Tools

suominen/tunderflow

Static site tracking patch status for TUNderflow (CVE-2026-81000), a Linux kernel TUN/TAP receive-headroom underflow enabling local privilege…

ghost-bx1/cve-2026-98432-linux-tcp-uaf

Python proof-of-concept and C exploit generator for the Linux kernel TCP IPv4/MPTCP use-after-free (CVE-2026-98432), triggering a SYN retransmission…

perongh/cve-2026-99999

Go probe that reproduces the Linux IPv4 checksum-offload bug PwnEscape on a prepared TAP, injecting crafted virtio headers and verifying the…

shizuku198411/cve-2026-99999-kvm-checksum-metadata-non-destructive-poc

Non-destructive PoC that sends partial-checksum metadata from a KVM guest and verifies via PACKET_AUXDATA that the host observes an unfinished…

nsrg-fmlorg/kpatch-rocky-cve-2026-99999

kpatch livepatch build and load test for CVE-2026-99999 on Rocky Linux 8.10 (4.18.0-553.144.1.el8_10)

01luyicheng/cve-2026-99999-exploit

CVE-2026-99999 Working PoC — real VM escape for Linux kernel csum_start bug (CVSS 9.3). Guest-to-Host heap leak. See also: CVE-2026-99999-analysis…

nsrg-fmlorg/kpatch-cve-2026-98432

kpatch livepatch for CVE-2026-98432 (and CVE-2026-99999) on AlmaLinux and Rocky Linux 8, 9 and 10

h1z3-br0/cve-2026-98432

Laboratory toolkit for CVE-2026-98432 Linux TCP ireq_opt use-after-free: race trigger with heap-reuse oracle, leak parser, KASLR resolver, pcap…

alucard0x1/cve-2026-98432

Proof-only PoC for CVE-2026-98432, a Linux IPv4/TCP ireq_opt use-after-free: race trigger and heap-reuse oracle that confirms the UAF without code…

offline-ant/tcp2kaslr

CVE-2026-98432: a plain IPv4 TCP server is vulnerable, MPTCP is not the trigger. Bug trigger, evidence and analysis.

alvaroguzmancode/cve-2026-98432

Rust detector and local lab for CVE-2026-98432, a Linux IPv4 TCP use-after-free in inet_opt/ireq_opt: static ELF analysis, kprobe reachability…

raahilmw/synipopt

IPv4 SYN with IP options, one lab target per run, for CVE-2026-98432 research. Header-offset parser, regression tests, and a postmortem of a broken…

googlesky/cve-2026-98432

KASAN-verified proof-of-concept reproducing CVE-2026-98432, a Linux kernel IPv4 TCP inet_opt/ireq_opt use-after-free, with cross-CPU race harness and…

al4n4n/cve-2026-98432

PoC, non-destructive version scanner, KASAN crash verifier, and Suricata/Sigma detection rules for the Linux kernel TCP/IPv4 IP-options…

hdp1972be-svg/cve_2026_98432_guard

Temporary eBPF/XDP mitigation for CVE-2026-98432 Linux TCP IPv4 header-options vulnerability. Helps protect unpatched systems and custom kernels…

imkidz0/poc-cve-2026-98258

Proof-of-concept demonstrating CVE-2026-98258, a Linux kernel posix-cpu-timers flaw where a queued timer is freed on the expiry list, with a working…

rayanziani/bootjack

Exploit tooling for the EDK II UEFI PXE ICMP error overflow (CVE-2026-97631): crafts spoofed ICMP packets, plants a counterfeit EFI_EVENT, and dumps…