CVE-2025-38352

This repository contains a functional exploit for CVE-2025-38352, targeting a race condition in the Linux kernel's POSIX CPU timers. The exploit achieves local privilege escalation (LPE) by manipulating kernel structures through a use-after-free (UAF) vulnerability.

This repository contains a proof-of-concept exploit for CVE-2025-38352, a race condition vulnerability in the Linux kernel's POSIX CPU timers implementation. The PoC triggers a use-after-free of a `struct k_itimer` by manipulating CPU timer handling in a multi-threaded environment.

The repository contains functional exploit code for multiple CVEs, including authentication bypass vulnerabilities in TOTOLINK devices and a scanner for Fortinet SSL VPN (CVE-2024-21762). The PoCs demonstrate the vulnerabilities with clear technical details and functional code.

This repository contains a proof-of-concept exploit for CVE-2025-38352, targeting a vulnerability in Linux kernel version 5.10.x on Android devices. The exploit leverages a race condition to achieve local privilege escalation (LPE) by manipulating timers and signal queues.

This repository contains a functional PoC exploit for CVE-2025-38352, targeting an out-of-bounds read/write vulnerability in the KGSL driver on Honor Magic V2 devices. The exploit demonstrates kernel memory access via crafted IOCTL calls and includes a detailed technical writeup.

The repository lacks actual exploit code and instead directs users to download a precompiled binary from an external release page. The README is marketing-focused with no technical details about CVE-2025-38352.

This repository contains a proof-of-concept exploit for CVE-2025-38352, targeting a vulnerability in the Linux kernel's POSIX CPU timers implementation. The exploit demonstrates a race condition that could allow unauthorized access to system resources.