Linux_LPE_io_uring_CVE-2021-41073

LinuxLPEiouringCVE-2021-41073 LPE exploit for CVE-2021-41073 iouring type confusion vulnerability. Checkout the writeup Put an iouring on it: Exploiting the Linux Kernel. author: @chompie1337 For educational/research purposes only. Not for use on testing or security evaulations. To build requires...

CVE-2026-98831

A flaw was found in the Linux kernel's Device Tree overlay subsystem. This flaw allows a local user to cause a Denial of Service DoS through memory exhaustion. When an overlay changeset fails during target or symbol lookup, the kernel fails to release previously acquired fragment references durin...

CVE-2026-98829

A flaw was found in the mac80211 wireless networking subsystem of the Linux kernel. An adjacent attacker, such as a rogue Wi-Fi access point or nearby malicious device, can cause a Denial of Service DoS by transmitting a sequence of oversized wireless frame fragments. This causes an integer...

CVE-2026-98827

A flaw was found in the Linux kernel's ath9khtc wireless network driver. An attacker transmitting large network packets can trigger a Denial of Service DoS or system crash through memory corruption. This issue occurs because the driver limits aggregated transmit packets only by count rather than...

CVE-2026-98828

A flaw was found in the Linux kernel's ath9k wireless driver. When handling Wireless Module Interface WMI command responses, the driver copies data into a response buffer without verifying that the received message is sufficiently long. A malicious or compromised device can return a truncated...

CVE-2026-98825

A flaw was found in the Linux kernel's Microchip PolarFire Real-Time Clock RTC driver. During device probing or driver initialization, this flaw can lead to a Denial of Service DoS through a kernel crash. The driver fails to verify whether acquiring the reference clock returned an error before...

CVE-2026-98824

A flaw was found in the Linux kernel's mac80211 wireless subsystem. When processing transmission TX status reports, the subsystem fails to properly validate rate metadata before using it to index internal rate tables. Malformed metadata can trigger an out-of-bounds memory access, potentially...

CVE-2026-98823

A flaw was found in the Linux kernel's cfg80211 wireless subsystem. This issue allows an adjacent attacker within wireless range to cause a Denial of Service DoS by crashing the system. During a channel switch, the kernel improperly manages memory ownership when merging wireless scan entries that...

CVE-2026-98822

A flaw was found in the Linux kernel's mac80211 wireless subsystem. This flaw can lead to information disclosure across network boundaries when transmitting frames across Access Point AP virtual local area networks VLANs. Due to improper station lookup logic, the kernel matches recipient devices...

CVE-2026-98821

A flaw was found in the Linux kernel's block layer. A local user could exploit this vulnerability to cause a denial of service DoS by initiating polled direct I/O operations combined with user integrity metadata. Because the kernel improperly attempts to poll integrity metadata as standard block...

CVE-2026-98820

A flaw was found in the Linux kernel's block multi-queue blk-mq subsystem. When cached input/output I/O requests originally allocated for passthrough commands are reused for standard read or write operations, scheduler flags are not properly updated. This failure bypasses required scheduler...

PS5-IPV6-Kernel-Exploit

PS5 3.xx / 4.xx Kernel Exploit Summary This repo contains an experimental WebKit ROP implementation of a PS5 kernel exploit based on TheFlow's IPV6 Use-After-Free UAF , which was reported on HackerOne. The exploit strategy is for the most part based on TheFlow's BSD/PS4 PoC with some changes to...

CVE-2026-98819

A flaw was found in the Linux kernel's Intel Bluetooth driver. When processing Device Descriptor Configuration DDC records, the driver fails to properly validate record lengths, allowing integer wrapping and reading past buffer boundaries. An attacker capable of supplying crafted firmware data...

CVE-2026-98818

A flaw was found in the Linux kernel. When freeing memory through the slab allocator, the system may attempt to wake the kernel swap daemon while an internal scheduler lock is already held. This unsafe sequence can trigger a circular locking dependency and cause a system deadlock. A local user...

CVE-2026-98816

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. An integer overflow occurs in the constant blinding mechanism when calculating backward jump offsets during BPF program hardening. A local attacker capable of loading BPF programs could exploit this issue to jump beyond...

CVE-2026-98815

A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express subsystem. When tearing down a device namespace in multipath mode, character devices may remain accessible after their underlying data structures have been released. A local user could exploit this timing issue to trigger a...

CVE-2026-98814

A flaw was found in the Linux kernel's Non-Volatile Memory Express NVMe driver. A local attacker can cause a denial of service DoS or potentially escalate privileges by exploiting a use-after-free flaw. This issue occurs when an input/output I/O passthrough command is sent through a multipath...

CVE-2026-98813

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. During the teardown of certain BPF hash maps, the memory allocator destructor failed to retain a reference to the map's BPF Type Format BTF metadata, allowing the metadata to be freed while background cleanup tasks were...

CVE-2026-98812

A flaw was found in the Linux kernel's Management Component Transport Protocol MCTP subsystem. This vulnerability allows a local user to cause a Denial of Service DoS by triggering a kernel crash. During device setup, the kernel exposes the network device object before its internal pointers are...

CVE-2026-89959

A flaw was found in the Linux kernel's s390/vfio-ap component. An incorrect function was used during the removal of control domains, specifically bitmapandnot instead of bitmapand. This error prevents explicitly unplugged control domains from being properly removed from a Kernel-based Virtual...