344162 matches found
EUVD-2026-103675
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Disable device buffer exporting Device buffers are never intended to be exported. Disable exporting support explicitly...
CVE-2026-98436
The Linux kernel contains a vulnerability in the accel/amdxdna component where device buffers were being exported despite not being intended for such use. The fix involves explicitly disabling exporting support for these buffers. No specific exploit details or in-the-wild exploitation information...
CVE-2026-98436 accel/amdxdna: Disable device buffer exporting
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Disable device buffer exporting Device buffers are never intended to be exported. Disable exporting support explicitly...
CVE-2026-98435 EDAC/altera: Use parent device for devres in altr_portb_setup()
In the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Use parent device for devres in altrportbsetup Anchor the devres group and the devm-managed IRQ requests in altrportbsetup to the actual parent device device-edac-dev instead of the embedded struct device inside the...
CVE-2026-98435 EDAC/altera: Use parent device for devres in altr_portb_setup()
In the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Use parent device for devres in altrportbsetup Anchor the devres group and the devm-managed IRQ requests in altrportbsetup to the actual parent device device-edac-dev instead of the embedded struct device inside the...
EUVD-2026-103674
In the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Use parent device for devres in altrportbsetup Anchor the devres group and the devm-managed IRQ requests in altrportbsetup to the actual parent device device-edac-dev instead of the embedded struct device inside the...
CVE-2026-98435
The Linux kernel contains a vulnerability in the EDAC/altera driver within the altr_portb_setup() function. The issue stems from anchoring the devres group and devm-managed IRQ requests to an embedded struct device inside a copied per-port altr_edac_device_dev instead of the actual parent device ...
CVE-2026-98434 sysctl: Check range in proc_dointvec_ms_jiffies_minmax
In the Linux kernel, the following vulnerability has been resolved: sysctl: Check range in procdointvecmsjiffiesminmax Add the range check to doprocintconvmsjiffiesminmax that commit d174174c6776 "sysctl: replace SYSCTLINTCONVCUSTOM macro with functions" incorrectly removed...
CVE-2026-98434 sysctl: Check range in proc_dointvec_ms_jiffies_minmax
In the Linux kernel, the following vulnerability has been resolved: sysctl: Check range in procdointvecmsjiffiesminmax Add the range check to doprocintconvmsjiffiesminmax that commit d174174c6776 "sysctl: replace SYSCTLINTCONVCUSTOM macro with functions" incorrectly removed...
EUVD-2026-103672
In the Linux kernel, the following vulnerability has been resolved: sysctl: Check range in procdointvecmsjiffiesminmax Add the range check to doprocintconvmsjiffiesminmax that commit d174174c6776 "sysctl: replace SYSCTLINTCONVCUSTOM macro with functions" incorrectly removed...
CVE-2026-98434
The Linux kernel contains a vulnerability related to sysctl where a range check in the do_proc_int_conv_ms_jiffies_minmax function was incorrectly removed in a previous commit (d174174c6776). The issue involves the transition of the SYSCTL_INT_CONV_CUSTOM macro to functions. This vulnerability ha...
EUVD-2026-103671
In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: fix secure device page leak on uvpagein failure In kvmppcsvmpagein, if uvpagein fails after kvmppcuvmemgetpage has succeeded, the secure device page is never released. kvmppcuvmemgetpage sets a bit in...
Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284
Remote git clone https://github.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284.git && cd Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284 && gcc -O0 -Wall -o exp exp.c -lutil && ./exp git clone https://github.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284.git && cd...
ovswrap
OVSwrap — Linux kernel Open vSwitch datapath overflow tracking site Source for the OVSwrap patch-status tracker: a single-page site recording which distributions have shipped a fix for the Open vSwitch datapath overflow in the Linux kernel. Where the facts live Everything about the bug — CVE IDs,...
CVE-2017-11176
CVE-2017-11176 Proof of concept for CVE-2017-11176 for code execution. Vulnerability The mqnotify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a Netlink socket, it allows attackers to cause a denial...
Dirty-Pipe-Oneshot
Dirty-Pipe-Oneshot Compiled version of CVE-2022-0847 aka Dirty Pipe. Just one shot to root them all :D just comple the cve-2022-0847.c file gcc cve-2022-0847.c -o getroot then execute it on the victim & get root :D ./getroot /etc/passwd 1 ootz: Happy Rooting 🎭...
CVE-2017-5123
CVE-2017-5123 Linux privilege escalation exploiting waitid syscall. The exploit is brought to you by @XeR0x2A and @chaignc from HexpressoTeam for educational purposes only. The bug was introduced the 2017-05-21 and fixed 2017-10-09, 4.14.0-rc4+ is known vulnerable. asciicast If you have a...
Exploit for CVE-2026-99999
CVE-2026-99999 PwnEscape PoC Linux kernel IPv4 csumstart...
linux-4.19.72_CVE-2022-45934
Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...
CVE-2017-16995
The latest version of Ubuntu Ubuntu 16.04 has a high-risk local privilege escalation vulnerability, numbered CVE-2017-16995. This vulnerability exists in the Linux kernel system that calls eBPF bpf2. When a user provides a malicious BPF program, the eBPF verifier module generates a calculation...