CVE-2022-1015

CVE-2022-1015 This repository contains a PoC for local privilege escalation of CVE-2022-1015, a bug in the nftables component of the linux kernel that I found. You can read a detailed analysis of this vulnerability and the exploitation strategy over at my blog. Right now, the exploit is a bit...

CVE-2026-31431

CVE-2026-31431 — Copy Fail 中文版 732 Bytes to Root on Every Major Linux Distribution CVE-2026-31431 Copy Fail is a logic bug in the Linux kernel's authencesn cryptographic template. It allows an unprivileged local user to trigger a deterministic, controlled 4-byte write into the page cache of any...

encrypted-linux-kernel-modules

ELKM: Encrypted Linux x86-64 Loadable Kernel Modules ELKM provides a mechanism to securely transport and load encrypted Loadable Kernel Modules LKM. The aim is to protect kernel-based rootkits and implants against observation by Endpoint Detection and Response EDR software and to neutralize the...

CopyFail-for-dummies

Copy Fail / CVE-2026-31431 — Research Notes Overview This repository contains a cleaned-up technical diagram and supporting notes for the Linux kernel vulnerability commonly referred to as Copy Fail and tracked as CVE-2026-31431. The purpose of this material is: to explain the bug mechanism at a...

copy-fail_LPE_Interactive

CVE-2026-31431 Copy Fail Exploit Linux kernel page cache poisoning exploit tool with support for non-interactive command execution. Vulnerability Overview CVE-2026-31431 is a logic flaw in the Linux kernel, present in the authesn AEAD algorithm implementation. Through the AFALG and splice system...

XCP_ng_CVE-2026-31431_tester

CVE-2026-31431 "Copy Fail" — XCP-ng Laboratory Detector A safe, non-destructive detector script for CVE-2026-31431 "Copy Fail", validated against XCP-ng 8.3 LTS prior to the May 5, 2026 security update. ⚠️ Authorized use only. Run this script exclusively on systems you own or are explicitly...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

RLSA-2026:85321 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-52935 kernel: sctp: diag: reject stale...

cve-2026-31431-copy-fail

CVE-2026-31431 "Copy Fail" Scanner & Patch Helper Copy Fail is an automated security scanner and patch helper for detecting and remediating the CVE-2026-31431 vulnerability Linux Kernel algifaead Local Privilege Escalation across your Linux infrastructure. Table of Contents Description Key Featur...

Kernel-Arbitrary-Read-Vulnerability-Superfetch-EOP

Kernel-Arbitrary-Read-Vulnerability-Superfetch-EOP Kernel Arbitrary Read Vulnerability + Superfetch EOP based on reacher from https://starlabs.sg/blog/2022/06-trying-to-exploit-a-windows-kernel-arbitrary-read-vulnerability/ . Exploit must be run from low integrity...

ProcessInjection

ProcessInjection The program is designed to perform process injection. Currently the tool supports 5 process injection techniques. 1 Vanilla Process Injection 2 DLL Injection 3 Process Hollowing 4 APC Queue 5 KernelCallbackTable Injection The tool accepts shellcode in 4 formats. 1 base64 2 hex 3 ...

Ubuntu-0day

Ubuntu16.04-0day Vulnerability scope: all 4.4 ubuntu aws instances are vulnerable Jann Horn discovered that in some cases, the Berkeley Packet Filter BPF in the Linux kernel incorrectly performed sign extension in checkaluop. A local attacker can use this to escalate privileges on the system and...

IvantiInitrdDecryptor

Here's a quick-and-dirty tool to decrypt the Ivanti device's initrd. It's mostly academic since there are other ways to extract the much more useful LVM keys for the real root device. To use it, copy the kernel file from the Ivanti, and extract the ELF from the bzImage I used binwalk -e. Throw it...

CVE-2023-0179-PoC

Needle CVE-2023-0179 exploit This repository contains the exploit for my recently discovered vulnerability in the nftables subsystem that was assigned CVE-2023-0179, affecting all Linux versions from 5.5 to 6.2-rc3, although the exploit was tested on 6.1.6. The vulnerability details and writeup c...

cve-2026-31431-check

cve-2026-31431-check cve-2026-31431-check is a small Bash triage script for checking local Linux exposure and mitigation indicators for CVE-2026-31431, also known as "Copy Fail." The script targets Debian, Ubuntu, and Debian-family derivatives including Linux Mint, Pop!OS, and similar...

ICALL-GADGET

ICALL GADGET ABUSE FOR COMMUNICATION General info: this is in the windows kernel and it will allow us to communicate in our driver without being detected to by anticheats So I was scrolling around in IDA and found this image After further inspection we can see that it calls a function called...

CVE-2026-31431_Kernel_Checker

For Free Internet Servers: curl -fsSL https://raw.githubusercontent.com/ShahaB108/CVE-2026-31431KernelChecker/main/kernelcheck.sh | bash For Iran servers: curl -fsSL https://raw.githubusercontent.com/ShahaB108/CVE-2026-31431KernelChecker/main/irkernelupdate.sh | bash...

KernelFlirt

KernelFlirt Windows kernel-level debugger with an OllyDbg/IDA Pro-style interface. Designed for security research, reverse engineering, and malware analysis in VM environments VMware. Architecture Host machine VM Windows 10, testsigning ┌──────────────────┐ TCP:31337 ┌──────────────────┐ IOCTL...

cfDr

cfDr - Copy Fail Doctor C opy F ail D etection and R emediation An Ansible role and playbook suite for detecting and remediating CVE-2026-31431 Copy Fail, a critical local privilege escalation vulnerability in the Linux kernel's algifaead module. Repository 🔗 GitHub :...

Win10Pcap-Exploit

Win10Pcap-Exploit credit to https://twitter.com/R00tkitSMM [email protected] telegram username : https://telegram.me/firozi some day ago i found vulnerability in win10pcap Driver that can lead to Privilege escalation i report vulnerability and now bug is fixed : www.win10pcap.org/download/ s...