CVE-2026-98696

A flaw was found in the Linux kernel's USB serial subsystem. A local user with administrative privileges could exploit this flaw to cause a Denial of Service DoS or memory corruption. During the unloading of a USB serial driver module, drivers are deregistered in an incorrect sequence, allowing...

CVE-2026-98650

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for the s390 architecture. A race condition occurs when storage key management functions process large memory pages that are simultaneously split by another thread. A local user could exploit this timing issue durin...

almalinux-fix-cve-2026-31431

CVE-2026-31431 algifaead and Dirty Frag CVE-2026-43284 Vulnerability Fix Updates the system to close the CVE-2026-31431 algifaead and Dirty Frag CVE-2026-43284 vulnerabilities found in the Linux kernel and automatically sets the secure kernel version as the default. English: This script...

CVE-2026-98639

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for the RISC-V architecture. During nested virtualization acceleration, control flags are written before the target page parameters are properly committed to shared memory. Consequently, the supervisor interface or...

copy-fail-CVE-2026-31431

CVE-2026-31431 Copy Fail exploit Author: pyroceper Tested on: Ubuntu 25.10 x8664 $ make $ ./exploit Detected kernel: 6.17.0 Making backup of /etc/passwd to /tmp Backup saved as /tmp/passwd.bak Obtaining root shell... id uid=0pwn gid=0root groups=0root whoami pwn CREDITS & REFERENCES: Original...

CVE-2026-98742

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sequencer subsystem. A local user could exploit a race condition caused by missing locking during compatibility ioctl input/output control operations. By sending concurrent port creation requests, an attacker can corrup...

cve-2019-11477-poc

cve-2019-11477-poc Simple Test 1. Start two VMs one for an SSL server and the other for an SSL client 2. Server Execute the server application cd apps ./server.sh 7000 3. Client Install the required packages sudo apt-get install libmnl-dev sudo apt-get install libnetfilter-queue-dev 4. Client Add...

GhostLock

GhostLock - CVE-2026-43499 Local Privilege Escalation Exploit Vulnerability Overview CVE ID: CVE-2026-43499 Vulnerability Type: futex PI priority inheritance stack UAF Use-After-Free Affected Range: Linux kernel 6.1 6.12 Android GKI Exploitation Impact: Local privilege escalation + SELinux disabl...

CVE-2021-22555-Exploit

CVE-2021-22555-Exploit CVE-2021-22555 Exploit By Andy Nguyen INFO A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/xtables.c. This allows an attacker to gain privileges or cause a DoS via heap memory corruption through user name space 編譯 gcc -m32 -stati...

CVE-2026-98750

A flaw was found in the Linux kernel's TTY terminal subsystem. A race condition occurs when closing a terminal device while the device number is simultaneously re-registered by a driver that does not guarantee minor number exclusivity. A local attacker could exploit this timing window to trigger ...

ansible-role-cve-2026-31431

ansible-role-cve-2026-31431 Ansible role to apply and later remove the modprobe.d mitigation for CVE-2026-31431 "Copy Fail" in the Linux kernel's AFALG / algifaead subsystem. Tested on Debian. Pull requests for other distributions, edge cases, or improvements are very welcome. What it does The ro...

fix-cve-2026-3143

fix-cve-2026-3143 Diagnostics and remediation for CVE-2026-31431 copy fail Installation Copy the installation script to the clipboard and run it in the command line sudo apt install git && cd && git clone https://github.com/ClimbMunchkin/fix-cve-2026-3143.git fix-cve-2026-3143 && chmod +x...

CVE-2026-31431-Verificador-Exploit

CVE-2026-31431 - Linux Kernel Privilege Escalation Exploit Description Functional exploit for the CVE-2026-31431 vulnerability that allows local privilege escalation on Linux systems by exploiting a flaw in the kernel's AFALG cryptographic subsystem combined with the splice system call. Features...

CVE-2026-98861

A flaw was found in the Linux kernel's function probe fprobe tracing mechanism. When handlers execute during inactive Read-Copy Update RCU, a kernel synchronization mechanism states, unregistration routines fail to wait for active handlers to complete before freeing memory. A privileged local...

CVE-2026-98859

A flaw was found in the Linux kernel's Human Interface Device HID multitouch driver. When a multitouch device is disconnected or removed, the driver fails to prevent the release timer from being rescheduled by incoming input reports. Once the driver deallocates the device data, the timer callback...

CVE-2026-98840

A flaw was found in the Linux kernel's virtual console screen driver. A race condition between virtual console write operations and console deallocation can cause the kernel to access previously freed memory, resulting in a use-after-free vulnerability. A local user could exploit this flaw to cau...

CVE-2026-98762

A flaw was found in the Linux kernel's USB DWC2 driver. A race condition during host controller teardown or initialization failure allows the wakeup timer to execute after host resources have been released. A local user could exploit this use-after-free vulnerability to cause a Denial of Service...

CVE-2026-98776

A flaw was found in the Linux kernel's Android Binder filesystem binderfs. A local user can exploit a race condition during concurrent device creation and deletion to trigger a use-after-free UAF condition, which occurs when freed memory is written to while being re-registered. This issue may all...

CVE-2026-98830

A flaw was found in the Linux kernel's Silicon Labs WFx Wi-Fi driver. The driver fails to validate the length of firmware responses during Management Information Base MIB queries before copying the data into memory buffers. A compromised or malicious wireless device could supply an oversized...

CVE-2026-98800

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When a BPF program attached to a trampoline is detached, the kernel may release the program's memory prematurely before preempted tasks have safely completed execution. A local user can exploit this race condition to...