linux カーネルの POSIX CPU タイマーサブシステム kernel/time/posix-cpu-timers.c における Time-of-Check to Time-of-Use TOCTOU 競合状態であり、Use-After-Free UAF を引き起こします。 免責事項:...

2022-LPE-UAF

2022-LPE-UAF 테스트되지 않은 POC 코드 보안 연구원들은 로컬 공격자가 권한을 상승시키고 잠재적으로 악성 코드를 실행할 수 있게 하는 Linux 커널의 3가지 취약점을 발견했습니다. 개념 증명PoC 코드가 공개적으로 제공되어 실제 환경에서 악용될 가능성이 높아졌습니다. Zhenpeng의 Dirtycred 논문 https://zplin.me/papers/DirtyCred-Zhenpeng.pdf DirtyCred에 대한 패치 및 PoC 공개 릴리스 https://github.com/Markakd/DirtyCred...

poc-CVE-2025-38352

🚀 poc-CVE-2025-38352 - セキュリティツールの簡単ダウンロード 📥 今すぐダウンロード 📖 概要 このアプリケーションはCVE-2025-38352の概念実証です。LinuxカーネルのPOSIX CPUタイマー実装における脆弱性を示します。2025年9月のAndroidセキュリティ情報によると、この脆弱性は限定的な環境で標的型攻撃に使用されています。 🖥️ システム要件 このアプリケーションをスムーズに実行するには、システムが以下の要件を満たしていることを確認してください。 オペレーティングシステム: Linux（最新のディストリビューション） カーネルバージョン:...

Exploit for CVE-2026-64560

OnePlus Ace 6 Temporary Root Tool Obtain temporary root acces...

Exploit for CVE-2026-64560

OnePlus Ace 6 opace6 CVE-2026-64560 Vulnerability CVE-202...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Clean up CPU timers before freeing them during exec. The commit 55e8c8eb2c7b “posix-cpu-timers: Store a reference to a pid instead of a task” introduced a mechanism to retrieve tasks by PID when deleting a CPU...

SUSE CVE-2026-72068

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Use u64 multiplication in updaterlimitcpu updaterlimitcpu converts the RLIMITCPU value to nanoseconds with u64 nsecs = rlimnew NSECPERSEC; On 32-bit kernels both rlimnew unsigned long and NSECPERSEC 1000000000L...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100140)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100140 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix rlimit for posix cpu timers Posix cpu timers requires an additional step beyond...

CVE-2026-72068 posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu()

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Use u64 multiplication in updaterlimitcpu updaterlimitcpu converts the RLIMITCPU value to nanoseconds with u64 nsecs = rlimnew NSECPERSEC; On 32-bit kernels both rlimnew unsigned long and NSECPERSEC 1000000000L...

PT-2026-72257

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the update rlimit cpu function where the RLIMIT CPU value is converted to nanoseconds using 32-bit multiplication on 32-bit kernels. Because both rlim new and NSEC PER...

CVE-2026-64560

A flaw was found in the Linux kernel's CPU timer functionality. A race condition, which is a timing issue between different operations, can occur when a process attempts to delete a timer while another operation is still trying to access it. This can lead to a Use-After-Free UAF vulnerability,...

CVE-2026-64560

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-leader exec race Wongi and Jungwoo decoded and reported a non-leader exec related race which can result in an UAF: systimerdelete exec posixcputimerdel // Observes old leader p =...

SUSE CVE-2026-64370

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Fix pid refcount leak in docpunanosleep error path In docpunanosleep, posixcputimercreate takes a pid reference via getpid and stores it in timer.it.cpu.pid. If the subsequent posixcputimerset call fails, the...

CVE-2026-64370

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Fix pid refcount leak in docpunanosleep error path In docpunanosleep, posixcputimercreate takes a pid reference via getpid and stores it in timer.it.cpu.pid. If the subsequent posixcputimerset call fails, the...

CVE-2026-64370

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Fix pid refcount leak in docpunanosleep error path In docpunanosleep, posixcputimercreate takes a pid reference via getpid and stores it in timer.it.cpu.pid. If the subsequent posixcputimerset call fails, the...

CVE-2026-64370 posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Fix pid refcount leak in docpunanosleep error path In docpunanosleep, posixcputimercreate takes a pid reference via getpid and stores it in timer.it.cpu.pid. If the subsequent posixcputimerset call fails, the...