CVE-2026-31431

CVE-2026-31431 - Copy Fail Copy Fail è un bug logico nel sottosistema crypto del kernel Linux CVE-2026-31431. Un'ottimizzazione del 2017 in algifaead.c ha accidentalmente inserito le pagine della cache delle pagine in uno scatterlist scrivibile. L'algoritmo AEAD authescesn scrive 4 byte di scratc...

kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer

A use-after-free vulnerability was found in the Linux kernel's IPv6 FIB rule lookup path. In fib6rulesuppress, when a route is suppressed and released via ip6rtputflags, the res-rt6 pointer is not cleared. If no later rule supplies a replacement route, fib6rulelookup returns the stale freed rt6in...

CVE-2026-80558

A flaw was found in libceph within the Linux kernel. A remote attacker, by sending a specially crafted or corrupted OSD map osdmap from a Ceph monitor or OSD, could cause the system to attempt to access memory outside of allocated bounds. This out-of-bounds access occurs because invalid OSD indic...

CVE-2026-80543

A flaw was found in the Linux kernel's s390/zcrypt component. When copying user-space messages into a kernel buffer, the system fails to properly pad the message to a 4-byte length. This oversight can lead to up to three bytes of uninitialized kernel memory being exposed to the crypto card...

CVE-2026-74736

A flaw was found in the Linux kernel's clsbpf component. A device-bound program could be incorrectly attached to a different network device than it was intended for. This misconfiguration could allow an attacker to trigger a system panic, leading to a denial of service, if the original device is...

copy-fail-CVE-2026-31431

CVE-2026-31431 — Copy Fail 732 byte. Qualsiasi distro. Root. Un difetto logico lineare nel template crittografico authencesn del kernel Linux consente a un utente locale non privilegiato di eseguire una scrittura precisa e controllata di 4 byte nella page cache di qualsiasi file leggibile — inclu...

CVE-2026-80539

A flaw was found in the Linux kernel's drm/amdgpu graphics driver. When processing graphics commands, the driver fails to properly handle multiple "FENCE chunks" in a single submission. This oversight leads to a memory leak, where system resources are not released as expected. A local attacker...

CVE-2026-74750

A flaw was found in the Linux kernel's ovpn module. This vulnerability arises from an incorrect handling of cryptographic resource freeing, where a function that requires the ability to pause sleep is executed in a context that does not allow it. This improper resource management could lead to...

RootKit

Questo è un rootkit che è stato testato su ubuntu-16.04.6-desktop-amd64 Linux 4.4, ma dovrebbe essere facile da portare su diverse versioni del kernel. Link al video -- https://drive.google.com/file/d/1yDktAg9vIPBH3OPEBYset9OdQb0LMevA/view?usp=sharing Installazione Clona il repository...

CVE-2022-25636

CVE-2022-25636 Escalation dei privilegi del kernel netfilter toc Panoramica della vulnerabilità ID vulnerabilità: CVE-2022-25636 Prodotto vulnerabile: linux kernel - netfilter Versioni interessate: linux kernel 5.4 Impatto: scrittura heap out-of-bounds nel modulo kernel netfilter, può portare a...

CVE-2025-32463

CVE-2025-32463 — Sudo 1.9.14 → 1.9.17 Escalatione Locale dei Privilegi tramite chroot Script di exploit che dimostra un'escalation locale dei privilegi che interessa alcune versioni di Sudo 1.9.x CVE-2025-32463. Riferimento exploit: https://www.exploit-db.com/exploits/52352 Testato su: Ubuntu...

Security Bulletin: IBM® Db2® is vulnerable to buffer overflow in setgid helper db2flacc. (CVE-2026-10535)

Summary IBM® Db2® is vulnerable to buffer overflow in setgid helper db2flacc. Vulnerability Details CVEID:CVE-2026-10535 DESCRIPTION: IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc. CWE:CWE-121: Stack-based Buffer Overflow CVSS...

CVE-2024-36886

Pesquisa de Vulnerabilidades N-Day Visão Geral Este projeto foca em vulnerabilidades N-Day no kernel Linux, com ênfase na compreensão do seu ciclo de vida, análise do seu impacto e exploração de estratégias de mitigação. Vulnerabilidades N-Day são falhas divulgadas publicamente que permanecem sem...

cve-2026-31431-ftrace

Mitigazione di cve-2026-31431 tramite ftrace Le soluzioni ebpf disponibili per mitigare cve-2026-31431 richiedono lsm=bpf al momento dell'avvio, che di solito non è impostato per impostazione predefinita. Per OracleLinux questo è stato abilitato per impostazione predefinita in UEKr7u3 e in UEKr8u...

CVE-2026-31431

CVE-2026-31431: PoC Copy Fail + Validazione ARM64 Copy Fail è un'escalation dei privilegi locale su Linux pubblicata da Theori/Xint come CVE-2026-31431. La pagina del progetto descrive un bug logico in authescesn che può essere raggiunto tramite AFALG e splice, producendo una piccola scrittura...

routersploit

RouterSploit - Exploitation Framework for Embedded Devices Community Join community on Embedded Exploitation Discord. Description The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices. It consists of various modules that aid penetration testing...

Copy-Fail-Exploit-CVE-2026-31431

Copy Fail CVE-2026-31431 – Guida all'Utilizzo dell'Exploit ⚠️ Disclaimer Questo contenuto è destinato esclusivamente a scopi educativi e di test di sicurezza autorizzati. NON eseguirlo su sistemi senza autorizzazione esplicita. 📌 Panoramica Copy Fail CVE-2026-31431 è una vulnerabilità di escalatio...

airgeddon

airgeddon This is a multi-use bash script for Linux systems to audit wireless networks. All the needed info about how to "install | use | enjoy" airgeddon is present at GitHub's Wiki. I. Content & Features Home Features Screenshots Wallpapers II. Requirements Requirements Compatibility Cards and...

CVE-2014-6271

Shellshock-Ausnutzung CVE-2014-6271 Shellshock ist im Wesentlichen eine Remote-Command-Execution-Schwachstelle in BASH. Dieses Skript nutzt die Schwachstelle in der Web-Umgebung auf Apache oder ähnlichen Servern mit aktiviertem modcgi. Die Schwachstelle liegt in der Manipulation von...

CVE-2026-80567

A flaw was found in the Linux kernel. The synaptics-rmi4 input driver's rmif54bufferqueue function failed to propagate errors from its worker thread. This oversight could result in the delivery of stale or uninitialized memory to user applications, potentially leading to information disclosure or...