
ubuntu-tcp-guide
우분투 커널 TCP 구멍(CVE-2026-98432) 쉽게 보기 · 벨로키 보안 공부

우분투 커널 TCP 구멍(CVE-2026-98432) 쉽게 보기 · 벨로키 보안 공부
Interim nftables mitigation for CVE-2026-98432, automatic rollback and Russian administrator guide. Not a kernel patch.

Python proof-of-concept and C exploit generator for the Linux kernel TCP IPv4/MPTCP use-after-free (CVE-2026-98432), triggering a SYN retransmission…

Xboard 节点后端:基于 Xray-core v26.10.31,单补丁实现设备数/限速,严格对齐 Xboard V2 契约,内置 CVE-2026-98432 缓解

Verifica se um host descarta SYN TCP IPv4 com IP options (mitigação do CVE-2026-98432)

Audits Debian/Ubuntu kernels for CVE-2026-98432 and applies persistent nftables and sysctl mitigations, then guides kernel upgrade and rollback.

Restricted eBPF TC ingress guard, CO-RE detector, verified loader, and C11 VMM launch supervisor for CVE-2026-99999

Go probe that reproduces the Linux IPv4 checksum-offload bug PwnEscape on a prepared TAP, injecting crafted virtio headers and verifying the…

Simulation-only proof of concept for CVE-2026-99999, a Linux kernel virtio-net IPv4 csum_start validation bug enabling guest-to-host heap memory…

Reproduction and analysis of the Linux IPv4 csum_start validation bug (CVE-2026-99999): header rewrite, 32-byte heap disclosure, leak oracle and…

Non-destructive PoC that sends partial-checksum metadata from a KVM guest and verifies via PACKET_AUXDATA that the host observes an unfinished…

Temporary mitigation for CVE-2026-98432 (Linux IPv4 TCP ireq_opt use-after-free): drop IPv4 TCP with IP options, disable MPTCP. Tested scripts +…

Ansible role and Python script that detect Linux kernel exposure to CVE-2026-98432 and apply an nftables rule dropping inbound IPv4 SYNs carrying IP…

Read-only, agentless Linux kernel security configuration auditor (local & SSH). Initial focus: TCP migration / MPTCP checks for CVE-2026-98432.

Laboratory toolkit for CVE-2026-98432 Linux TCP ireq_opt use-after-free: race trigger with heap-reuse oracle, leak parser, KASLR resolver, pcap…

Guide and read-only check script for CVE-2026-98432, a Linux IPv4 TCP use-after-free: detect kernel patch status, apply an iptables stopgap, and…

Drop incoming IPv4 TCP packets whose IP header contains options.

Local kernel version checker, remote MPTCP capability probe, and interactive scan-and-probe CLI for assessing exposure to the Linux kernel IPv4 TCP…