CVE-2017-16995

CVE-2017-16995 протестировано на Ubuntu 16.04.01 - Linux 4.4.0-31-generic 50-Ubuntu SMP Wed Jul 13 00:07:12 UTC 2016 x8664 Эта уязвимость позволяет обычному пользователю повысить свои привилегии и получить root-оболочку Если ядро отличается, отрегулируйте смещение CRED + проверьте размер стека яд...

ghostlock-cve-2026-43499-4.19-k40

GhostLock — PoC для CVE-2026-43499 ядро Qualcomm 4.19 Локальное повышение привилегий, эксплуатирующее CVE-2026-43499 — баг в rtmutex removewaiter, из-за которого struct rtmutexwaiter остаётся висеть на стеке ядра ожидающего потока kernel/locking/rtmutex.c, CWE-416 use-after-free. Адаптировано из...

Linux Distros Unpatched Vulnerability : CVE-2026-47506

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel-mode color transform path where excessive kernel stack use occurs when evaluating...

CVE-2026-47514

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause exposure of kernel stack contents including return addresses and pointers. A successful exploit of this vulnerability might lead to code execution, denial of service,...

CVE-2026-47506

The NVIDIA GPU Display Driver for Windows contains a vulnerability within the kernel-mode color transform path . This flaw is caused by excessive kernel stack use occurring during the evaluation of YCbCr420 display emulation . Successful exploitation of this vulnerability could result in a denial...

CVE-2026-47506

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel-mode color transform path where excessive kernel stack use occurs when evaluating YCbCr420 display emulation. A successful exploit of this vulnerability might lead to denial of service...

EUVD-2026-90169

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel-mode color transform path where excessive kernel stack use occurs when evaluating YCbCr420 display emulation. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47514

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause exposure of kernel stack contents including return addresses and pointers. A successful exploit of this vulnerability might lead to code execution, denial of service,...

EUVD-2026-90100

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause exposure of kernel stack contents including return addresses and pointers. A successful exploit of this vulnerability might lead to code execution, denial of service,...

K50G-POCOF4GT-CVE-2026-43499-PoC

Redmi K50 Gaming ingres — CVE-2026-43499 GhostLock 临时 Root PoC 免解锁 BL 一键临时 Root 。利用 GhostLock（CVE-2026-43499, futex PI Use-After-Free） 本地提权链拿到 root 锚点，随后通过 KernelSU 3.3.0 late-load 方式把 kernelsu 模块挂载进运行中的内核，配合 KSU 模块保持 SELinux Permissive 并修复网络。 目标设备: Redmi K50G / POCO F4 GT —— 代号 ingres, SoC SM845...

CVE-2026-97554

A flaw was found in the Linux kernel's Server Message Block SMB client. When handling malformed directory entries with invalid security identifiers, the client fails to verify whether data parsing succeeded before processing file attributes. A malicious or compromised server could exploit this...

setcred

FreeBSD setcred2 — артефакты исследования Этот подкаталог содержит разбор уязвимости и рабочие эксплойты для переполнения буфера в стеке в setcred2 в ядре FreeBSD 14.x. Сама уязвимость полностью документирована в setcred.txt. Краткая версия: kernsetcredcopyinsuppgroups использует sizeofgroups, гд...

CVE-2017-7184

CVE-2017-7184 – Повышение привилегий в Linux Kernel XFRM без sudo Обзор Этот репозиторий содержит эксплойт для локального повышения привилегий proof-of-concept для CVE-2017-7184 , уязвимости ядра Linux в подсистеме netlink XFRM IPsec. Эксплойт демонстрирует, как непривилегированный пользователь...

DEBIAN-CVE-2026-97554

In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid using uninitialized SIDs in cifsposixtofattr cifsposixtofattr ignores the return value of posixinfoparse. When a malformed POSIX directory entry is encountered e.g. invalid SID lengths from an untrusted server,...

CVE-2026-97554

A vulnerability exists in the Linux kernel SMB client within the cifs_posix_to_fattr() function. The issue stems from the function ignoring the return value of posix_info_parse() . When processing a malformed POSIX directory entry from an untrusted server (such as one with invalid SID lengths), t...

Linux Distros Unpatched Vulnerability : CVE-2026-97554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: avoid using uninitialized SIDs in cifsposixtofattr cifsposixtofattr ignores the return value of posixinfoparse. When a malformed POSIX directory...

Linux Distros Unpatched Vulnerability : CVE-2026-97442

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath11k: fix invalid data access in ath11kdprxhundecapnwifi In certain cases, hardware might provide packets with a length greater than the maximum native...

SUSE CVE-2026-89858

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound image count in qla2x00updatefruversions qla2x00updatefruversions copies the user-supplied BSG request into a fixed 256-byte stack buffer bsgDMAPOOLSIZE and then iterates list-count times over the...

DEBIAN-CVE-2026-92518

In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix kernel stack corruption in tailcall with CFI When CONFIGCFICLANG is enabled, prog-bpffunc already skips the kcfi instruction during setup. Including it again in the tailcall jump offset causes it to jump over an...

SUSE CVE-2026-89852

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero mailbox struct in qla2x00getfirmwarestate The mbxcmdt is allocated on the stack but left uninitialized. qla2x00mailboxcommand has several early-return paths PCI permanent failure, device failed, EEH busy, ISP...