CVE-2026-89811

A flaw was found in the Linux kernel's drm/amdkfd component. This vulnerability arises from a race condition where the Micro Engine Scheduler MES fails to perform a necessary Translation Lookaside Buffer TLB invalidation after unmapping queues. This oversight allows in-flight Direct Memory Access...

CVE-2026-90315

A flaw was found in the Linux kernel's PCI/sysfs legacy I/O and memory handlers. These handlers failed to enforce kernel lockdown, a security mechanism designed to prevent privileged users from performing certain low-level operations. A local root user could exploit this by writing to arbitrary I...

CVE-2026-90036

A flaw was found in the Linux kernel's Network File System Daemon NFSD. A use-after-free vulnerability can occur during the blocked-lock reaping process. This happens when a client's lock owner, without a proper reference to keep the client alive, leads to the client being prematurely freed. This...

CVE-2026-90008

A flaw was found in the Linux kernel's megaraidsas component. The megasasmakeprpnvme function, which constructs a list of memory pages for data transfers, fails to verify the allocated buffer's boundaries. This can result in a buffer overrun, potentially leading to a system crash Denial of Servic...

cve-2019-2215_SH-M08

Это порт PoC-кода для получения root-прав на Android-устройствах с патчами безопасности, выпущенными до октября 2019 года, для модели AQUOS sense 2 SH-M08. Рабочая среда Работа проверена на следующих версиях ОС. Для запуска на других версиях или других моделях выполните портирование согласно...

CVE-2026-93161

A flaw was found in the Linux kernel's crypto: qat module. The qatalgxtsreversekey function expands sensitive Advanced Encryption Standard AES key material on the stack. This key material is not properly cleared and can remain in the stack frame, potentially allowing a local attacker to access it...

CVE-2026-98087

A flaw was found in the Linux kernel. A local user running real-time tasks can trigger a Denial of Service DoS due to improper handling of non-migratable tasks within the task scheduler. When a task is marked to prevent migration between processor cores, the scheduler fails to skip it and...

Aegis-releases

Aegis Claude Code's sandbox lets an agent read your SSH keys and AWS credentials by default. Aegis doesn't. Two layers, both verified on real hardware. Kernel sandbox — the agent's own shell cannot reach a denied path: $ ! cat /.ssh/idrsa cat: /Users/you/.ssh/idrsa: Operation not permitted $ ! ca...

dirtypipe

reF: https://access.redhat.com/security/vulnerabilities/RHSB-2022-002 Диагностика Для определения, подвержена ли ваша система данной уязвимости, был разработан скрипт обнаружения. Чтобы проверить подлинность скрипта, вы также можете загрузить отсоединенную подпись OpenPGP. Инструкции по...

Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation

Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation Практический анализ CVE‑2025‑62215 — состояния гонки в ядре Windows, эксплуатируемого в реальных атаках. Демонстрирует повышение привилегий до SYSTEM, сценарии обнаружения и стратегии проверки исправлений для защитников...

Dirty-Frag-CVE-2026-43284

DirtyFrag CVE-2026-43284 - Отчет об упражнении по обнаружению в лабораторных условиях Классификация: Внутренняя лаборатория - CyberLAB Дата: 24 мая 2026 г. Платформа: Elastic Stack v9.4.1 Статус: Обнаружение подтверждено Содержание A - Краткое резюме B - Полный отчет о результатах 1. Цель и модел...

cve-2026-29923

CVE-2026-29923 — локальное повышение привилегий в pstrip64.sys Минимальный proof-of-concept для CVE-2026-29923 — уязвимости в драйвере ядра pstrip64.sys EnTech Taiwan PowerStrip ≤ 3.90.736, которая позволяет непривилегированному процессу в режиме пользователя повысить привилегии до NT...

Detection-and-Mitigation-for-CVE-2022-2639

Detection-and-Mitigation-for-CVE-2022-2639 설명 Open vSwitch 커널 모듈은 선택된 네트워크 장치에서 flow 수준 패킷 처리를 유연하게 사용자 공간에서 제어할 수 있게 해줍니다. 일반 이더넷 스위치, 네트워크 장치 본딩, VLAN 처리, 네트워크 접근 제어, flow 기반 네트워크 제어 등을 구현하는 데 사용할 수 있습니다. 공격을 방지하려면 사용하지 않을 경우 이 커널 모듈을 비활성화하는 것이 좋습니다. 설치 wget...

CVE-2018-17182

CVE-2018-17182 Уязвимость ядра Linux VMA-UAF, приводящая к повышению привилегий CVE-2018-17182 Описание Исследователи безопасности из Google Project Zero опубликовали подробности и концептуальный эксплойт PoC для критической уязвимости в ядре Linux, присутствующей начиная с версии ядра 3.16 и до...

CVE-2024-27815

CVE-2024-27815 sbconcatmbufsbsd/kern/uipcsocket2.c의 XNU 커널 힙 버퍼 오버플로우로, AFUNIX 데이터그램 소켓 계층을 통해 비특권 로컬 사용자가 도달할 수 있습니다. 최대 SOCKMAXADDRLEN255 바이트의 소켓 주소가 길이가 MLEN224 바이트에 불과한 mbuf 데이터 영역에 복사되어, 인접한 mbuf의 헤더mhdr를 최대 31바이트까지 덮어씁니다. 해당 헤더의 모든 필드는 mhflags의 상위 바이트를 제외하고 공격자가 제어할 수 있게 되어, 커널 패닉이 발생합니다. 영...

GFAC-poc

GFAC.sys - Local Privilege Escalation PoC Almost fully reve...

USN-8889-1 linux-oem-7.0 vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

USN-8889-1: Linux kernel (OEM) vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

USN-8888-1: Linux kernel (Azure) vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

USN-8887-1: Linux kernel vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...