
CVE-2026-68138
Track patch status for CVE-2026-68138, a Linux kernel net/sched qdisc rate-table use-after-free, with affected/fixed versions, upstream commits, and…

Track patch status for CVE-2026-68138, a Linux kernel net/sched qdisc rate-table use-after-free, with affected/fixed versions, upstream commits, and…
Tracking SCTPhantom (CVE-2026-64564), the Linux kernel SCTP ASCONF transport use-after-free

Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities

Provenance-aware Linux kernel vulnerability research harness used in the investigation of CVE-2026-53075

Detection rules, YARA signatures, auditd/Wazuh rules, and MISP event templates for CVE-2026-31431 Linux kernel LPE vulnerability (Copy Fail).…

Defensive detection package for CVE-2026-31431 (Linux kernel AF_ALG LPE). Sigma, Falco, auditd, KQL, and EQL rules mapped to MITRE ATT&CK…

Defensive IR playbook and detection package for CVE-2026-31431 (Copy Fail) Linux kernel LPE, including Sigma, auditd, Falco, Wazuh, YARA, eBPF, and…

Repository documenting the Copy Fail (CVE-2026-31431) Linux kernel vulnerability, a local privilege escalation flaw enabling root access and mapped…

Educational repository detailing CVE-2026-46300 (Fragnesia), a Linux kernel local privilege escalation vulnerability. Provides technical analysis,…

Shell scanner for CVE-2026-31431 "Copy Fail" — a local privilege escalation via Linux kernel page cache corruption (algif_aead/AF_ALG). Checks kernel…

Zero-dependency Linux memory forensics, leveraging kernel-embedded BTF and kallsyms for type-aware memory analysis without external debug info.

Safe detection tooling for CVE-2026-31431 "Copy Fail" and CVE-2026-43284 "Dirty Frag" — a local privilege escalation in the Linux kernel's algif_aead…

Tracking OVSwrap (CVE-2026-64531), the Open vSwitch datapath netlink overflow

Tracking Januscape (CVE-2026-53359), the KVM/x86 guest-to-host escape

Tracking ITScape (CVE-2026-46316), the KVM/arm64 guest-to-host escape

Tracking IPV6_FRAG_ESCAPE (CVE-2026-53362, CVE-2026-53366), the IPv6 fragmentation container escape

Tracking GhostLock (CVE-2026-43499), the rtmutex/futex stack use-after-free

Tracking CIFSwitch (CVE-2026-46243), the CIFS cifs.spnego key-origin privilege escalation