CVE-2026-98607

A flaw was found in the Linux kernel's VirtIO GPU driver. This vulnerability allows a local user to cause a denial of service DoS through memory and resource exhaustion. When errors occur during the creation of graphical resources, the driver fails to properly release object references, preventin...

CVE-2026-98606

A flaw was found in the Linux kernel's VirtIO GPU driver. During error handling when creating video memory resources, the driver deallocates memory without properly releasing the object from kernel memory tracking structures. A local user can exploit this vulnerability to trigger a use-after-free...

CVE-2026-98500

A flaw was found in the Linux kernel's OneXPlayer Human Interface Device HID driver. A local user could cause a Denial of Service DoS through a race condition during device removal. Because delayed background tasks are canceled without waiting for active callbacks to finish, in-progress tasks...

CVE-2026-98494

A flaw was found in the Linux kernel's atl1 network driver. During a PCIe link or hardware reset, the network adapter can return an out-of-range status value that the driver fails to validate properly. This condition can trap the driver in an infinite loop, resulting in a kernel soft lockup and...

CVE-2026-98602

A flaw was found in the Linux kernel's Bluetooth Network Encapsulation Protocol BNEP implementation. Insufficient length validation when processing network frames allows out-of-bounds memory read operations. An attacker can exploit this vulnerability by transmitting malformed or truncated network...

CVE-2026-98497

A flaw was found in the Linux kernel's mlx5 network driver. When configuring IPv6 IPsec Internet Protocol Security rules with differing source and destination prefix lengths, the driver inadvertently swaps the source and destination address masks installed into hardware flow tables. This incorrec...

CVE-2026-98493

A flaw was found in the Linux kernel. This vulnerability allows an attacker capable of specifying system boot or network parameters to cause a Denial of Service DoS or memory corruption. During Dynamic Host Configuration Protocol DHCP autoconfiguration, the kernel appends options into a fixed-siz...

CVE-2026-98605

A flaw was found in the Linux kernel's Samsung DSIM display bridge driver. This vulnerability may allow a Denial of Service DoS due to improper management of General Purpose Input/Output GPIO hardware pins during display connection events. A local attacker triggering display attach and detach...

CVE-2026-98601

A flaw was found in the Linux kernel's Intel Bluetooth PCIe driver. The driver fails to validate index values provided by the hardware device through Direct Memory Access DMA. A malicious or compromised PCIe device could supply out-of-range indices to trigger an out-of-bounds memory dereference o...

CVE-2026-98499

A flaw was found in the Linux kernel's Wacom Human Interface Device HID driver. When processing a device report descriptor with mismatched usage and count configurations, the driver can calculate an invalid memory offset and perform an out-of-bounds read beyond the allocated report buffer. A loca...

CVE-2026-98496

A flaw was found in the Linux kernel's Airoha Neural Processing Unit NPU driver. During device unbinding or driver removal, an interrupt timing issue allows watchdog tasks to be scheduled after cleanup procedures have completed. A local user with administrative privileges could trigger this flaw ...

CVE-2026-98495

A flaw was found in the Linux kernel. A local user can trigger a Denial of Service DoS or potentially expose sensitive memory due to an out-of-bounds read flaw in the Address Resolution Protocol ARP networking interface. By supplying a network device request containing a device name that lacks...

CVE-2026-98491

A flaw was found in the Linux kernel's Open vSwitch subsystem. When cloned network packet buffers share an unconfirmed connection tracking entry, committing the entry with conflicting extensions can trigger a use-after-free memory issue during cleanup. An attacker could exploit this vulnerability...

CVE-2022-0995

CVE-2022-0995 Exploit for CVE-2022-0995. Uses a heap out-of-bounds write in the watchqueue component of the Linux kernel. A similar technique is described in this research https://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html. The exploit has been tested on Ubuntu 21.1...

HugeDirtyCowPOC

"Huge Dirty Cow" POC A POC for the Huge Dirty Cow vulnerability CVE-2017-1000405. Full details can be found here. Before running, make sure to set transparent huge pages to "always": echo always | sudo tee /sys/kernel/mm/transparenthugepage/enabled...

dirtypipe

reF: https://access.redhat.com/security/vulnerabilities/RHSB-2022-002 Diagnose A vulnerability detection script has been developed to determine if your system is currently affected by this flaw. To verify the authenticity of the script, you can download the detached OpenPGP signature as well...

CVE-2024-44946

Usage of the Enhanced PoC: Compile the PoC Code: bash Copy code gcc -o kcmuafpocadvanced kcmuafpocadvanced.c -pthread Run the PoC: bash Copy code sudo ./kcmuafpocadvanced The advanced PoC should simulate a highly complex race condition, potentially triggering the UAF vulnerability in the Linux...

Dirty-Frag-CVE-2026-43284

DirtyFrag CVE-2026-43284 - Lab Detection Exercise Report Classification: Internal Lab - CyberLAB Date: 24 May 2026 Platform: Elastic Stack v9.4.1 Status: Detection Confirmed Table of Contents A - Executive Summary B - Full Findings Report 1. Objective and Threat Model 2. Vulnerability Background...

CVE-2018-17182

CVE-2018-17182 Linux kernel VMA-UAF privilege escalation vulnerability CVE-2018-17182 About Google Project Zero cybersecurity researchers have released details and a proof-of-concept PoC exploit for a high-severity vulnerability in the Linux kernel that has been present since kernel versions 3.16...

CVE-2026-31431-python-copyfail-POC

CVE-2026-31431: Copy Fail - Linux Kernel Privilege Escalation Copy Fail CVE-2026-31431 is a critical logic bug in the Linux kernel's cryptographic subsystem that allows unprivileged users to achieve privilege escalation to root. The vulnerability affects Linux kernels 6.0.0 through 6.18.x across...