CVE-2026-98808

A flaw was found in the Linux kernel's Broadcom SYSTEMPORT driver. This vulnerability can lead to a Denial of Service DoS or memory corruption when a local user queries network device statistics on systems with SYSTEMPORT Lite hardware. Due to improper buffer indexing when handling unsupported...

CVE-2026-89985

A flaw was found in the Linux kernel's memory cgroup memcg component. This vulnerability arises when memory pages folios are moved between different memory nodes, causing an inconsistency in how their associated object cgroups objcg are managed. This can lead to memory management operations...

CVE-2026-89990

A flaw was found in the Ceph filesystem module of the Linux kernel. A local attacker could trigger a use-after-free vulnerability in the cephmdscheckaccess function. This occurs when a concurrent session reopens and frees an array while it is still being accessed, leading to a system crash and...

CVE-2026-89987

A flaw was found in the Linux kernel's huge memory management. This vulnerability can lead to silent data loss for applications utilizing shared memory segments MAPSHARED tmpfs when Transparent Huge Pages THP and swap are active. The system fails to correctly mark modified memory as 'dirty,'...

kprotect

🛡️ kprotect Overview kprotect is a kernel-level security engine designed to protect your sensitive data from supply-chain attacks like malicious Python or Node.js libraries. It stands as an independent security layer for the most sensitive files. eBPF-LSM Enforcement : Intercepts file access at th...

CVE-2026-90003

A flaw was found in the Linux kernel's futex component. A race condition during the FUTEXCMPREQUEUEPI operation can lead to a use-after-free vulnerability in the rcuwait mechanism. This issue could allow a local attacker to cause memory corruption, potentially leading to a denial of service or...

CVE-2026-89998

A flaw was found in the Linux kernel's device mapper dm subsystem. A local user could trigger a race condition by calling two concurrent table load input/output controls ioctls. This race condition, occurring during the processing of device mapper tables, can lead to access to invalid memory...

CVE-2026-98806

A flaw was found in the Linux kernel's octeontx2-pf network driver. When Data Center Bridging DCB is enabled, the driver assumes traffic queue mapping structures are always initialized, which is not the case for System Data Path SDP virtual functions. This issue leads to a NULL pointer dereferenc...

Driver-HideKernelThread-IoCancelIrp

Driver-HideKernelThread-IoCancelIrp not my code. only for saving https://bbs.pediy.com/thread-272795.htm Principle Set the thread entry address to IoCancelIrp and the context to the irp you created. Then the thread will call IoCancelIrp. when called, will perform the operation of canlcelling the...

Driver-PiDqSerializationWrite-Example

PiDqSerializationWrite-Example Thank you busybox10 for sharing knowledge of util functions and "PiDqSerializationWrite" functions with the community. https://www.unknowncheats.me/forum/3742948-post13.html CPP struct memcpystructure void destination; unsigned int maxsize; unsigned int offset;...

Driver-hide-file

hide-file choose and hide windows files/path from kernel space using this driver...

kernel-sanitizers

Linux Kernel Sanitizers Note: Most Sanitizers are maintained in the Linux kernel repository and are not hosted here. This repository contains out-of-tree information and prototypes for KASAN, UBSAN, KCSAN, KFENCE, KMSAN, and KTSAN. Note, that KMSAN's code is hosted separately. Questions about KAS...

Driver-KeAttachProcess-KeDetachProcess-rebuild

KeAttachProcess-KeDetachProcess-rebuild not my code. only for saving. https://www.unknowncheats.me/forum/anti-cheat-bypass/500102-keattachprocess-kedetachprocess-rebuild.html...

blackbox-pentesting-infsecos

Black-Box Penetration Test — SecOS:1 VulnHub Overview Full black-box penetration test against SecOS:1 , a deliberately vulnerable CTF machine from VulnHub. Objective: simulate a real-world attacker with zero prior knowledge and achieve root-level compromise, evidenced by retrieving /root/flag.txt...

CVE-2026-90033

A flaw was found in the Linux kernel's ALSA USB audio subsystem. The sndusbmidius122loutput function, responsible for handling USB MIDI output, incorrectly calculates the buffer size for devices operating at slower than high speed. This error can lead to an out-of-bounds write, where the system...

kernel-exploits

Linux kernel exploits Date| Link| Description| Vector| Impact ---|---|---|---|--- 02.2016| CVE-2016-2384| Double-free in USB MIDI driver| USB + Local| LPE 03.2016| prefetch-side-channel| KASLR bypass via prefetch| Local| Info-leak 12.2016| CVE-2016-9793| Signedness issue with socket buffers| Loca...

SUSE CVE-2026-98675

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ade9000: handle Phase C dip events in IRQ1 handler ADE9000ST1CROSSINGDEPTH is the exclusive upper bound for scanning the STATUS1 event bits, so a value of 25 left out the highest event bit, ADE9000ST1DIPCBIT bit 25. Pha...

masm32-kernel-programming

masm32-kernel-programming Dreg's repo for his own needs masm32 kernel programming, drivers, tutorials, examples, and tools credits Four-F Instructions download/clone this repo run masm32v11rinstall.exe click on install image earth install masm32 in C:\ I recommend add to PATH environment variable...

Hunt-Weird-Syscalls

Hunt-Weird-Syscalls This is a ETW based POC to monitor for abnormal syscalls. For now, the syscalls NtOpenThread and NtSetContextThread are monitored to identify IOCs indicating both direct and indirect syscalls. Description This project uses ETW, more precisely kernel based ETW providers, to...

kdmp-parser

kdmp-parser This C++ library parses Windows kernel full dumps .dump /f in WinDbg, BMP dumps .dump /ka in WinDbg as well as more recent dump types that were introduced in 2022. The library supports loading 64-bit dumps and provides read access to things like: The context record, The exception...