CVE-2026-98416

A flaw was found in the Linux kernel's Texas Instruments K3 UDMA Unified Direct Memory Access driver. This vulnerability can lead to a Denial of Service DoS caused by a null pointer dereference when freeing resources during a failed channel request. Under resource-exhaustion conditions, the...

CVE-2026-98412

A flaw was found in the Linux kernel's power sequencing subsystem. If a memory allocation failure occurs while setting up dependencies in pwrsequnitsetupdeps, error handling cleans up the partially allocated unit without having initialized its internal list. This uninitialized state leads to a NU...

CVE-2026-98411

A flaw was found in the Linux kernel's power sequencing subsystem. When device registration encounters a naming failure, the error-handling path attempts to clean up data structures before they are initialized. This issue leads to an invalid pointer dereference, which can cause the kernel to cras...

CVE-2026-23111-PoC

CVE-2026-23111exploit CVE-2026-23111 — Linux Kernel nftables UAF → LPE A working local-privilege-escalation exploit for CVE-2026-23111 , a use-after-free in the Linux kernel nftables subsystem. Tested on linux-6.12.69 x86-64. Target requirements The exploit assumes a target kernel built with:...

Presentations

Presentations 2025 CodeBlue 2025 - 18th to 19th November 2025 AI Accelerated Exploiting: Compromising MTE Enabled Pixel from DSP Coprocessor by PAN Zhenpeng & Billy JHENG Bing Jhong Dancing with Exynos Coprocessor: Pwning Samsung for fun and “profit” by Muhammad Ramdhan, PAN Zhenpeng & Billy JHEN...

CVE-2026-98406

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A local attacker can trigger a denial of service DoS condition by issuing a wireless bitrate configuration request while a network interface is undergoing initialization or teardown. Because the subsystem fails to verify that the...

CVE-2026-98410

A flaw was found in the Linux kernel's DA9063 watchdog driver. When a system suspends while the hardware watchdog timer is running without active user-space management, the driver fails to disable the timer. Consequently, the timer continues to run and can expire while the system is suspended,...

CVE-2026-98409

A flaw was found in the Linux kernel's Realtek RTD119X watchdog driver. During device initialization, the driver fails to verify that the clock rate is valid before performing timeout calculations. A local user capable of triggering device probing under misconfigured clock conditions can cause a...

CVE-2026-98408

A flaw was found in the Linux kernel's Renesas RZ/V2H watchdog timer driver. The driver fails to validate that the clock rate is non-zero during device initialization, leading to a division by zero condition. Under specific hardware or configuration states where the clock rate is zero, this issue...

CVE-2026-98407

A flaw was found in the Linux kernel's Redpine Signals Inc. rsi wireless driver. An incorrect memory offset calculation during encryption key removal causes data to be written past the allocated buffer, corrupting kernel heap memory. This issue is triggered during routine wireless events such as...

CVE-2026-98405

A flaw was found in the Linux kernel's SMB Server Message Block client. When parsing POSIX security identifiers in server responses, the client fails to properly validate the server-supplied buffer length against the actual received message boundaries. A malicious or compromised SMB server could...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Local Privesc Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it did not properly validate the application of file system capabilities with respect to user namespaces. A local attacker could use this to gain elevated...

recon_2024_windbg_workshop

REcon 2024 - Tips & Tricks for better debugging with WinDbg This repository contains the materials created for the workshop "Tips & Tricks for better debugging with WinDbg", at REcon 2024. Setup The workshop materials aims to provide useful features for WinDbg, when debugging in kernel-mode, but...

germy

Overview germy is an NGSM Linux kernel privilege escalation exploit for versions 5.15-rc1 to 6.6-rc1. See TECHNICALDETAILS.md for information on the vulnerabilities and exploit techniques used. Tested on: Ubuntu LTS 20.04.6 5.15.x and 22.04.4 6.5.x Ubuntu non-LTS 23.10 6.5.x Debian 12.5 6.1.x Usa...

cve-2025-62215-exploit-poc

CVE-2025-62215 Proof-of-Concept ⚠️ WARNING - LEGAL AND ETHICAL NOTICE THIS CODE IS FOR EDUCATIONAL AND SECURITY RESEARCH PURPOSES ONLY. DO NOT use this code on systems you do not own or have explicit written permission to test DO NOT use this code for malicious purposes Unauthorized access to...

ExploitGSM

ExploitGSM Exploit for 6.4 - 6.5 kernels and another exploit for 5.15 - 6.5 Telegram for contact - https://t.me/YuriiCrimson Telegram chat - https://t.me/itcrowdua In winter I found two vulnerabilities in the ngsm driver. After that Jammes wrote to me offering to buy them from me. As you...

CVE-2026-98403

A flaw was found in the Linux kernel's s390 boot code. This flaw can lead to a Denial of Service DoS through memory corruption during system startup. When the early boot command-line buffer is nearly full, appending Initial Program Load IPL parameters triggers an integer underflow, causing an...

CVE-2026-98401

A flaw was found in the Linux kernel's networking subsystem. When processing encapsulated network packets, the kernel fails to reset the transport header offset after stripping outer packet headers during tunnel decapsulation. A remote attacker could exploit this vulnerability by sending speciall...

Ubuntu-0day

Ubuntu16.04-0day Vulnerability scope: all 4.4 ubuntu aws instances are vulnerable Jann Horn discovered that in some cases, the Berkeley Packet Filter BPF in the Linux kernel incorrectly performed sign extension in checkaluop. A local attacker can use this to escalate privileges on the system and...

ghostrace

GhostRace: Exploiting and Mitigating Speculative Race Conditions This repository contains: A minimalistic PoC exemplifying the concept of Speculative Race Condition in a step-by-step single-threaded fashion. Coccinelle scripts used to scan the Linux kernel v5.15.83 for Speculative Concurrent...