CVE-2026-98937

A flaw was found in the Linux kernel's Performance Events perf subsystem. The kernel failed to enforce proper privilege checks when capturing kernel callchains call stack traces. A local unprivileged user could exploit this vulnerability to bypass profiling restrictions and collect kernel call...

CVE-2026-98950

A flaw was found in the Linux kernel. A remote attacker could trigger a Denial of Service DoS or improper packet routing due to an integer truncation vulnerability within the Berkeley Packet Filter BPF flow dissector. When handling packets with header lengths exceeding 16-bit limits 65,535 bytes,...

CVE-2026-98953

A flaw was found in the Linux kernel's devlink subsystem. An improper reference count management issue occurs when scheduling notification work for nested devlink instances that are already pending. A local user could exploit this flaw by repeatedly registering and unregistering nested devlink...

CVE-2026-98984

A flaw was found in the Linux kernel's Virtual File System VFS directory cache component. A local user could exploit a race condition between moving a mount and concurrently removing a directory, causing a mountpoint to attach to a directory entry being deleted. Because the kernel cannot detach...

CVE-2026-98951

A flaw was found in the Linux kernel's RISC-V architecture. When handling process tracing ptrace register set requests with shorter-than-expected data lengths, the kernel fails to initialize temporary stack buffers before copying user input. A local attacker with process tracing privileges can...

EnvVisualizer

EnvVisualizer . . . \ / \ \ / /|| | | || | / \ / /\ Y / | |/ / | \ \ | | | \ // \ \ | \ | \ / \ / | |\ | | // | || |/ /\ /| | / / /| // / |/ / /// \ | / / / / / / Parse, categorize, and visualize/proc/self/environ on compromised Linux machines. Turn a wall of fused environment variable...

Cybersecurity-Projects

Cybersecurity Projects 🐉 70 Cybersecurity Projects, Certification Roadmaps & Resources View Complete Projects: Currently building: DDoS Mitigation Tool Quick Navigation Projects Hands-on cybersecurity projects with full source code, organized in four tiers — Foundations pre-beginner, first-time...

apachrot

Apache Linux CVE-2021-41773/2021-42013 Mass Vulnerability Checker Automatic Mass Tool for checking vulnerability in Apache Linux 2.4.49/50 Using GNU Parallel. You must have parallel for running this tool Install Parallel Linux : command apt-get install parallel -y Windows : You can install WSL...

linux-smart-enumeration

First, a couple of useful oneliners ; wget "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -O lse.sh;chmod 700 lse.sh curl "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -Lo lse.sh;chmod 700 lse.sh Note that...

vuln-list-backup

vuln-list Collect vulnerability information and save it in parsable format automatically Source Directory| OS| Source| URL ---|---|---|--- alma/| AlmaLinux| AlmaLinux Errata| https://errata.almalinux.org/8/errata.json alpine/| Alpine Linux| Alpine secdb| https://secdb.alpinelinux.org/ amazon/1|...

Furtex

Furtex Post-exploitation and evasion research toolkit for Linux, built around iouring and eBPF. No liburing, no frameworks, raw syscalls throughout. More tools soon. PRs are welcome. 🇧🇷 Join in Rootkit Researchers https://discord.gg/66N5ZQppU7 For authorized research and red team engagements only...

CVE-2022-0847-dirty-pipe-checker

This repository does not have a README...

CVE-2026-99029

A flaw was found in the Linux kernel's Sparx5 network driver. When removing offloaded matchall traffic control filters, the driver unlinks filter entries without freeing the allocated memory. A local user with network administration privileges can exploit this flaw by repeatedly adding and deleti...

CVE-2026-98969

A flaw was found in the Linux kernel's packet scheduling subsystem. A local attacker with network administration privileges can trigger this flaw by submitting a text-matching filter configuration with a non-null-terminated algorithm name. When attempting to automatically load the corresponding...

CVE-2026-98956

A flaw was found in the Linux kernel's ADAU1372 audio codec driver. The driver improperly utilizes non-sleepable operations to toggle power-down General Purpose Input/Output GPIO pins that can sleep, such as those connected through external bus controllers. A local user triggering audio power-sta...

CVE-2026-99026

A flaw was found in the Linux kernel's team network driver. When a team interface is configured in broadcast mode and lacks transmittable ports, the driver fails to properly free packet buffers during transmission. A local user can exploit this vulnerability by sending network traffic through the...

CVE-2026-99023

A flaw was found in the Linux kernel's PCIe M.2 power sequencing driver. The driver fails to release memory allocated for regulator consumer arrays during error handling and device removal. A local attacker could exploit this issue by triggering repeated device probe failures or removal operation...

CVE-2026-99030

A flaw was found in the Linux kernel. An information disclosure vulnerability exists where the network subsystem fails to properly clear packet buffers when handling unreadable fragments. When copying packet data, the kernel can leave stale memory in buffers that are subsequently transmitted over...

CVE-2026-98962

A flaw was found in the Linux kernel's Btrfs file system. When an encoded read operation initiated through iouring fails, the kernel fails to release the allocated memory buffer. A local user could exploit this flaw by repeatedly submitting failing read requests, causing a memory leak that can le...

CVE-2026-98970

A flaw was found in the Linux kernel's VideoCore IV vc4 graphics driver. When the driver is unbound during device teardown, cached buffer objects are purged but the associated size list is not released. A local user capable of triggering repeated unbind operations could exploit this memory leak t...