VQ-RefluxCore

VQ-RefluxCore: Kernel Vulnerability Assessment & Research Framework VQ-RefluxCore is an advanced security research framework designed to model, analyze, and demonstrate Local Privilege Escalation LPE mechanics associated with kernel-level race conditions and filesystem structure vulnerabilities...

chocobo

chocobo Chocobo Root CVE-2016-8655 Analysis Notes This is the newest Linux privesc, released 2016-12-06 here http://seclists.org/oss-sec/2016/q4/607. References found at this point: http://www.theregister.co.uk/2016/12/07/androiddirtycowkernelpatch/ https://www.exploit-db.com/exploits/40871/ Goal...

CVE-2016-5195

CVE-2016-5195 DirtyCOW PoC Modified from dirtycow.github.ioc include include include include include include include include void map; int f; struct stat st; char name; void madviseThreadvoid arg char str; str = chararg; int i, c = 0; fori = 0; i 100000000; i++ c += madvisemap, 100, MADVDONTNEED;...

DeepRoot

CVE-2021-3493 Comprehensive Exploit Framework $\colorFF4D2E \textbf\textsfDeepRoot$ OverlayFS Capability Privilege Escalation Framework - Red Team Professional Edition Overview DeepRoot framework is a comprehensive privilege escalation exploit for CVE-2021-3493 OverlayFS Privilege Escalation with...

Linux Kernel Security Vulnerabilities

Versions of the Linux kernel prior to 7.2.9 have a security vulnerability. This vulnerability arises from the BPF verifier failing to reject the transfer of the PTRTOPACKET pointer to procedures that may modify data packets, potentially causing the data packet memory area to become invalid...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.8 contains a security vulnerability. This vulnerability stems from the bpfsock context code, which fails to ensure that the width of the read value is consistent with the assumptions of the verifier when reading the rxqueuemapping field. As a result, the values of runti...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.3 contains a security vulnerability. This vulnerability arises from the possibility that rt6insertexception may be called after fib6info is removed through fib6purgert. As a result, rt6Flushexceptions no longer sets the flags, leading to the successful creation of new...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.4 contains a security vulnerability. This vulnerability arises from the fact that the stackslotobjgetspi function does not reject non-negative offsets. When the offset is 0, the calculated spi index is the same as the valid stack slot at fp-8. This may lead to...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.13 has a security vulnerability. This vulnerability stems from the threaded IRQ handler in the gp2ap020a00f driver, which queues data-work through the irqworkqueue. However, the freeirq function does not refresh the queued irwork, resulting in the work continuing to run...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains a security vulnerability. This vulnerability stems from emmactxmemmap in drivers/net/ethernet/spacemit/k1emac.c, which fails to clear the written TX descriptors when fragment mapping fails. As a result, the DMA engine may access an old address that has been...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.2 contains security vulnerabilities. These vulnerabilities stem from the use of NULL pmuctx in the perfpmuschedtask function, which may lead to undefined behavior due to null pointer dereferencing in the kernel...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.14 contains security vulnerabilities. These vulnerabilities stem from the zpcireportstatus function in the s390/pci framework, which accesses device drivers without acquiring a device lock when pdev is not NULL. This can lead to inconsistent states...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.11 contains security vulnerabilities. One of these vulnerabilities arises from sockmapalloc, which does not reject entries greater than INTMAX. Additionally, sockmapfree uses a signed int to iterate through the sks array, leading to integer overflows and potential...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.13 contains a security vulnerability. This vulnerability arises from the fact that the UDP socket is disconnected from the quadruplet hash table, but the hash count remains retained. As a result, data packets are still processed through quadruplet lookups, which may lea...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.29 has a security vulnerability. This vulnerability stems from the fact that the Data-In branch of iscsitcphdrdissect does not check the data direction. As a result, data provided by the target may be written into the page that the initiator is about to send, causing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.30 contains a security vulnerability. This vulnerability arises from the max3100 serial port driver returning values prematurely when the system is suspended. The polling timer is not closed before releasing the port. When the SPI device unlinks before it recovers, it...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.0 contains security vulnerabilities. These vulnerabilities arise from the fact that the IRQ is not stopped before terminating the work queue, resulting in the possibility of the IRQ still scheduling plat-work into the queue when the remove function removes the queue...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.16 contains security vulnerabilities. These vulnerabilities arise from modifying the bind file that is published via RCU while clearing expired local sources. When reading the path without locking, it is possible to observe torn IPv6 addresses, leading to address...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities stem from a race condition in IPv6’s cached routing processing: when listdelinit is executed concurrently, listempty is incorrectly evaluated as true. This leads to the incorrect invocation of dstholdsafe, and...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.16 contains a security vulnerability. This vulnerability arises from the fact that SORESERVEMEM is not limited to TCP sockets, and no upper limit is set. This may lead to concurrent operations on UDP sockets damaging skforwardalloc and memcg accounting, or causing...