341776 matches found
cve-2026-31431-mitigation
CVE-2026-31431 seccomp Mitigation A lightweight, reversible seccomp-based mitigation for CVE-2026-31431, a local privilege escalation vulnerability in the Linux kernel's algifaead / authencesn crypto subsystem. δΈζζζ‘£ Vulnerability Overview Type: Local Privilege Escalation LPE Affected Component:...
copy-fail
Copy Fail PoC English Python PoC for CVE-2026-31431 , intended for controlled laboratory testing on authorized Linux systems. For use only in your own environments, labs, or systems where you have explicit permission. Do not run this code against third-party systems. Description copy-fail.py chec...
CVE-2026-23398
CVE-2026-23398 Linux Kernel icmptagvalidation NULL Pointer Dereference Remote DoS Description icmptagvalidation in net/ipv4/icmp.c dereferences inetprotosproto without a NULL check. A remote attacker can send a single crafted ICMP Fragmentation Needed packet with an unregistered inner protocol...
copy-fail_LPE_Interactive
CVE-2026-31431 Copy Fail Exploit Linux kernel page cache poisoning exploit tool with support for non-interactive command execution. Vulnerability Overview CVE-2026-31431 is a logic flaw in the Linux kernel, present in the authesn AEAD algorithm implementation. Through the AFALG and splice system...
CVE-2026-31431
CVE-2026-31431 LPE PoC Rust Implementation This project is a Proof of Concept PoC implemented in Rust for a local privilege escalation LPE vulnerability simulating CVE-2026-31431. It demonstrates how to manipulate the Linux kernel page cache by exploiting the Crypto API.cite: 1, 2 !CAUTION This...
CVE-2026-31431-poc
Copy Fail Command PoC Wrapper A small modified proof-of-concept wrapper for Copy Fail / CVE-2026-31431 that allows passing a custom command from the terminal instead of always launching an interactive root shell so it can be ran in an none interactive environment such as a web shell. This project...
copyfail-rs
copyfail-rs Rust implementation of CVE-2026-31431 Copy Fail β a Linux kernel page-cache write primitive via AFALG splice. δΈζζζ‘£ / Chinese README CVE-2026-31431 The Linux kernel's algifaead implementation allows an unprivileged user to write arbitrary data into the page cache of any readable file v...
Dirty-Frag-Analysis
Dirty Frag Deep Technical Analysis CVE-2026-43284 xfrm-ESP / CVE-2026-43500 RxRPC Linux kernel local privilege escalation vulnerability β PoC reverse engineering Β· Shellcode breakdown Β· Patch principles Β· Detection script Vulnerability Overview Dirty Frag exploits two independent vulnerabilities,...
CVE-2026-31431
CVE-2026-31431 - Copy Fail PoC Educational Proof of Concept for CVE-2026-31431 , also known as Copy Fail , a Linux kernel local privilege escalation vulnerability involving the AFALG / algifaead cryptographic interface. !WARNING This repository is provided strictly for educational, defensive, and...
CVE-2026-46300_Fragnesia
𧨠Fragnesia β CVE-2026-46300 Linux Kernel LPE Audit & Exploit Toolkit Β· Page-Cache / XFRM ESP-in-TCP espintcp Regression Interactive audit β LPE prerequisite detection β Automated exploit execution after confirmation β οΈ Ethical & Legal Warning This tool is intended solely for legitimate and...
januscape
Januscape β Linux KVM/x86 guest-to-host escape tracking site Source for the Januscape patch-status tracker: a single-page site recording which distributions have shipped a fix for the KVM/x86 guest-to-host escape in the Linux kernel. Where the facts live Everything about the bug β CVE IDs, affect...
ipv6_frag_escape
IPV6FRAGESCAPE β Linux IPv6 fragmentation container escape tracking site Source for the IPV6FRAGESCAPE patch-status tracker: a single-page site recording which distributions have shipped a fix for the IPv6 fragmentation container escape in the Linux kernel. Where the facts live Everything about t...
same_type_object_reuse_exploits
PoC Same-Type/Same-Address Object Reuse Exploits PoC exploits developed by Mathias Krause associated with the blog at https://grsecurity.net/exploitinganddefendingagainstsametypeobjectreuse...
CVE-2026-90272
A flaw was found in the Linux kernel's perf: armpmuv3 component. The hwid branch stack field, which is passed to userspace, was not properly initialized by the Branch Record Buffer Extension BRBE driver. This could lead to the disclosure of uninitialized memory to userspace, potentially allowing ...
CVE-2026-98399
A flaw was found in the Linux kernel. On s390 IBM Z systems booted without an Initial Program Load IPL parameter block, such as during direct kernel boot, the kernel does not verify the parameter block before dereferencing it during dump operations. A local privileged user could trigger this...
CVE-2026-98400
A flaw was found in the Linux kernel's s390 architecture. On systems booted without an Initial Program Load IPL parameter block, such as direct virtual machine boots, the kernel crash shutdown handler unconditionally dereferences an uninitialized pointer when preparing crash data. If a crash...
linux-4.19.72_CVE-2022-36946
Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...
Astra Linux β Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: iio: adc: spear: Initialize the completion object before requesting the interrupt request IRQ. In the report by Jaeyoung Chung: βThe spearadcprobe function in drivers/iio/adc/spearadc.c registers its interrupt handler using...
Astra Linux β Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: - media: rga: fixed a possible memory leak in rgaprobe. - rga-m2mdev needs to be freed when rgaprobe fails...
Astra Linux β Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: Do not leave a dangling sk pointer in ieee802154create sockinitdata attaches the allocated sk object to the provided sock object. If ieee802154create fails later, the allocated sk object is freed, but the danglin...