EUVD-2026-66449

In the Linux kernel, the following vulnerability has been resolved: xfs: fix ilock leak on error in xfsdqgetnextid xfsdqgetnextid takes the quota inode ILOCK before calling xfsireadextents. If xfsireadextents fails, the function returns immediately without releasing the lock, leaking the quota...

CVE-2026-53359

CVE-2026-53359 Un bug vecchio di 16 anni nel kernel Linux consente a una VM noleggiata di evadere e attaccare l'host su cui gira. Januscape è una vulnerabilità use-after-free nel codice KVM che era rimasta lì dal 2010. Usando lo script exploit-check.sh, possiamo ottenere maggiori informazioni sul...

source-packages

source-packages Questo repository contiene il codice sorgente di programmi vulnerabili per LinuxFlaw...

linux-4.19.72_CVE-2021-3347

HiSax is a Linux hardware-level driver for passive ISDN cards with Siemens chipset ISACS 2085/2086/2186, HSCX SAB 82525. It is based on the Teles driver from Jan den Ouden. It is meant to be used with isdn4linux, an ISDN link-level module for Linux written by Fritz Elfert. root@kitploit: This...

linux-4.19.72_CVE-2020-25705

Kernel Linux Ci sono diverse guide per sviluppatori e utenti del kernel. Queste guide possono essere rese in diversi formati, come HTML e PDF. Si prega di leggere prima il file Documentation/admin-guide/README.rst. Per costruire la documentazione, usa make htmldocs o make pdfdocs. La documentazio...

specterops-k8s-red-teamers-libvirt-patch

Patch Libvirt per Kubernetes for Red Teamers di SpecterOps Una patch non ufficiale per libvirt e QEMU/KVM per il corso gratuito Kubernetes for Red Teamers di SpecterOps. Gli indirizzi di rete originali, la topologia Kubernetes, i callback Mythic e il comportamento del laboratorio rimangono...

DIRTY-FRAG-Detection-with-Wazuh-4.14.4

DIRTY FRAG Detection con Wazuh 4.14.4 - CVE-2026-43284 / CVE-2026-43500 Detection engineering per la Linux Kernel LPE Dirty Frag - Ubuntu / RHEL / Debian / Amazon Linux Cos'è Dirty Frag? CVE-2026-43284 / CVE-2026-43500 è una vulnerabilità di escalation locale dei privilegi LPE nel kernel Linux ch...

CVE-2024-47076

CUPS Common UNIX Printing System, il sistema di stampa dei sistemi Linux e Unix, è un servizio che riguarda la gestione della stampa su questi sistemi e la distribuzione dei compiti tra i dispositivi. Su questo servizio è stata divulgata una vulnerabilità di sicurezza denominata CVE-2024-47076...

CVE-2026-80588

A flaw was found in the Linux kernel's Multipath TCP mptcp implementation. Errors occurring during the receive path, before data is queued, may prevent the system from reclaiming forward-allocated memory. This can lead to an unbounded increase in memory usage under certain network conditions, suc...

CVE-2026-80552

A flaw was found in the s390/vfioccw component of the Linux kernel. This vulnerability occurs because the system fails to properly validate index ranges for read/write operations on existing regions. This oversight could allow an attacker to perform out-of-bounds memory access, potentially leadin...

CVE-2026-80560

A flaw was found in the Linux kernel, specifically within the openrisc architecture's signal handling. An unprivileged local attacker can exploit a vulnerability in the restoresigcontext function by crafting a malicious signal frame. This allows the attacker to disable the Data Memory Management...

CVE-2022-0847-dirty-pipe-checker

CVE-2022-0847-dirty-pipe-checker Script Bash per verificare CVE-2022-0847 Dirty Pipe Sommario Questa è la storia di CVE-2022-0847, una vulnerabilità nel kernel Linux dalla versione 5.8 che consente di sovrascrivere dati in file arbitrari di sola lettura. Ciò porta a un'escalation dei privilegi...

CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-DirtyPipe-Exploits Questo repository offre una raccolta completa di exploit e documentazione, progettata specificamente per penetration tester e professionisti del red team. Costituisce una risorsa preziosa per coloro che mirano a sfruttare efficacemente la vulnerabilità Linux Dirty...

CVE-2026-74745

A flaw was found in the Linux kernel's bnxt Ethernet driver. This vulnerability could allow a local attacker to cause a system deadlock. The deadlock occurs when the driver attempts to unregister an IRQ affinity notifier while holding a lock that is also required by the notifier's callback, leadi...

CVE-2026-80549

A flaw was found in the Linux kernel's s390/vfioccw component. When a device is lost, the fsmnotoper routine performs cleanup while potentially holding other locks, such as the cio subchannel lock. This improper handling of resource cleanup in an asynchronous context could lead to a deadlock,...

CVE-2026-80561

A flaw was found in the Linux kernel's libceph component. A malicious or compromised Object Storage Device OSD can exploit multiple unsafe decode operations within the decodelocker function. This can lead to slab-out-of-bounds reads, potentially allowing an attacker to disclose sensitive...

CVE-2026-80548

A flaw was found in the Linux kernel's s390/vfioccw component. The iomutex was not sufficiently expanded to serialize I/O operations, which could lead to race conditions. These race conditions could result in unexpected system behavior or instability...

CVE-2024-3094

CVE-2024-3094 CVE-2024-3094 ha esposto una backdoor nella libreria di compressione XZ, consentendo l'accesso SSH remoto eludendo l'autenticazione. Si tratta di un grave attacco alla supply chain che colpisce i sistemi Linux, evidenziando i rischi nei componenti open source fidati. La backdoor XZ:...

CVE-2022-0847-Docker

Dirty Pipe CVE-2022-0847: Dimostrazione Pratica di un Exploit in Docker Questo repository fornisce un ambiente Docker interattivo e autonomo per dimostrare e analizzare in sicurezza la vulnerabilità di escalation dei privilegi "Dirty Pipe". È progettato come strumento educativo per i professionis...

CVE-2026-80579

A flaw was found in the Linux kernel's fbdev component. A local user could exploit a use-after-free vulnerability by manipulating video modes. When a mode is deleted, the fbinfo-mode pointer might not be cleared, leading to a stale pointer dereference during subsequent system file system sysfs...