CVE-2017-0541

poc and vulnerability analysis of CVE-2017-0541...

CVE-2026-43284

🚨 CVE-2026-43284 — Dirty Frag 🚨 Universal Linux Kernel Local Privilege Escalation Overview Field| Detail ---|--- CVE| CVE-2026-43284 xfrm/ESP + CVE-2026-43500 RxRPC Nickname| Dirty Frag CVSS| 7.8 HIGH Type| Local Privilege Escalation LPE Introduced| Linux kernel 4.10 2017, commit cac2661c53f3...

OverlayFS-PrivEsc-CVE-2022-0944

CVE-2022-0944: Privilege Escalation Vulnerability in OverlayFS 🛡️ Security advisory and mitigation guide for the Linux kernel privilege escalation vulnerability in OverlayFS. 📜 Overview CVE-2022-0944 is a security vulnerability in the Linux kernel's OverlayFS subsystem that allows local attackers...

CVE-2017-16995

Linux Kernel Version 4.14 - 4.4 Ubuntu && Debian Description This vulnerability exists in the eBPF bpf2 system call in the Linux kernel. When a user provides a malicious BPF program that causes a calculation error in the eBPF verifier module, it leads to arbitrary memory read/write issues...

libslub

libslub libslub is a python library to examine the SLUB managements structures and object allocations the Linux kernel heap implementation. It is currently designed for use with GDB but could easily be adapted to work with other debuggers. It helps understanding SLUB internals and developing Linu...

CVE-2023-2598

CVE-2023-2598 Refer: https://anatomic.rip/cve-2023-2598/ https://github.com/ysanatomic/iouringLPE-CVE-2023-2598 https://bsauce.github.io/2024/07/30/CVE-2023-2598/ Build: apt install -y liburing-dev gcc CVE-2023-2598.c -o CVE-2023-2598 -luring PoC: user1@syzkaller:$ uname -a Linux syzkaller 6.3.1 ...

CVE-2026-43284-

CVE-2026-43284 Dirty Flag Local Privilege Escalation As of early May 2026, Dirty Frag refers to a high-severity Linux kernel vulnerability CVE-2026-43284 and CVE-2026-43500.Impact: It allows unprivileged users to gain root access full administrative control by exploiting how the kernel handles...

CVE-2021-3493-Exploit

CVE-2021-3493-Exploit A proof-of-concept local privilege escalation exploit for CVE-2021-3493, written in C. 📌 Description This repository contains a C implementation of the exploit for CVE-2021-3493. This is a Local Privilege Escalation LPE vulnerability in the OverlayFS implementation in the...

CVE-2026-31431-Copy-Fail---Advanced-LPE-Proof-of-Concept---C-Rewrite

CVE-2026-31431 "Copy Fail" - Advanced LPE Proof-of-Concept - C Rewrite An advanced, byte-perfect Local Privilege Escalation LPE Proof-of-Concept PoC for CVE-2026-31431 , exploiting a logic flaw in the Linux kernel's cryptography subsystem algifaead. This repository contains a highly optimized C...

Copy-Fail-CVE-2026-31431

Copy-Fail-CVE-2026-31431 A proof-of-concept exploit reproduction of the Linux kernel vulnerability CVE-2026-31431 , also known as Copy Fail. Credits to: Copy Fail Affected Systems Linux kernel versions 4.14 and newer Most major distributions released from 2017 until patch deployment Ubuntu, Debia...

CVE-2021-4034-CTF-writeup

CVE-2021-4034-CTF-writeup This is a CTF pwn challenge that I wrote in C which requires the user to exploit the CVE-2021-4034 vulnerability. Players are given 2 binaries in the challenge directory in this repo. The chal binary implements the CTF challenge and the shelly.so is a helper binary. How ...

CVE-2026-43494-PinTheft-PoC

SLEY — PinTheft PoC CVE-2026-43494 Proof of concept — uid=1000raken → uid=0root after ./sley on WSL2 6.6.87.2-microsoft-standard-WSL2 Single-file proof-of-concept for CVE-2026-43494 PinTheft: a Linux kernel local privilege escalation that chains an RDS zerocopy reference-count bug with iouring...

CVE-2026-93133

A flaw was found in the Linux kernel. In the riscvacpiaddprtdep function, the acpigethandle call can fail, leading to the linkhandle variable being uninitialized. This oversight could potentially lead to system instability or unexpected behavior...

CVE-2026-93132

A flaw was found in the Linux kernel's Advanced Configuration and Power Interface ACPI implementation for RISC-V architectures. Specifically, the riscvacpiaddprtdep function contains a loop that incorrectly handles error conditions. This can cause the loop to skip necessary entry pointer updates,...

CVE-2026-93181

A flaw was found in the Linux kernel's uncore performance monitoring unit. An incorrect ordering of internal function calls during CPU online and offline operations can prevent the uncore box from being properly initialized or de-initialized. This mismanagement of resources could lead to system...

CVE-2026-93173

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF and Linux Security Module LSM subsystems. This vulnerability occurs when a sleepable LSM program is incorrectly handled during the freeing of non-sleepable BPF programs. An attacker could potentially trigger a system crash, leading...

CVE-2026-93172

A flaw was found in the Linux kernel's memory management mm/mminit. A missing allocation check for pgdat-percpunodestats can lead to a NULL dereference. This vulnerability could allow a local attacker to cause a system crash, resulting in a Denial of Service DoS...

CVE-2026-93158

A flaw was found in the Linux kernel's crypto: sa2ul module. This vulnerability occurs because the saulprobe function does not properly handle errors when the system fails to create a necessary Direct Memory Access DMA pool for security context buffers. If the pool creation fails, the system...

CVE-2026-93140

A flaw was found in the Linux kernel's Universal Disk Format UDF filesystem. When an I/O error occurs during the writing of the Logical Volume Integrity Descriptor LVID buffer, the system incorrectly clears a flag indicating the buffer's validity. Subsequent operations, such as remounting the...

CVE-2026-93146

A flaw was found in the Linux kernel's time namespace handling. The proctimenssetoffset function does not properly validate the nanosecond field tvnsec when setting time offsets. This oversight allows for invalid nanosecond values to be used in time calculations, which can lead to incorrect syste...