344209 matches found
copyfail-arm64
Copy Fail ARM64 Research CVE-2026-31431 Analysis and ARM64 reproduction of the Copy Fail Linux kernel privilege escalation vulnerability CVE-2026-31431, originally disclosed by Xint. Blog post: Copy Fail on ARM64: Understanding and Porting CVE-2026-31431 What's Included File| Description ---|---...
CVE-2026-31431
CVE-2026-31431 CVE-2026-31431 detection and testing 0x01 Quick Start Some target environments do not have Python installed, so this privilege escalation logic was rewritten in C. 1. Compile Run the following command on your Linux machine or WSL using -static is recommended to avoid GLIBC version...
cve-2026-31431
CVE-2026-31431 "Copy Fail" - Page Cache Corruption Vulnerability Linux kernel page cache corruption via authencesn AEAD manipulation. ⚠️ IMPORTANT: Exploitation Status Update May 1, 2026 After extensive testing on multiple OpenShift 4.20.16 clusters with RHEL 9.6 kernels: ✅ Page Cache Corruption:...
alg_check
⚠️ Important Disclaimer: Structural Hardening Risks This tool implements Structural Blocking to mitigate CVE-2026-31431 by physically renaming kernel modules and purging them from memory. Before use, please be aware of the following architectural risks: Kernel Update Volatility : Hardening effects...
dirtypipetester
Dirty Pipe Vulnerability Check Dirty Pipe CVE-2022-0847 vulnerability check -Run directly to check the vulnerability status of the system you are testing. -To check the vulnerability status of other kernel versions, run by appending x.xx.xxx at the end...
CVE-2022-0847
CVE-2022-0847 Original link https://dirtypipe.cm4all.com/ Usage gcc exploit.cpp -o exploit ./exploitIt will spawn a root shell Vulnerability description This is CVE-2022-0847, a vulnerability in the Linux kernel since version 5.8 that allows overwriting data in arbitrary read-only files. This lea...
DirtyFrag-for-dummies
Dirty Frag / CVE-2026-43284 — Research Notes Overview This repository contains a cleaned-up technical diagram and supporting notes for the Linux kernel vulnerability commonly referred to as Dirty Frag and tracked for the xfrm-ESP path as CVE-2026-43284. The issue belongs to the broader Dirty Frag...
cve-2026-31431-mitigation
CVE-2026-31431 seccomp Mitigation A lightweight, reversible seccomp-based mitigation for CVE-2026-31431, a local privilege escalation vulnerability in the Linux kernel's algifaead / authencesn crypto subsystem. 中文文档 Vulnerability Overview Type: Local Privilege Escalation LPE Affected Component:...
dirtypipe
reF: https://access.redhat.com/security/vulnerabilities/RHSB-2022-002 Diagnose A vulnerability detection script has been developed to determine if your system is currently affected by this flaw. To verify the authenticity of the script, you can download the detached OpenPGP signature as well...
CVE-2026-98617
A flaw was found in the Linux kernel's Meta Host Network Interface fbnic driver. The driver incorrectly associates receive queues with network processing vectors and fails to verify whether the datapath is active before allocating queue memory. A privileged local user could trigger this flaw duri...
CVE-2026-98616
A flaw was found in the Linux kernel's fbnic driver. This flaw allows a local user to trigger a kernel crash, resulting in a Denial of Service DoS. During power management suspend or failed resume operations, the driver frees interrupt vectors without clearing the active vector counter. When the...
CVE-2026-98615
A flaw was found in the Linux kernel's fbnic network driver. A local user with administrative privileges could trigger a Denial of Service DoS by initiating a reset or teardown of the firmware mailbox. Because the driver fails to properly drain pending write requests from the hardware pipeline...
CVE-2026-98614
A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP subsystem. An attacker could exploit this vulnerability to cause a Denial of Service DoS by triggering an infinite loop during retransmission path selection. When all candidate network paths are in an unconfirmed...
optee-qemu
CVE-2021-44733: Fuzzing and exploitation of a use-after-free in the Linux kernel TEE subsystem Recently a use-after-free vulnerability was discovered in the Linux kernel TEE subsystem, up to and including version 5.15.11, and was assigned CVE-2021-44733 1. At a first glance it did not seem to be...
CVE-2020-8423
CVE-2020-8423 Research based on https://ktln2.org/2020/03/29/exploiting-mips-router/testing-environment hook.c is customized especially open vmlinux version 2.6.31...
copyfail-exploit
Copy Fail · CVE-2026-31431 Local privilege escalation on Linux kernels from 4.11 up to but not including the patched 6.18 releases. The bug lives in the kernel's AFALG socket interface—specifically how authencesn handles scatter-gather lists during in‑place AEAD decryption. The result: an...
cve-2026-31431-checker
CVE-2026-31431 Copy Fail Detection Tool A comprehensive detection and analysis tool for CVE-2026-31431 "Copy Fail" vulnerability in Linux kernels. ⚠️ IMPORTANT DISCLAIMER This tool is for DETECTION ONLY. It does not exploit or modify any system files. Only reads system information and configuratio...
CVE-2026-98612
A flaw was found in the Linux kernel's CATC USB Ethernet driver. The driver fails to properly validate packet length boundaries when processing incoming multi-packet network transfers. An attacker could exploit this flaw by providing crafted packet headers, causing the driver to read beyond the...
CVE-2026-98613
A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. A local user with permissions to load BPF programs can trigger a Denial of Service DoS by creating deeply nested or cyclical object references using local kernel pointers. During object cleanup, synchronous recursive...
copyfail-check
copyfail-check Shell scripts to detect Linux kernel vulnerabilities, check mitigation status, and guide remediation — designed to run locally or across fleets via SSH, Ansible, or pssh. CVE-2026-31431 — Copy Fail Copy Fail is a high-severity local privilege escalation LPE vulnerability in the Lin...