CVE-2023-0386

README gcc -Wall exp.c pkg-config fuse --cflags --libs -o exp ./exp /tmp Vulnerability Analysis The theoretical knowledge in this article namespaces, overlay filesystem, fuse filesystem, etc. comes from ChatGPT. Vulnerability Overview Vulnerability ID: CVE-2023-0386 Vulnerable Product: Linux kern...

CVE-2026-19195-PoC

CVE-2026-19195 - Proof of Concept Arbitrary Registry Key Modifications via Unauthenticated IOCTL requests in Jingyun Antivirus Kernel Driver ZyArk.sys Affected Asset Product: Jingyun Antivirus Version: 2.4.2.39 Component: ZyArk.sys SHA-256 Hash:...

CVE-2026-19193-PoC

CVE-2026-19193 - Proof of Concept Arbitrary Process Termination via Unauthenticated Minifilter Message Handler in Jiangmin Antivirus Kernel Driver kvcore.sys Affected Asset: Product: Jiangmin Antivirus V21 Component: kvcore.sys Core Kernel Driver Version: 1.23.6.27 SHA-256 Hash:...

cve-2026-31431

CVE-2026-31431 — Copy Fail: Linux Kernel LPE Research Lab Educational purposes only. Do NOT use on systems without explicit authorization. Index Description of the vulnerability Affected components How it works Lab setup Docker PoC — Demonstration Mitigation References Vulnerability Description...

CVE-2026-98710

A flaw was found in the Linux kernel's iwlegacy wireless driver. The driver fails to release memory allocated for device configuration data when a wireless network device is removed from the system. A local user could exploit this vulnerability by repeatedly triggering device disconnection or...

tpwn

tpwn cve-2015-???? poc os x 10.10.5 kernel local privilege escalation vulnerability got burned in 10.11 full writeup etason shout out @ unthreadedjb 4 hax Install NULLGuard to protect yourself against tpwn and other NULL Pointer Deference bugs...

CVE-2026-98721

A flaw was found in the Linux kernel's Cadence NAND controller driver. The driver registers its interrupt handler before initializing the internal synchronization lock and completion objects. A pending interrupt during initialization can trigger the handler to access this uninitialized state,...

CVE-2026-98083

A flaw was found in the Linux kernel's Btrfs file system. An improper error-handling sequence during RAID stripe extent insertion can prematurely release transaction objects if memory allocation fails. A local user could exploit this flaw to trigger a use-after-free condition, leading to a system...

CVE-2026-98090

A flaw was found in the Linux kernel's Btrfs file system. A local user could exploit this vulnerability to cause a Denial of Service DoS by crashing the system. During device initialization, if setup fails, the error-handling path releases the new device without restoring active device pointers...

CVE-2026-98723

A flaw was found in the Linux kernel's NVMe target nvmet subsystem. An uninitialized host identifier in persistent reservation references prevents the target from aborting and draining in-flight input/output I/O requests during a Preempt and Abort operation. A connected NVMe host can trigger this...

CVE-2026-36980-Kernel-BSOD-DoS-PoC

CVE-2026-36980-Kernel-BSOD-DoS-PoC Project Date : Feb 2026 / Discovered a buffer overflow vulnerability in the IOCTL handler of the pwdrvio.sys kernel driver. The vulnerability allows an unprivileged local attacker to corrupt kernel pool memory, triggering an immediate system crash BSOD and Denia...

CVE-2026-98719

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for AMD SEV Secure Encrypted Virtualization. This vulnerability occurs due to a double-free issue when memory allocated during virtual machine initialization is freed twice following an initialization failure. A loc...

CVE-2026-98722

A flaw was found in the Linux kernel's block2mtd driver. The driver fails to validate that the erase size module parameter is non-zero before performing a division operation during device initialization. A local user with privileges to modify kernel module parameters can exploit this vulnerabilit...

CVE-2026-98720

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine nested virtualization implementation. This flaw allows an attacker within a nested guest to bypass isolation boundaries and directly access host hardware controls, potentially causing host system instability or a Denial of...

CVE-2026-98724

A flaw was found in the Linux kernel's Non-Volatile Memory Express NVMe target PCI endpoint function driver. When processing a Scatter-Gather List SGL segment whose length is shorter than a single descriptor, the system fails to properly validate the segment size. A connected host can exploit thi...

LinuxEelvation

What's this This project is mainly used to collect the exp for Linux platform privilege promotion, only to help penetration testers quickly achieve privilege promotion in actual combat Information CVE ID| Description| Kernels ---|---|--- CVE-2004-0077| Linux Kernel| 2.4.20, 2.2.24, 2.4.25, 2.4.26...

CVE-2026-98707

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A race condition during the teardown of a Receive Block Acknowledgement RX BA session can allow an internal timer to be rearmed after it has been deleted, leaving it queued on freed memory. An attacker within Wi-Fi range could...

CVE-2026-98712

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for ARM64. The virtual interrupt controller fails to maintain an appropriate reference count on active interrupts, allowing them to be reclaimed and freed while still in use. A malicious guest user could exploit thi...

CVE-2026-98714

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for AMD processors SVM. When virtual machine execution fails, the hypervisor prematurely updates control fields and marks control blocks as clean, assuming hardware operations were performed. A local attacker could...

CVE-2026-98713

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for ARM64. A malicious guest user can cause a denial of service DoS on the host system by executing specific instructions on hardware lacking Fine-Grained Traps FGT support. Because trap configurations were improper...