kernel: openvswitch: defer tunnel netdev_put to RCU release

A flaw was found in the Linux kernel's Open vSwitch OVS component. A race condition can occur during the destruction of a network device netdev tunnel, where the ovsnetdevtunneldestroy function may attempt to release a device reference while other parts of the system are still actively using it...

kernel: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction

A flaw was found in the Linux kernel's Transmission Control Protocol TCP networking stack. This vulnerability arises from a stale per-CPU variable that can retain a previously used Initial Sequence Number ISN when certain packets are dropped. A remote attacker could exploit this by sending...

PinTheft-go

pintheft-go Go port of pintheft - RDS zcopy double-free LPE. Member of the Dirty Frag vulnerability class. !IMPORTANT Arch Linux is one of the most exposed distributions for this vulnerability, as it is among the few where the RDS module can typically be loaded by default. How it works tl;dr The...

CVE-2021-42008

CVE-2021-42008 Exploiting A 16-Year-Old Vulnerability In The Linux 6pack Driver Reference https://syst3mfailure.io/sixpack-slab-out-of-bounds...

copy-fail-CVE-2026-31431

Copy Fail - CVE-2026-31431 Copy Fail CVE-2026-31431 PoC and payload examples. Technical Writeup: https://xint.io/blog/copy-fail-linux-distributions Affected Linux Distributions Distro| Kernel Version ---|--- Ubuntu 24.04 LTS| 6.17.0-1007-aws Amazon Linux 2023| 6.18.8-9.213.amzn2023 RHEL 10.1|...

CVE-2022-0847-Dirty-Pipe-

CVE-2022-0847-Dirty-Pipe- this is a repo who is facing a escalation issue in their linux system and a news regarding problem of "Dirty pipeline" Max Kellermann, a developer at CM4all a German web hosting company, found it in early 2022 but not by checking for vulnerability. He was debugging when ...

cve-2026-31431-algif-aead-remediator

CVE-2026-31431 / GHSA-2274-3hgr-wxv6 — algifaead Remediator Severity: High CVSS 7.8 — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Background CVE-2026-31431 is a local privilege escalation vulnerability in the Linux kernel's algifaead module AFALG AEAD crypto socket interface. A low-privileged...

dirtycaw-projet

Dirty COW - Privilege Escalation CVE-2016-5195 This project demonstrates a privilege escalation using the Dirty COW vulnerability in a virtual machine with Ubuntu Server 16.04.1 and kernel 4.4.0-31-generic. 🔧 Environment Victim machine : Ubuntu 16.04.1 vulnerable student without privileges Attack...

kernel: ipv4: validate checksum_start before completing checksum

A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during...

CVE-2021-22555

CVE-2021-22555 Linux Kernel 2.6.19 5.9 - 'Netfilter Local Privilege Escalation'...

DirtyFrag-go

dirtyfrag-go Two bugs. One shell. No disk writes. Go port of dirtyfrag CVE-2026-43284 / CVE-2026-43500. How it works tl;dr The bug class is in the Linux kernel XFRM subsystem. When a file page is spliced into a pipe and then into an ESP-encrypted socket, the kernel decrypts the ESP payload in-pla...

kernel: ipv4: validate checksum_start before completing checksum

A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during...

CVE-2026-31431

🐞 CVE-2026-31431 - Copy Fail A logic flaw in authencesn chained through AFALG and splice into a controlled 4-byte write in the page cache of any readable file on the system. No race condition, no offsets, no compiled payload. The same 732-byte script gains root on every Linux distribution since...

copy-fail-cve-2026-31431

Copy Fail - CVE-2026-31431 This repository provides a Go port of the public Copy Fail PoC and a reproducible build pipeline for multi architecture Linux binaries. Copy Fail CVE-2026-31431 is a Linux kernel logic flaw in authencesn that enables a deterministic 4 byte write into page cache data...

CVE-2026-31431

CopyFail CVE-2026-31431 Overview CopyFail is a proof-of-concept exploit for CVE-2026-31431, targeting a memory corruption vulnerability in the Linux Kernel Crypto API AFALG. The exploit leverages the splice system call to perform unauthorized page-cache patching of the /usr/bin/su binary, enablin...

CVE-2026-31431

CVE-2026-31431 LPE PoC Rust Implementation This project is a Proof of Concept PoC implemented in Rust for a local privilege escalation LPE vulnerability simulating CVE-2026-31431. It demonstrates how to manipulate the Linux kernel page cache by exploiting the Crypto API.cite: 1, 2 !CAUTION This...

CVE-2026-23111

CVE-2026-23111 Auditor Linux Kernel nftables UAF This repository contains an automated audit script in Bash designed to deeply and accurately evaluate the CVE-2026-23111 vulnerability in Linux environments. 🔍 What is the CVE-2026-23111 vulnerability? CVE-2026-23111 is a Use-After-Free UAF...

CVE-2026-64603

A flaw was found in the Linux kernel's intel-hid driver. A race condition can occur in the ACPI Advanced Configuration and Power Interface notify handler when processing tablet-mode events on convertible or detachable devices. If two events are processed concurrently, the input device may be...

CVE-2026-64593

A flaw was found in the btrfs filesystem of the Linux kernel. A local user could trigger a system crash by attempting to perform a trim operation on a storage device that was previously unavailable but has since reconnected and is not writeable. This issue arises from a synchronization problem...

CVE-2026-64591

A flaw was found in the Linux kernel's Intel IOMMU driver. This issue occurs because the driver attempts to disable I/O Page Fault IOPF handling for devices that never had it enabled, specifically when Shared Virtual Addressing SVA is used on hardware that does not support the PCI Page Request...