0days-for-latest-kernel

This repository does not have a README...

tetragon-dirtyfrag

tetragon-dirtyfrag Blocking the DirtyFrag Linux privilege-escalation chain CVE-2026-43284 / CVE-2026-43500 at runtime with a Cilium Tetragon TracingPolicy. The policy SIGKILLs the public proof-of-concept at its socket-setup step, before it reaches the page-cache write that would give it root. Wha...

cve-2022-21907

CVE-2022-21907 Golang Application by 1vere$k CVE-2022-21907 - Double Free in http.sys driver. Summary This is a multithreading Golang application wich allows make requests on few targets simultaneously. Not very productive with the POST requests but it provides nearly 30% of speed comparing to a...

2022-LPE-UAF

2022-LPE-UAF Untested POC code Security researchers discovered 3 vulnerabilities in the Linux kernel that could allow a local attacker to elevate privileges and potentially execute malicious code. The proof-of-concept code is publicly available increasing the likelihood of exploitation in the wil...

CVE-2026-89847

A flaw was found in the Linux kernel's qla2xxx SCSI driver. A double completion scenario can occur during the asynchronous I/O control block IOCB timeout handling. This can lead to a use-after-free vulnerability, where the system attempts to write to memory that has already been released. A local...

CVE-2021-4154

CVE-2021-4154 This bug was fix in https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3b0462726e7ef281c35a7a4ae33e93ee2bc9975b This exploit works on most pre-patch kernels for: CentOS 8 kernels higher than linux-4.18.0-305.el8 Debian 11 kernels higher than 5.10.0-8 Fedor...

CVE-2020-0041

CVE-2020-0041 This repository contains LPE code for exploiting CVE-2020-0041 implemented by bluefrostsecurity as released at https://github.com/bluefrostsecurity/CVE-2020-0041/tree/master/lpe . The exploitation approach for this part can be found at...

Exploit for CVE-2026-68136

CVE-2026-68136 / GHSA-p4gp-483j-wr28 — PoC: Linux kernel GRO d...

CVE-2026-89858

A flaw was found in the Linux kernel's qla2xxx driver. A local user could exploit this vulnerability by sending a specially crafted Block SCSI Generic BSG request with an excessively large image count. This could cause the system to read beyond the intended memory buffer, leading to the disclosur...

CVE-2026-89861

A flaw was found in the Linux kernel's qla2xxx SCSI driver. This vulnerability occurs in the qla24xxreportidacquisition function where a virtual port reference is not properly maintained. A local attacker could exploit this timing issue, allowing a concurrent operation to free the virtual port...

CVE-2026-89897

A flaw was found in the Linux kernel's media subsystem, specifically within the Consumer Electronics Control CEC framework. The cecreceivenotify function reads the exclusive follower pointer without proper locking, creating a race condition. This lack of serialization during exclusive follower...

CVE-2026-89892

A flaw was found in the Linux kernel's em28xx media driver. This vulnerability occurs because the audio-only path incorrectly registers extensions during device probing, leading to a duplicate device entry in an internal list. This duplicate entry can be freed while still being referenced,...

CVE-2026-31431

Ubuntu 24.04.3 LTS Kernel: Linux 6.6.87.1-microsoft-standard-WSL2 Kali GNU/Linux Rolling Kernel: Linux 6.6.87.1-microsoft-standard-WSL2...

CVE-2026-98847

A flaw was found in the Linux kernel's SPEAr Real-Time Clock RTC driver. The driver requests and enables an alarm interrupt before completing device initialization, specifically prior to setting up the memory-mapped I/O MMIO address and spinlock. If an interrupt triggers while device probing is i...

CVE-2026-98846

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP subsystem. A race condition can occur when an SCTP socket is shut down concurrently while waiting for a connection, causing an association structure to be freed while still in use. A local user could exploit this fla...

CVE-2026-98845

A flaw was found in the Linux kernel's Trusted Platform Module TPM subsystem. This vulnerability allows an attacker to bypass TPM reset protections because the driver fails to disable the device when a null key integrity check fails. Consequently, the TPM continues serving requests and...

CVE-2026-89917

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for ARM64 architectures. A race condition exists between the Virtual Nested Cache Register VNCR Translation Lookaside Buffer TLB invalidation and the vcpuput function's unmapping of the VNCR page. This time-of-check to...

CVE-2026-98844

A flaw was found in the Linux kernel's network filesystem netfs subsystem. When a file is extended through write operations after previous writes were performed via memory mapping, the system fails to clear stale cache data located beyond the original end of the file. A local user could exploit...

Black-Angel-Rootkit

Black Angel Rootkit Black Angel is a Windows 11/10 x64 kernel mode rootkit. Rootkit can be loaded with enabled DSE while maintaining its full functionality. Designed for Red Teams. Rootkit Features Rootkit can be loaded with kdmapper to bypass DSE, Black Angel Loader may not be working properly...

CVE-2026-98843

A flaw was found in the Linux kernel's Network Filesystem netfs subsystem. When reading data gaps around modified memory regions during streaming write operations, truncated or incomplete read responses from a remote server fail to clear unread memory buffers. As a result, stale memory contents c...