CVE-2026-43494

This repository contains a functional exploit for CVE-2026-43494, leveraging a double-free vulnerability in the Linux kernel's RDS zcopy mechanism combined with io_uring to achieve local privilege escalation (LPE). The exploit manipulates page references, bypasses kernel protections like init_on_alloc, and overwrites page cache to execute arbitrary code as root.

This repository contains a functional exploit for CVE-2026-43494, a Linux kernel local privilege escalation vulnerability involving io_uring and GUP pin theft. The exploit uses RDS zerocopy to manipulate pin references and achieve privilege escalation.

This repository contains a functional proof-of-concept exploit for CVE-2026-43494, a Linux kernel local privilege escalation vulnerability. The exploit leverages io_uring and RDS zerocopy mechanisms to steal page pin references, ultimately achieving root privileges.

This repository contains a functional exploit PoC for CVE-2026-43494, a local privilege escalation (LPE) vulnerability in the Linux kernel's RDS zcopy mechanism. The exploit leverages a double-free condition via io_uring to overwrite page cache and achieve root privileges.

This repository contains a functional exploit PoC for CVE-2026-43494, leveraging an RDS zcopy double-free vulnerability to achieve local privilege escalation (LPE) via io_uring and page cache manipulation. The exploit is written in x86-64 assembly and includes detailed steps for pinning CPU, finding SUID binaries, and executing a root shell.

This repository contains a functional exploit PoC for CVE-2026-43494, which leverages an RDS zcopy double-free vulnerability to achieve local privilege escalation (LPE) via io_uring and page cache manipulation. The exploit is written in x86-64 assembly and includes detailed steps for pinning CPU, finding SUID binaries, and executing a root shell.

This repository contains a functional local privilege escalation (LPE) exploit for CVE-2026-43494, leveraging a vulnerability in the Linux kernel's io_uring subsystem combined with RDS zerocopy to steal page pin references. The exploit includes a detailed UI, shellcode execution, and a multi-phase attack chain to achieve root privileges.

This repository contains a functional exploit for CVE-2026-43494, leveraging a use-after-free vulnerability in the Linux kernel's io_uring subsystem to achieve local privilege escalation (LPE). The exploit manipulates reference counts and page cache to overwrite a SUID binary (e.g., /usr/bin/su) with a malicious payload, granting root access.

This repository contains a functional local privilege escalation exploit for CVE-2026-43494, leveraging a double-free bug in the Linux kernel's RDS subsystem combined with io_uring to achieve page cache overwrite of SUID-root binaries.

This repository contains a functional exploit for CVE-2026-43494, leveraging io_uring and RDS (Reliable Datagram Sockets) to achieve local privilege escalation (LPE) by manipulating page cache refcounts and overwriting SUID binaries.