CVE-2019-2215

CVE-2019-2215 Bad Binder Android 10 x8664 AVD에서 CVE-2019-2215를 위한 PoC입니다. elbiazo/CVE-2019-2215 기반이며, 커널은 cloudfuzz workshop을 따릅니다. 격리된 환경에뮬레이터에서만 연구용입니다. 빌드: BUILD.md source ./setup-env.sh ./scripts/start-emulator.sh ./scripts/run-exploit.sh 실행 전에 kernels/ 디렉토리에 custom bzImage가 필요합니다 BUILD.md 참조...

CVE-2026-98166

A flaw was found in the Linux kernel's DRM TTM Direct Rendering Manager Translation Table Manager subsystem. Due to an improper status check during memory swapout operations, swapped-out buffer resources are not properly untracked, leaving stale pointers referencing freed memory. A local user cou...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.41 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.41 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

Exploiting-UAF-by-Ret2bpf-in-Android-Kernel-CVE-2021-0399-

이 저장소에는 README가 없습니다...

Security update for the Linux Kernel (Live Patch 80 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.302 fixes various security issues: The following security issues were fixed: CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free i...

SUSE-SU-2026:4551-1 Security update for the Linux Kernel (Live Patch 80 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.302 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-fr...

CVE-2026-23111

CVE-2026-23111 감사 도구 리눅스 커널 nftables UAF 이 저장소는 리눅스 환경에서 CVE-2026-23111 취약점을 심층적이고 정확하게 평가하기 위해 설계된 Bash 기반 자동화 감사 스크립트를 포함합니다. 🔍 CVE-2026-23111 취약점이란? CVE-2026-23111 은 리눅스 커널의 nftables 서브시스템에서 발견된 Use-After-Free UAF 유형의 취약점입니다 일반적으로 6.13 브랜치 이전의 개발 및 안정 버전에 영향을 미칩니다. 결함은 캡처된 요소 활성화...

linux-4.19.72_CVE-2020-25705

리눅스 커널 커널 개발자와 사용자를 위한 여러 안내서가 있습니다. 이 안내서는 HTML, PDF와 같은 다양한 형식으로 렌더링할 수 있습니다. 먼저 Documentation/admin-guide/README.rst를 읽어 주십시오. 문서를 빌드하려면 make htmldocs 또는 make pdfdocs를 사용하십시오. 서식이 적용된 문서는 다음 온라인에서도 읽을 수 있습니다: https://www.kernel.org/doc/html/latest/ Documentation/ 하위 디렉터리에는 다양한 텍스트 파일이 있으며, 그중...

CVE-2023-26083

CVE-2023-26083 – 타임라인 스트림을 통한 Mali GPU 커널 주소 누출 이 저장소는 CVE-2023-26083 에 대한 개념 증명PoC 익스플로잇을 포함하고 있습니다. 이 취약점은 Mali GPU 드라이버Arm Mali GPU 커널 드라이버에 존재하며, 권한이 없는 사용자가 타임라인 스트림/dev/mali0을 통해 커널 포인터와 민감한 내부 정보를 누출할 수 있게 합니다. 취약점 개요 Mali GPU 드라이버는 프로파일링 및 디버깅을 위한 '타임라인 스트림'tlstream 기능을 제공합니다. 이 스트림은 원시 커...

CVE-2026-80810

A flaw was found in the Linux kernel. An integer overflow vulnerability in the iouring/rsrc component, specifically within the iovecfillbvec function, can lead to incorrect memory calculations when handling very large memory pages. This error causes the kernel to access memory outside of its...

CVE-2026-80887

A flaw was found in the drm/vmwgfx component of the Linux kernel. An integer overflow vulnerability exists in the vmwshaderdefine function due to improper validation of user-supplied shader window size and offset. When the offset value is close to its maximum, an unsigned addition can wrap around...

CVE-2026-80852

A flaw was found in the Linux kernel's TLS device driver. A local attacker could exploit an out-of-bounds write vulnerability in the tlsappendfrag function when handling TLSTXZEROCOPYRO with spliceSPLICEFMORE operations. This flaw allows an attacker to cause memory corruption, leading to a denial...

CVE-2021-21551-POC

DbUtilAx CVE-2021-21551 Dell 'dbutil23.sys' 커널 익스플로잇에 대한 확장된 개념 증명PoC입니다. 전체 블로그 게시물은 여기에서 읽을 수 있습니다...

CVE-2019-2215

Bad-Binder CVE-2019-2215 다음은 x86 에뮬레이터에서 테스트된 bad binder CVE-2019-2215 취약점에 대한 익스플로잇입니다. 목표는 UAF 취약점을 악용하여 AAR 프리미티브를 트리거해 커널 주소를 누출하고, AAW 프리미티브를 사용하여 addrlimit을 덮어씀으로써 커널 읽기 및 쓰기 프리미티브를 확보한 뒤, 로컬 권한 상승 LPE을 위해 credstruct를 수정하는 것이었습니다. 크레딧...

CVE-2026-80842

A flaw was found in the Linux kernel's bridge multicast mcast component. A race condition in the handling of a master VLAN's multicast context during teardown can allow a network attacker to trigger a use-after-free vulnerability. This could lead to system instability or a denial of service DoS...

CVE-2026-80850

A flaw was found in the Linux kernel's TCP Authentication Option TCP-AO implementation. An unprivileged local attacker could exploit a race condition when a network device is detached from its Virtual Routing and Forwarding VRF interface. This could lead to a use-after-free vulnerability, causing...

CVE-2026-81003

A flaw was found in the Linux kernel's AFIUCV Advanced Program-to-Program Communication over IUCV network protocol implementation. The afiucvhsrcv function, responsible for receiving frames, does not properly filter incoming frames based on the ingress network device. This oversight allows a loca...

CVE-2026-80878

A flaw was found in the Linux kernel's AFS Andrew File System implementation. This issue occurs when afslookupvolumercu fails to acquire a volume, leading to a resource leak. A local attacker could potentially exploit this flaw to cause a denial of service due to resource exhaustion...

CVE-2026-80837

A flaw was found in the Linux kernel. A race condition exists in the netfilter's nftables subsystem when handling packet path object notifications. This can lead to a use-after-free vulnerability, allowing a local or remote attacker to send specially crafted packets, potentially causing a denial ...

CVE-2026-80841

A flaw was found in the Linux kernel's net/packet component, specifically within the AFPACKET transmission ring. This vulnerability occurs because virtual memory allocated for network packet handling is prematurely released while active network buffers socket kernel buffers, or skbs still hold...