CVE-2026-98842

A flaw was found in the Linux kernel's module loading subsystem. When an error occurs during module initialization, the kernel fails to propagate the error code and incorrectly reports a successful load after the module has already been cleaned up. A local privileged user could trigger this...

matrix-rs

Windows Kernel Blue Pill Type-2 Hypervisor in Rust Codename: Matrix Blog: https://memn0ps.github.io/hypervisors-for-memory-introspection-and-reverse-engineering/ A lightweight, memory-safe, and blazingly fast Rust-based type-2 research hypervisor with hooks for Intel VT-x, focused on studying the...

CVE-2026-98841

A flaw was found in the Linux kernel's Virtual Machine Generation ID vmgenid driver. The driver registers interrupt and notification handlers before fully initializing driver data during startup. If an interrupt or notification is received immediately—such as when restoring a virtual machine from...

CVE-2026-98839

A flaw was found in the Linux kernel's virtual terminal selection subsystem. When pasting console selections, a race condition can occur if another process concurrently replaces the selection buffer with shorter content while the operation is temporarily paused. This situation causes an integer...

CVE-2023-6241

Exploit for CVE-2023-6241 The write up can be found here. This is a bug in the Arm Mali kernel driver that I reported in November 2023. The bug can be used to gain arbitrary kernel code execution from the untrusted app domain, which is then used to disable SELinux and gain root. The exploit is...

CVE-2026-98838

A flaw was found in the Linux kernel's virtual terminal subsystem. When handling screen updates for background consoles, the kernel fails to properly verify that a console is active before redrawing it with modified font dimensions. A local attacker can exploit this issue by altering font setting...

CVE-2026-98837

A flaw was found in the Linux kernel's ALSA caiaq USB audio driver. This flaw allows a local attacker to cause a Denial of Service DoS or potentially escalate privileges. When device initialization fails during the probing process, the driver frees internal device state structures while leaving t...

CVE-2026-98836

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture Line 6 USB audio driver. The driver fails to validate the size of playback packets against the allocated memory buffer slice when handling asymmetrical audio configurations. An attacker capable of connecting a crafted U...

CVE-2026-98835

A flaw was found in the Linux kernel's Kionix KX022A accelerometer driver. A local user could trigger a Denial of Service DoS or kernel memory disclosure due to an off-by-one array bounds validation check when converting device register values to array indices. This flaw leads to an out-of-bounds...

Kernel-Process-Hollowing

Windows Kernel Mode Process Hollowing This project is a proof of concept of how the Process Hollowing technique works from the kernel level. Resources SSDT Hook Process Hollowing...

CVE-2026-98834

A flaw was found in the Linux kernel's Memory Technology Device MTD subsystem. An attacker capable of triggering device registration failures can cause a Denial of Service DoS via a kernel crash. During the setup of One-Time Programmable OTP non-volatile memory devices, an initialization failure...

CVE-2026-98833

A flaw was found in the Linux kernel's Memory Technology Device MTD subsystem. When accessing certain partitions, the kernel improperly passes a partition device reference instead of the master device structure to the driver callback. A local user could exploit this flaw during device access...

CVE-2026-98832

A flaw was found in the Linux kernel's block control group blk-cgroup subsystem. When associating block I/O requests with control groups, the kernel prematurely re-enables interrupts while internal locks are still held. A local user can trigger this flaw during storage operations, causing an...

Linux_LPE_io_uring_CVE-2021-41073

LinuxLPEiouringCVE-2021-41073 LPE exploit for CVE-2021-41073 iouring type confusion vulnerability. Checkout the writeup Put an iouring on it: Exploiting the Linux Kernel. author: @chompie1337 For educational/research purposes only. Not for use on testing or security evaulations. To build requires...

CVE-2018-11235

CVE-2018-11235 CVE-2018-11235...

CVE-2026-98831

A flaw was found in the Linux kernel's Device Tree overlay subsystem. This flaw allows a local user to cause a Denial of Service DoS through memory exhaustion. When an overlay changeset fails during target or symbol lookup, the kernel fails to release previously acquired fragment references durin...

DarkLoadLibrary

DarkLoadLibrary LoadLibrary for offensive operations. How does it work? https://www.mdsec.co.uk/2021/06/bypassing-image-load-kernel-callbacks/ Usage DARKMODULE DarkModule = DarkLoadLibrary LOADLOCALFILE, // control flags L"TestDLL.dll", // local dll path, if loading from disk NULL, // dll buffer ...

CVE-2026-98829

A flaw was found in the mac80211 wireless networking subsystem of the Linux kernel. An adjacent attacker, such as a rogue Wi-Fi access point or nearby malicious device, can cause a Denial of Service DoS by transmitting a sequence of oversized wireless frame fragments. This causes an integer...

CVE-2026-98827

A flaw was found in the Linux kernel's ath9khtc wireless network driver. An attacker transmitting large network packets can trigger a Denial of Service DoS or system crash through memory corruption. This issue occurs because the driver limits aggregated transmit packets only by count rather than...

CVE-2026-98828

A flaw was found in the Linux kernel's ath9k wireless driver. When handling Wireless Module Interface WMI command responses, the driver copies data into a response buffer without verifying that the received message is sufficiently long. A malicious or compromised device can return a truncated...