chronomaly

Chronomaly Chronomaly 是一个利用 CVE-2025-38352 的 Android/Linux 内核漏洞利用程序。该漏洞利用专门针对 Linux 内核 v5.10.157 编写，但由于不需要任何特定内核文本偏移量，它应适用于所有有漏洞的 v5.10.x 内核。 我在一个三部分的博客系列文章中详细介绍了该漏洞，从 PoC 一直讲到漏洞利用： 第一部分 - Android 内核漏洞分析与 PoC（野外） 第二部分 - 在没有内核补丁的情况下扩展竞态窗口 第三部分 - 揭示 Chronomaly 构建设置 该漏洞利用仅在 QEMU 中运行的 x8664 Linux 内核...

CVE-2026-46215-exploit-linux-7.0-uaf-stable

CVE-2026-46215 Exploit para Linux 7.0 - Más estable y confiable c0d3 por : Antonius w1sdom / ev1lut10n / sw0rdm4n - bluedragonsec.com https://github.com/bluedragonsecurity Este exploit funciona en un entorno limitado, revisa algunos requisitos más abajo !!! ¿QUÉ DIABLOS ES ESTO? Este es un exploi...

CVE-2022-3910

CVE-2022-3910 1. dirtycred exp: t1dpoc README.md: CVE-2022-3910とDirtyCred：Linux権限昇格の脆弱性解析 2. cross-cache exp: t1dexp README.md: CVE-2022-3910分析-2...

CVE-2026-31429-POC

CVE-2026-31429 — Linux 内核：通过 bpfprogtestrunskb 对 KFENCE 分配的 SKB 头部进行跨缓存释放 严重性： 中危（CWE-763：释放无效指针或引用） 发布时间： 2026-04-20 受影响子系统： net/core/skbuff.c — skbkfreehead 研究人员： Antonius / w1sdom — Blue Dragon Security 联系方式： [email protected] Lore 线程：...

SUSE-SU-2026:22835-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: cputype: Add C1-Premium definitions bsc1266290. - CVE-2025-39894: netfilter: brnetfilter: do not check confirmed bit in brnflocalin after confirm...

SUSE-SU-2026:2722-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs bsc1266290. - CVE-2025-68822: Input: alps - fix use-after-free bugs caused by dev3registerwor...

SUSE-SU-2026:22436-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs bsc1266290. - CVE-2025-68822: Input: alps - fix use-after-free bugs caused by...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net: skb: Fixed the cross-cache free of KFENCE-alocated skb heads. The value of SKBSMALLHEADCACHESIZE is intentionally set to a non-power-of-2 value e.g., 704 on x8664 to avoid collisions with generic kmalloc bucket sizes. This...

SUSE CVE-2026-31429

In the Linux kernel, the following vulnerability has been resolved: net: skb: fix cross-cache free of KFENCE-allocated skb head SKBSMALLHEADCACHESIZE is intentionally set to a non-power-of-2 value e.g. 704 on x8664 to avoid collisions with generic kmalloc bucket sizes. This ensures that...

EUVD-2026-23816

In the Linux kernel, the following vulnerability has been resolved: net: skb: fix cross-cache free of KFENCE-allocated skb head SKBSMALLHEADCACHESIZE is intentionally set to a non-power-of-2 value e.g. 704 on x8664 to avoid collisions with generic kmalloc bucket sizes. This ensures that...

CVE-2026-31429

In the Linux kernel, the following vulnerability has been resolved: net: skb: fix cross-cache free of KFENCE-allocated skb head SKBSMALLHEADCACHESIZE is intentionally set to a non-power-of-2 value e.g. 704 on x8664 to avoid collisions with generic kmalloc bucket sizes. This ensures that...

CVE-2026-31429 net: skb: fix cross-cache free of KFENCE-allocated skb head

In the Linux kernel, the following vulnerability has been resolved: net: skb: fix cross-cache free of KFENCE-allocated skb head SKBSMALLHEADCACHESIZE is intentionally set to a non-power-of-2 value e.g. 704 on x8664 to avoid collisions with generic kmalloc bucket sizes. This ensures that...

CVE-2026-31429

In the Linux kernel, the following vulnerability has been resolved: net: skb: fix cross-cache free of KFENCE-allocated skb head SKBSMALLHEADCACHESIZE is intentionally set to a non-power-of-2 value e.g. 704 on x8664 to avoid collisions with generic kmalloc bucket sizes. This ensures that...

CVE-2026-31429

Summary (supported): CVE-2026-31429 affects the Linux kernel, specifically a KFENCE interaction that caused a cross-cache free of KFENCE-allocated skb heads. The root cause was that kfence_ksize() could return the exact allocation size, leading to skb_end_offset matching SKB_SMALL_HEAD_HEADROOM a...

CVE-2026-31429

In the Linux kernel, the following vulnerability has been resolved: net: skb: fix cross-cache free of KFENCE-allocated skb head SKBSMALLHEADCACHESIZE is intentionally set to a non-power-of-2 value e.g. 704 on x8664 to avoid collisions with generic kmalloc bucket sizes. This ensures that...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the skbkfreehead function potentially releasing objects allocated with KFENCE to the wrong cache,...

PT-2026-33746

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.3 through 6.12.81 Description A slab cross-cache free issue exists in the Linux kernel when KFENCE is enabled. The skb kfree head function uses skb end offset to distinguish between skb heads allocated from skb small he...

CVE-2024-50264

creationtimestamp| type| source ---|---|--- 2024-11-19 01:39:34+00:00| seen| https://infosec.exchange/users/cve/statuses/113507065793952456 2025-01-02 23:00:00+00:00| seen| https://u1f383.github.io/linux/2025/01/03/cross-cache-attack-cheatsheet.html 2025-04-17 14:44:06+00:00|...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2022-3910 1. DirtyCred Exe: t1dpoc./t...

CVE-2018-4844

A vulnerability has been identified in SIMATIC WinCC OA UI for Android All versions V3.15.10, SIMATIC WinCC OA UI for iOS All versions V3.15.10. Insufficient limitation of CONTROL script capabilities could allow read and write access from one HMI project cache folder to other HMI project cache...