487106 matches found
CVE-2026-98845
A flaw was found in the Linux kernel's Trusted Platform Module TPM subsystem. This vulnerability allows an attacker to bypass TPM reset protections because the driver fails to disable the device when a null key integrity check fails. Consequently, the TPM continues serving requests and...
CVE-2026-89917
A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for ARM64 architectures. A race condition exists between the Virtual Nested Cache Register VNCR Translation Lookaside Buffer TLB invalidation and the vcpuput function's unmapping of the VNCR page. This time-of-check to...
CVE-2026-98844
A flaw was found in the Linux kernel's network filesystem netfs subsystem. When a file is extended through write operations after previous writes were performed via memory mapping, the system fails to clear stale cache data located beyond the original end of the file. A local user could exploit...
Black-Angel-Rootkit
Black Angel Rootkit Black Angel is a Windows 11/10 x64 kernel mode rootkit. Rootkit can be loaded with enabled DSE while maintaining its full functionality. Designed for Red Teams. Rootkit Features Rootkit can be loaded with kdmapper to bypass DSE, Black Angel Loader may not be working properly...
CVE-2026-98843
A flaw was found in the Linux kernel's Network Filesystem netfs subsystem. When reading data gaps around modified memory regions during streaming write operations, truncated or incomplete read responses from a remote server fail to clear unread memory buffers. As a result, stale memory contents c...
CVE-2026-98842
A flaw was found in the Linux kernel's module loading subsystem. When an error occurs during module initialization, the kernel fails to propagate the error code and incorrectly reports a successful load after the module has already been cleaned up. A local privileged user could trigger this...
matrix-rs
Windows Kernel Blue Pill Type-2 Hypervisor in Rust Codename: Matrix Blog: https://memn0ps.github.io/hypervisors-for-memory-introspection-and-reverse-engineering/ A lightweight, memory-safe, and blazingly fast Rust-based type-2 research hypervisor with hooks for Intel VT-x, focused on studying the...
CVE-2026-98841
A flaw was found in the Linux kernel's Virtual Machine Generation ID vmgenid driver. The driver registers interrupt and notification handlers before fully initializing driver data during startup. If an interrupt or notification is received immediately—such as when restoring a virtual machine from...
CVE-2026-98839
A flaw was found in the Linux kernel's virtual terminal selection subsystem. When pasting console selections, a race condition can occur if another process concurrently replaces the selection buffer with shorter content while the operation is temporarily paused. This situation causes an integer...
CVE-2023-6241
Exploit for CVE-2023-6241 The write up can be found here. This is a bug in the Arm Mali kernel driver that I reported in November 2023. The bug can be used to gain arbitrary kernel code execution from the untrusted app domain, which is then used to disable SELinux and gain root. The exploit is...
CVE-2026-98838
A flaw was found in the Linux kernel's virtual terminal subsystem. When handling screen updates for background consoles, the kernel fails to properly verify that a console is active before redrawing it with modified font dimensions. A local attacker can exploit this issue by altering font setting...
CVE-2026-98837
A flaw was found in the Linux kernel's ALSA caiaq USB audio driver. This flaw allows a local attacker to cause a Denial of Service DoS or potentially escalate privileges. When device initialization fails during the probing process, the driver frees internal device state structures while leaving t...
CVE-2026-98836
A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture Line 6 USB audio driver. The driver fails to validate the size of playback packets against the allocated memory buffer slice when handling asymmetrical audio configurations. An attacker capable of connecting a crafted U...
CVE-2026-98835
A flaw was found in the Linux kernel's Kionix KX022A accelerometer driver. A local user could trigger a Denial of Service DoS or kernel memory disclosure due to an off-by-one array bounds validation check when converting device register values to array indices. This flaw leads to an out-of-bounds...
Kernel-Process-Hollowing
Windows Kernel Mode Process Hollowing This project is a proof of concept of how the Process Hollowing technique works from the kernel level. Resources SSDT Hook Process Hollowing...
CVE-2026-98834
A flaw was found in the Linux kernel's Memory Technology Device MTD subsystem. An attacker capable of triggering device registration failures can cause a Denial of Service DoS via a kernel crash. During the setup of One-Time Programmable OTP non-volatile memory devices, an initialization failure...
CVE-2026-98833
A flaw was found in the Linux kernel's Memory Technology Device MTD subsystem. When accessing certain partitions, the kernel improperly passes a partition device reference instead of the master device structure to the driver callback. A local user could exploit this flaw during device access...
CVE-2026-98832
A flaw was found in the Linux kernel's block control group blk-cgroup subsystem. When associating block I/O requests with control groups, the kernel prematurely re-enables interrupts while internal locks are still held. A local user can trigger this flaw during storage operations, causing an...
Linux_LPE_io_uring_CVE-2021-41073
LinuxLPEiouringCVE-2021-41073 LPE exploit for CVE-2021-41073 iouring type confusion vulnerability. Checkout the writeup Put an iouring on it: Exploiting the Linux Kernel. author: @chompie1337 For educational/research purposes only. Not for use on testing or security evaulations. To build requires...