CVE-2026-68121

⚡ CVE-2026-68121 - PPPoEject Linux 커널 PPPoE Use-After-Free → 로컬 권한 상승 PPPoE 전송 경로 에서 발생하는 Linux 커널 메모리 손상 취약점으로, 디바이스 헤더 콜백이 skb head를 재할당한 후 skbuff 헤더에 대한 stale 포인터로 인해 발생합니다. ⚠️ 면책 조항 이 저장소는 승인된 보안 연구, 커널 취약점 분석, CTF 환경, 그리고 방어적 테스트 목적으로만 사용하도록 의도되었습니다. 명시적인 승인 없이 시스템에 대해 개념 증명 코드를 실행하지 마십시오. 📌...

Exploit for CVE-2026-68121

⚡ CVE-2026-68121 - PPPoEject Linux Kernel PPPoE Use-A...

CVE-2024-50035

In the Linux kernel, the following vulnerability has been resolved: ppp: fix pppasyncencode illegal access syzbot reported an issue in pppasyncencode 1 In this case, pppoesendmsg is called with a zero size. Then pppasyncencode is called with an empty skb. BUG: KMSAN: uninit-value in pppasyncencod...

CVE-2024-50035

In the Linux kernel, the following vulnerability has been resolved: ppp: fix pppasyncencode illegal access syzbot reported an issue in pppasyncencode 1 In this case, pppoesendmsg is called with a zero size. Then pppasyncencode is called with an empty skb. BUG: KMSAN: uninit-value in pppasyncencod...

CVE-2024-50035 ppp: fix ppp_async_encode() illegal access

In the Linux kernel, the following vulnerability has been resolved: ppp: fix pppasyncencode illegal access syzbot reported an issue in pppasyncencode 1 In this case, pppoesendmsg is called with a zero size. Then pppasyncencode is called with an empty skb. BUG: KMSAN: uninit-value in pppasyncencod...

CVE-2024-50035

CVE-2024-50035 affects the Linux kernel PPP path, specifically a fault in ppp_async_encode() that can be triggered by a zero-size pppoe_sendmsg() followed by an empty skb, leading to a possible uninitialized access (KMSAN) in drivers/net/ppp/ppp_async.c. The issue was fixed in upstream Linux comm...