CVE-2026-31431

CVE-2026-31431 LPE PoC Rust Implementation This project is a Proof of Concept PoC implemented in Rust for a local privilege escalation LPE vulnerability simulating CVE-2026-31431. It demonstrates how to manipulate the Linux kernel page cache by exploiting the Crypto API.cite: 1, 2 !CAUTION This...

CVE-2026-23111

CVE-2026-23111 Auditor Linux Kernel nftables UAF This repository contains an automated audit script in Bash designed to deeply and accurately evaluate the CVE-2026-23111 vulnerability in Linux environments. 🔍 What is the CVE-2026-23111 vulnerability? CVE-2026-23111 is a Use-After-Free UAF...

CVE-2026-23398

CVE-2026-23398 Linux Kernel icmptagvalidation NULL Pointer Dereference Remote DoS Description icmptagvalidation in net/ipv4/icmp.c dereferences inetprotosproto without a NULL check. A remote attacker can send a single crafted ICMP Fragmentation Needed packet with an unregistered inner protocol...

CVE-2026-98609

A flaw was found in the Linux kernel's VirtIO GPU driver. When graphics buffer handle creation fails, the driver improperly handles object references, preventing cleanup functions from freeing allocated memory and host resources. A local attacker could exploit this vulnerability to trigger a...

linux

Linux kernel The Linux kernel is the core of any Linux operating system. It manages hardware, system resources, and provides the fundamental services for all other software. Quick Start Report a bug: See Documentation/admin-guide/reporting-issues.rst Get the latest kernel: https://kernel.org Buil...

CVE-2026-31431

CVE-2026-31431 — "Copy Fail" Local Privilege Escalation Overview CVE-2026-31431 is a local privilege escalation vulnerability in the Linux kernel's algifaead subsystem. The authencesn AEAD implementation performs an in-place decrypt via splice2, placing a page-cache page into the destination...

CVE-2026-98095

A flaw was found in the Linux kernel's afpacket network subsystem. When parsing packet headers, user-supplied length values are improperly converted from an unsigned integer to a signed integer. A local user can exploit this vulnerability by submitting an excessively large packet length, causing ...

CVE-2026-98081

A flaw was found in the Linux kernel's Btrfs file system when handling zoned storage devices. When an operation to finish a storage zone fails, the system returns early without completing proper cleanup, leaving the block group in an inconsistent state and stranding waiting tasks. A local user...

CVE-2026-98079

A flaw was found in the Linux kernel's Btrfs file system. A local user could trigger a Denial of Service DoS when performing write operations on a file system using Zstandard zstd compression. Due to a synchronization timing issue during memory allocation, a write task can miss a wake-up...

CVE-2026-97605

A flaw was found in the Linux kernel. When resizing the decompression stream pool in the Enhanced Read-Only File System EROFS encounters a memory allocation failure, an uninitialized stream is improperly retained in the active pool. A local user accessing or decompressing an affected filesystem c...

CVE-2026-93781

A flaw was found in the Linux kernel's SCSI Small Computer System Interface subsystem, which can lead to a Denial of Service DoS. During device error recovery, the error handling mechanism attempts to allocate request tags while all available tags are held by pending commands waiting for recovery...

CVE-2026-93256

A flaw was found in the Linux kernel. During the hibernation resume process on ARM64 systems, the kernel fails to properly mask processor exceptions before restoring the suspended system state. A local user could encounter or trigger an unhandled hardware exception while the system is in this...

CVE-2026-93255

A flaw was found in the Linux kernel's Btrfs file system. A race condition occurs between background read I/O completion and extent buffer cache invalidation during unmount operations because read status flags are cleared outside of the reference count lock. A local user performing file system...

CVE-2026-93244

A flaw was found in the Linux kernel's simpledrm driver. The driver fails to properly validate the computed display buffer stride, the byte width of a row of pixels, against the maximum integer limit. A local user could exploit this flaw to trigger calculation errors, leading to a kernel crash an...

CVE-2026-93248

A flaw was found in the Linux kernel's drm/xe graphics driver. When a graphics device becomes unresponsive wedged and execution queues are terminated, the driver fails to retain the wedged status during cleanup. A local user could exploit this flaw during driver unbinding to trigger an unexpected...

CVE-2026-93242

A flaw was found in the Linux kernel's qla2xxx Fibre Channel driver. When handling multi-entry response packets, an off-by-one counting error causes the driver to consume an extra entry from the response queue. This issue can cause legitimate firmware responses to be prematurely marked as process...

linux-kernel-exploits

linux-kernel-exploits Introduction linux-kernel-exploits Vulnerability List CVE Description Kernels CVE–2018–18955 mapwrite in kernel/usernamespace.c allows privilege escalation Linux kernel 4.15.x through 4.19.x before 4.19.2 CVE–2018–1000001 glibc glibc 2.6.22 released in 2007 CVE-2016-2384 a...

CVE-2026-93243

A flaw was found in the Linux kernel's secret memory secretmem subsystem. A local user can bypass locked memory resource limits by repeatedly mapping and unmapping secret memory ranges. Because the kernel fails to properly track these unevictable memory pages against user limits, an unprivileged...

CVE-2026-93241

A flaw was found in the Linux kernel. When the out-of-memory OOM killer terminates a multi-threaded process and asynchronous memory cleanup cannot complete, exiting threads continue to invoke memory reclamation and serialize behind an internal lock. A local user can exploit this vulnerability by...

CVE-2026-93240

A flaw was found in the Linux kernel's memory control group memcg subsystem. A local user with permissions to configure memory limits can cause a Denial of Service DoS by triggering memory reclamation under legacy memory soft limits. When the kernel's background memory reclamation process manages...