auditd

/ | / // / / /| |/ / / / / / / / / / // / // / / // // / // |,/,///,/ Best Practice Auditd Configuration Idea The idea of this auditd configuration is to provide a best-practice baseline that is designed to load out-of-the-box on major Linux distributions covers a broad set of security-relevant...

EUVD-2026-107288

In the Linux kernel, the following vulnerability has been resolved: bpf: Infer zextdst based on static register liveness analysis As reported in the thread 1, the verifier's 32-bit operations zero extension logic is broken. This logic is responsible for correct semantics of 32-bit operations on...

CVE-2026-98869

The Linux kernel contains a vulnerability in the BPF verifier 's 32-bit operations zero extension logic, specifically affecting the s390 architecture . The issue arises because the verifier fails to correctly track whether the upper halves of 64-bit registers are alive. A regression in the livene...

CVE-2026-98869 bpf: Infer zext_dst based on static register liveness analysis

In the Linux kernel, the following vulnerability has been resolved: bpf: Infer zextdst based on static register liveness analysis As reported in the thread 1, the verifier's 32-bit operations zero extension logic is broken. This logic is responsible for correct semantics of 32-bit operations on...

cve-2026-31431-detection

CVE-2026-31431 "Copy Fail" — Defensive Detection Package A production-ready collection of detection rules and triage guidance for CVE-2026-31431, a Linux kernel local privilege escalation in the algifaead crypto interface disclosed by Theori Xint Code Research. The vulnerability exploits an...

linux-kernel-exploits

linux-kernel-exploits Introduction linux-kernel-exploits Vulnerability List CVE Description Kernels CVE–2018–18955 mapwrite in kernel/usernamespace.c allows privilege escalation Linux kernel 4.15.x through 4.19.x before 4.19.2 CVE–2018–1000001 glibc glibc 2.6.22 released in 2007 CVE-2016-2384 a...

same_type_object_reuse_exploits

PoC Same-Type/Same-Address Object Reuse Exploits PoC exploits developed by Mathias Krause associated with the blog at https://grsecurity.net/exploitinganddefendingagainstsametypeobjectreuse...

CVE-2017-8890

CVE-2017-8890 Related documents: ubuntu kernel dual-machine debugging method CVE-2017-8890 Vulnerability Analysis and Exploitation - Overview CVE-2017-8890 Vulnerability Analysis - Principles CVE-2017-8890 Vulnerability Exploitation root ubuntu 16.04@kernel 4.10 CVE-2017-8890 Vulnerability...

Auto-Root-Exploit

Auto-Root-Exploit Auto Root Exploit Tool Author : Nilotpal Biswas Facebook : https://www.facebook.com/nilotpal.biswas.73 Twitter : https://twitter.com/nilotpalhacker USAGE : for kernel version 2.6 all bash autoroot.sh 2 for kernel version 3 all bash autoroot.sh 3 for kernel version 4 all bash...

cve-2018-8453-exp

cve-2018-8453-exp cve-2018-8453 exp This program is an exploit for CVE-2018-8453. The vulnerability itself exists in Windows 7 and later versions. Note: It can only be exploited on Windows 8.1 and later versions! Therefore, this EXP can only be used on Windows 8.1 and later versions...

CVE-2026-98620

A flaw was found in the Linux kernel's MediaTek Ethernet driver mtkethsoc. This issue allows a local attacker to cause a Denial of Service DoS by triggering a failure during the network device registration probe sequence. When registration fails, the driver's error cleanup path frees registered...

CVE-2026-98619

A flaw was found in the Linux kernel's ethtool subsystem. A local user with network administration privileges can cause a Denial of Service DoS by initiating an offline self-test on affected network drivers. Because the test routine fails to hold the necessary synchronization locks when taking th...

CVE-2026-98618

A flaw was found in the Linux kernel's fbnic network driver. When configuring the maximum number of standalone transmission and reception channels, the driver under-allocates vector resources, leaving uninitialized entries. This flaw allows a local user with administrative privileges to trigger a...

CVE-2026-98628

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. A privileged local user can cause a Denial of Service DoS by loading a specially crafted BPF program containing numerous redundant instructions that trigger intensive post-verification cleanup. Because these rewrite...

CVE-2026-98629

A flaw was found in the Linux kernel's u32 traffic control classifier clsu32. A local user with network administration privileges can trigger this flaw by creating and removing filter hash tables with manually assigned handles. Due to an identifier mismatch between table creation and deletion...

CVE-2026-98098

A flaw was found in the Linux kernel. A local user can trigger a Denial of Service DoS by binding an excessive number of service addresses to sockets in the Transparent Inter-Process Communication TIPC subsystem. When the internal name table reaches its capacity limit, required protocol service...

CVE-2026-98627

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When verifying packet pointer registers that share an identifier, the BPF verifier fails to preserve register displacement during state pruning. A local user with permission to load BPF programs could exploit this...

CVE-2026-98622

A flaw was found in the Linux kernel's traffic control connection tracking subsystem. Under normal load or during connection tracking flushes, expected memory allocation failures inappropriately trigger a kernel warning. A local user can exploit this condition by racing connection flushes against...

CVE-2026-98630

A flaw was found in the Linux kernel's fbnic network driver. When memory allocation for a payload page pool fails, the error cleanup routine incorrectly attempts to destroy an invalid error pointer instead of releasing the allocated header page pool. A local user able to trigger interface queue...

CVE-2026-98624

A flaw was found in the Linux kernel's netfilter subsystem. A race condition exists between socket release event processing and configuration requests within the nfnetlinkqueue component. A local user could exploit this vulnerability by executing concurrent socket operations, triggering a kernel...