Lucene search
+L

776 matches found

GithubExploit
GithubExploit
added 2026/05/08 7:18 p.m.185 views

Exploit for Write-what-where Condition in Linux Linux_Kernel

Dirty Frag Technical Analysis CVE-2026-43284 xfrm-ESP / C...

7.8CVSS6.1AI score0.93235EPSS
SaveExploits34
Microsoft Secure
Microsoft Secure
added 2026/05/08 5:12 p.m.24 views

Active attack: Dirty Frag Linux vulnerability expands post-compromise risk

In this article 1. Why Dirty Frag matters 2. Technical overview 3. Exploitation scenarios 4. Mitigation guidance 5. Post-mitigation integrity verification 6. References A newly disclosed Linux local privilege escalation vulnerability known as “Dirty Frag” enables escalation from an unprivileged...

8.8CVSS6.5AI score0.93235EPSS
SaveExploits46
Microsoft Secure
Microsoft Secure
added 2026/05/08 5:12 p.m.43 views

Active attack: Dirty Frag Linux vulnerability expands post-compromise risk

In this article 1. Why Dirty Frag matters 2. Technical overview 3. Exploitation scenarios 4. Mitigation guidance 5. Post-mitigation integrity verification 6. References A newly disclosed Linux local privilege escalation vulnerability known as “Dirty Frag” enables escalation from an unprivileged...

8.8CVSS6.5AI score0.93235EPSS
SaveExploits46
EUVD
EUVD
added 2026/05/08 3:31 p.m.13 views

EUVD-2026-28769

In the Linux kernel, the following vulnerability has been resolved: rxrpc, afs: Fix missing error pointer check after rxrpckernellookuppeer rxrpckernellookuppeer can also return error pointers in addition to NULL, so just checking for NULL is not sufficient. Fix this by: 1 Changing...

5.8AI score0.00112EPSS
SaveExploits0References4
NVD
NVD
added 2026/05/08 3:16 p.m.21 views

CVE-2026-43463

In the Linux kernel, the following vulnerability has been resolved: rxrpc, afs: Fix missing error pointer check after rxrpckernellookuppeer rxrpckernellookuppeer can also return error pointers in addition to NULL, so just checking for NULL is not sufficient. Fix this by: 1 Changing...

5.5CVSS0.00112EPSS
SaveExploits0References3
OSV
OSV
added 2026/05/08 3:16 p.m.11 views

UBUNTU-CVE-2026-43463

In the Linux kernel, the following vulnerability has been resolved: rxrpc, afs: Fix missing error pointer check after rxrpckernellookuppeer rxrpckernellookuppeer can also return error pointers in addition to NULL, so just checking for NULL is not sufficient. Fix this by: 1 Changing...

5.5CVSS5.8AI score0.00112EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2026/05/08 3:16 p.m.23 views

CVE-2026-43463

In the Linux kernel, the following vulnerability has been resolved: rxrpc, afs: Fix missing error pointer check after rxrpckernellookuppeer rxrpckernellookuppeer can also return error pointers in addition to NULL, so just checking for NULL is not sufficient. Fix this by: 1 Changing...

5.5CVSS5.8AI score0.00112EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/08 2:22 p.m.10 views

CVE-2026-43463

In the Linux kernel, the following vulnerability has been resolved: rxrpc, afs: Fix missing error pointer check after rxrpckernellookuppeer rxrpckernellookuppeer can also return error pointers in addition to NULL, so just checking for NULL is not sufficient. Fix this by: 1 Changing...

5.5CVSS5.8AI score0.00112EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2026/05/08 2:22 p.m.30 views

CVE-2026-43463

Summary: Multiple sources confirm a Linux kernel vulnerability in rxrpc and afs where rxrpc_kernel_lookup_peer() could return error pointers in addition to NULL, risking instability. The fix changes rxrpc_kernel_lookup_peer() to return -ENOMEM on allocation failure (instead of NULL) and updates c...

5.5CVSS5.8AI score0.00112EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/05/08 2:22 p.m.11 views

CVE-2026-43463 rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer()

In the Linux kernel, the following vulnerability has been resolved: rxrpc, afs: Fix missing error pointer check after rxrpckernellookuppeer rxrpckernellookuppeer can also return error pointers in addition to NULL, so just checking for NULL is not sufficient. Fix this by: 1 Changing...

5.8AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/05/08 2:22 p.m.44 views

CVE-2026-43463 rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer()

In the Linux kernel, the following vulnerability has been resolved: rxrpc, afs: Fix missing error pointer check after rxrpckernellookuppeer rxrpckernellookuppeer can also return error pointers in addition to NULL, so just checking for NULL is not sufficient. Fix this by: 1 Changing...

0.00112EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2026/05/08 6:35 a.m.136 views

dirtyfrag-check

dirtyfrag-check A safe, read-only Python script to detect whe...

5.9AI score
SaveExploits0
The Hacker News
The Hacker News
added 2026/05/08 5:12 a.m.39 views

Linux Kernel Dirty Frag LPE Exploit Enables Root Access Across Major Distributions

Details have emerged about a new, unpatched local privilege escalation LPE vulnerability impacting the Linux kernel. Dubbed Dirty Frag , it has been described as a successor to Copy Fail CVE-2026-31431, CVSS score: 7.8, a recently disclosed LPE flaw impacting the Linux kernel that has since come...

8.8CVSS7.8AI score0.99907EPSS
SaveExploits268
Positive Technologies
Positive Technologies
added 2026/05/08 12:00 a.m.18 views

PT-2026-39124

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rxrpc and afs components where the rxrpc kernel lookup peer function can return error pointers in addition to NULL. The system failed to properly check for these...

5.5CVSS5.8AI score0.00112EPSS
SaveExploits0References15
Tenable Nessus
Tenable Nessus
added 2026/05/08 12:00 a.m.21 views

Linux Distros Unpatched Vulnerability : CVE-2026-43463

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rxrpc, afs: Fix missing error pointer check after rxrpckernellookuppeer rxrpckernellookuppeer can also return error pointers in addition to NULL, so just checki...

5.5CVSS5.9AI score0.00112EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/08 12:00 a.m.14 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the rxrpckernellookuppeer function in the rxrpc AFS component. This function may return an...

5.5CVSS5.8AI score0.00112EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/05/07 6:18 p.m.175 views

dirtyfrag

Dirty Frag: Universal Linux LPE Abstract !tuxasse...

7.8CVSS6.1AI score0.93235EPSS
SaveExploits34
Tenable Nessus
Tenable Nessus
added 2026/05/02 12:00 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2026-31696

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rxrpc: Fix missing validation of ticket length in non-XDR key preparsing In rxrpcpreparse, there are two paths for parsing key payloads: the XDR path for large...

7.8CVSS7.4AI score0.00129EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/05/01 7:33 p.m.11 views

CVE-2026-31696

A flaw was found in the Linux kernel's rxrpc component. An unprivileged user can exploit this by providing an excessively large ticket length during key preparsing. This improper validation leads to an oversized token calculation when the key is subsequently read, triggering a system warning and...

7.8CVSS5.8AI score0.00129EPSS
SaveExploits0References4
NVD
NVD
added 2026/05/01 2:16 p.m.13 views

CVE-2026-31696

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix missing validation of ticket length in non-XDR key preparsing In rxrpcpreparse, there are two paths for parsing key payloads: the XDR path for large payloads and the non-XDR path for payloads = 28 bytes. While the XDR...

7.8CVSS0.00129EPSS
SaveExploits0References8
Rows per page
Query Builder