CVE-2026-98756

A flaw was found in the Linux kernel's Cadence USB3 driver. A local user could exploit this flaw to cause a Denial of Service DoS by crashing the system. During device discovery of a multi-function Cadence USBSS Peripheral Component Interconnect PCI device, the driver attempts to access shared da...

CVE-2026-98755

A flaw was found in the Linux kernel's Virtual Console Concentrator VCC driver. When sending control messages across a Logical Domain Channel LDC, the driver transmits packets without completely clearing the allocated memory buffer first. A connected peer can inspect these messages to access...

CVE-2026-98754

A flaw was found in the Linux kernel's Virtual Console Concentrator VCC driver. An omission in locking allows a race condition to occur between device cleanup operations and asynchronous event callbacks. A local attacker could exploit this timing issue to cause a use-after-free condition,...

CVE-2026-98752

A flaw was found in the Linux kernel's TTY terminal subsystem. This vulnerability allows a local user to cause a Denial of Service DoS or potentially execute arbitrary code. A race condition during port disconnect and hangup routines allows the kernel to release resources while they are still bei...

CVE-2026-98753

A flaw was found in the Linux kernel's TTY subsystem. A local user can cause a Denial of Service DoS by triggering a race condition during terminal device activation and hangup operations. When device activation fails, the kernel fails to restore an error flag, allowing subsequent input/output...

CVE-2026-98751

A flaw was found in the Linux kernel's terminal tty subsystem. A race condition can occur when a terminal hangup interrupts an active break signaling operation, causing the kernel to communicate with a device driver after the device has already disconnected or powered down. A local attacker could...

CVE-2026-98747

A flaw was found in the Linux kernel's serial core subsystem. This flaw allows a local user with administrative access to cause a Denial of Service DoS by crashing the system. The issue occurs during the unregistration of a serial port that failed during initial setup or was previously torn down,...

CVE-2022-0847

CVE-2022-0847 - Dirty Pipe Exploit A proof-of-concept exploit for CVE-2022-0847 Dirty Pipe, a Linux kernel vulnerability that allows unprivileged users to write to read-only files. Vulnerability Details CVE-2022-0847 affects Linux kernels 5.8 through 5.16. It exploits a race condition in the Linu...

Copy-Fail-CVE-2026-31431-Kubernetes-PoC

Copy Fail CVE-2026-31431 — Kubernetes Container Escape PoC A proof-of-concept demonstrating how a fully unprivileged container can achieve node-level code execution on Kubernetes by exploiting the CVE-2026-31431 Linux kernel page-cache corruption bug through shared container image layers...

CVE-2026-46300_Fragnesia

🧨 Fragnesia — CVE-2026-46300 Linux Kernel LPE Audit & Exploit Toolkit · Page-Cache / XFRM ESP-in-TCP espintcp Regression Interactive audit → LPE prerequisite detection → Automated exploit execution after confirmation ⚠️ Ethical & Legal Warning This tool is intended solely for legitimate and...

CVE-2026-98746

A flaw was found in the Linux kernel's ma35d1 serial driver. This flaw allows a local user to cause a Denial of Service DoS through resource exhaustion. The driver fails to release clock references during probe error handling or when the serial port is removed, causing kernel resources to leak up...

CVE-2026-98745

A flaw was found in the Linux kernel. A local user can exploit this vulnerability to cause a denial of service DoS through a kernel crash. On ARM64 systems that support the Scalable Matrix Extension SME but lack the Scalable Vector Extension SVE, the kernel improperly validates vector signal...

Analisi-CVE-2017-5715

This repository does not have a README...

CVE-2026-98744

A flaw was found in the Linux kernel's MAX98363 audio codec driver. A local user could trigger this vulnerability during audio stream configuration because internal stream parameters are left uninitialized in memory. This issue allows uninitialized values to be processed by the sound subsystem,...

SG-2026-0024

Dirty Frag primitive-only PoC Readable N4C demonstrator for CVE-2026-43284 XFRM/ESP and CVE-2026-43500 RxRPC/RXKAD. The PoC answers one question: can an unprivileged process change the page cache of a root-owned, read-only file through a sharedskbuff fragment? It does not overwrite /usr/bin/su or...

CVE-2026-98743

A flaw was found in the Linux kernel's rt1017 SDCA audio codec driver. The driver fails to initialize stream configuration data before passing it to the sound subsystem, leaving configuration fields populated with uninitialized memory. A local user could exploit this flaw during audio stream...

CVE-2026-74586

CVE-2026-74586 — SCTP ASCONF newtransport use-after-free trigger A self-contained, unprivileged PoC for CVE-2026-74586, a use-after-free in the Linux kernel's SCTP ASCONF dynamic address reconfiguration handling. Credit for the bug itself goes to Qing Ming, who reported it upstream; the fix is...

CVE-2019-2215

CVE-2019-2215 Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1942 https://bugs.chromium.org/p/project-zero/issues/attachmentText?aid=414885 Samsung S7 and S7 Edge with Kernel 3.18.x seem not vulnerable could be however, with more work with PoC adjustments. Could not see more,...

CVE-2026-98741

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture UA-101 USB audio driver. The driver does not validate that packet sizes and channel numbers match between capture and playback endpoints during device initialization. An attacker who connects a specially crafted USB...

CVE-2026-98740

A flaw was found in the Linux kernel's Altera Error Detection and Correction EDAC driver. Certain setup functions were incorrectly designated as temporary initialization routines that are released from memory after startup. When device registration is deferred or manually re-triggered, the driver...