CVE-2026-98549

A flaw was found in the Linux kernel's TCP subsystem. When a TCP connection transitions to hardware-assisted encryption, data packets queued after the transition can be improperly merged with unencrypted packets in the retransmission queue. This issue may allow an attacker on the network to obtai...

dr_checker

DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers This repo contains all the sources, including setup scripts. Now with an Amazing UI to view the warnings along with corresponding source files. Tested on Ubuntu = 14.04.5 LTS Announcements 16 Feb 2018 : DR.CHECKER has bee...

ScannerBadEpoll

ScannerBadEpoll Vulnerability Checker: Bad Epoll CVE-2026-46242 Vulnerability Checker: Bad Epoll CVE-2026-46242 Developed by Soluciones & Proyectos Franklin Technological solutions with professional backing This is an automated Bash script designed to audit the current Linux kernel version and...

CVE-2017-2671

Linux kernel CVE-2017-2671 Local Denial of Service Vulnerability what !! CVE-2017-2671 1 Linux kernel CVE-2017-2671 Local Denial of Service consequently cannot ensure that disconnect function calls are safe, which allows local users to cause a denial of service panic by leveraging access to the...

cve-2019-2215_SH-M08

This is a port of the proof-of-concept code for obtaining root privileges on Android devices with security patches prior to October 2019, ported to AQUOS sense 2 SH-M08. Operating Environment Operation has been confirmed on the following OS versions. To run on other versions or other devices,...

GhostLock-GOT-W29

CVE-2026-43499 GhostLock — HUAWEI MatePad Pro 11 GOT-W29 Privilege escalation research on CVE-2026-43499 rtmutex/futex-PI stack UAF, "GhostLock" for the GOT-W29 HarmonyOS 4.0, kernel 4.19.157-perf+. Final Conclusions 1. The vulnerability is real and triggerable : a value-holding PI cycle makes...

CVE-2026-98548

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A remote attacker or an unprivileged local user could trigger a Denial of Service DoS or memory corruption by sending specially crafted packets containing bundled error and data chunks. This issue...

Dirty-Pipe-CVE-2022-0847-POCs

Dirty-Pipe-CVE-2022-0847-POCs Author: Max Kellermann [email protected] Contributor: Bl4sty https://twitter.com/bl4sty A new Linux vulnerability known as 'Dirty Pipe' allows local users to gain root privileges through publicly available exploits. Today, security researcher Max Kellermann...

audit-kernel

Linux Kernel Audit Subsystem https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit.git https://github.com/linux-audit/audit-kernel The Linux Audit subsystem provides a secure logging framework that is used to capture and record security relevant events. It consists of a kernel component...

ParrotSec-Linux-Hardening-Project

ParrotSec Linux - Public Kiosk Project Designing & Implementing A restricted & Trustworthy Environment Hardened kernel - GrSecurity Patched Kernel - PaX Hardening - x PaXctl - x PaXTest - x PaXctld - x Hardened Kernel Runtime Parameters - x Kernel Self Protection Project KSPP - x pti=on - Kernel...

Microsoft Windows Cloud Files Mini Filter Driver CldiStreamCompleteRequest use-after-free vulnerability

Summary A use-after-free vulnerability exists in the CldiStreamCompleteRequest functionality of Windows Cloud Files Mini Filter Driver versions: 10.0.26100.8457 WinBuild.160101.0800. A specially crafted sequence of Cloud Filter API calls can lead to privilege escalation. An attacker can execute a...

Microsoft Windows Cloud Files Mini Filter Driver CldiStreamPrepareRequestForMoreProcessing Type Confusion vulnerability

Summary A type confusion vulnerability exists in the CldiStreamPrepareRequestForMoreProcessing functionality of Windows Cloud Files Mini Filter Driver versions: 10.0.26100.8457 WinBuild.160101.0800 and 10.0.26100.8655 WinBuild.160101.0800. A specially crafted sequence of Cloud Filter API calls ca...

CVE-2026-98547

A flaw was found in the Linux kernel's afpacket network socket implementation. An integer overflow occurs during timeout calculations when configuring packet receive rings with large block sizes. A local user with raw network privileges can exploit this vulnerability by setting an oversized socke...

CHARON

/ || | | | / \ | \ / | \ | | | | | || | / \ | | | | | | | | | | | |/ | "It is a fearful thing to fall into the hands of the living God." — Hebrews 10:31 What this is A tight, dependency-free PoC for CVE-2026-46333 : the ptracemayaccess mm==NULL bypass disclosed by Qualys on 2026-05-15. Charon...

cormem-read-poc

DISCLAIMER : This project is for educational and security research purposes only. Use only on systems you own or have explicit permission to test. Unauthorized use may be illegal in your jurisdiction. cordrvexploit — CVE-2026-38194 Vulnerability This tool demonstrates CVE-2026-38194, a...

CVE-2026-98546

A flaw was found in the Linux kernel's ARM64 architecture support. When user-space access to performance monitoring counters is enabled, write traps for a write-only performance register are improperly configured during hypervisor initialization. A local user can exploit this vulnerability by...

2004

2004 Linux Kernel Exploits - CVE-2004-0077 + CVE-2004-1235 + capstoroot...

CVE-2026-98542

A flaw was found in the Linux kernel's cpuset subsystem, which can lead to a denial of service DoS or compromised resource isolation. A local user with permissions to configure control groups cgroups can trigger this flaw by creating a remote partition that requests processor cores already...

DriverBuddy

Quickstart DriverBuddy Installation Instructions 1. Copy DriverBuddy folder and DriverBuddy.py file into the IDA plugins folder C:\Program Files x86\IDA 6.8\plugins or wherever you installed IDA DriverBuddy Usage Instructions 1. Start IDA and open a Windows kernel driver 2. Go to Edit-Plugins and...

kern

kern: rootless container runtime and sandbox with no daemon. Runs agent tool calls and LLM-generated code in kernel-enforced containers. A real, kernel-enforced container in a few milliseconds, out of one static binary with no daemon. MCP support for Claude Code, Cursor, Claude Desktop and LM...