CVE-2026-43499

This repository contains a functional proof-of-concept exploit for CVE-2026-43499 (GhostLock), a 15-year-old stack use-after-free (UAF) vulnerability in the Linux kernel's rtmutex remove_waiter() function. The PoC demonstrates the vulnerability by triggering a dangling pi_blocked_on pointer via FUTEX_CMP_REQUEUE_PI, leading to a controllable kernel stack UAF that can be used for local privilege escalation (LPE) or container escape.

This repository contains a functional local privilege escalation (LPE) exploit for CVE-2026-43499, targeting a Linux kernel vulnerability in the `pselect` syscall mechanism. The exploit leverages a race condition in kernel memory manipulation to achieve arbitrary write primitives and escalate privileges to root via a custom su daemon.

This repository contains a functional Android privilege escalation exploit targeting Samsung Galaxy devices to achieve root access via KernelSU. The exploit uses timing-based side-channel attacks (prefetch and syscall measurements) to bypass KASLR and probes kernel interfaces for privilege escalation vectors.

This repository contains a functional local privilege escalation (LPE) exploit for CVE-2026-43499, targeting a kernel vulnerability in OnePlus devices (specifically the ace6t model). The exploit leverages a race condition in the kernel's file operations (fops) and uses techniques like pipe corruption, CFI bypass, and SELinux manipulation to achieve root access.

This repository provides an automated unlock toolkit for Xiaomi Mi 8e5 devices, leveraging CVE-2026-43499 to exploit a bootloader vulnerability. The tool integrates ADB/Fastboot components and preloads ABL files to facilitate device unlocking and data wiping via a Windows batch script.

This repository contains a functional exploit for CVE-2026-43499, a futex PI (Priority Inheritance) Use-After-Free (UAF) vulnerability in the Linux kernel, targeting OnePlus devices. The exploit achieves local privilege escalation (LPE) by corrupting kernel memory via a race condition in the futex subsystem and manipulating ADB authentication to execute commands as root.

This repository contains a functional local privilege escalation (LPE) exploit for CVE-2026-43499, targeting a futex-related kernel vulnerability in the RMX5200 device. The exploit uses a race condition in `pselect` syscall handling to achieve arbitrary kernel memory writes, then installs a root shell via an embedded `su` binary and daemon.

This repository contains a functional local privilege escalation (LPE) exploit for CVE-2026-43499, targeting a Linux kernel vulnerability in the futex and pselect mechanisms. The exploit leverages race conditions and memory corruption to achieve arbitrary read/write primitives and install a root shell via a Unix domain socket.

The repository contains only a LICENSE file with no actual exploit code, technical details, or vulnerability analysis. It appears to be a placeholder or incomplete submission with no functional content.

This repository provides a functional exploit for CVE-2026-43499, a local privilege escalation vulnerability in Android kernels (6.12.x) running on Snapdragon chipsets. The exploit builds multiple payload candidates from a boot.img file, leveraging physical load address ambiguity to achieve temporary root access via ADB.

This repository contains a functional exploit PoC for CVE-2026-43499, a Linux kernel futex PI use-after-free vulnerability. The exploit demonstrates a deadlock cycle and UAF crash via crafted futex operations, targeting the rtmutex subsystem.

This repository contains a functional proof-of-concept (PoC) for CVE-2026-43499, a Linux kernel Use-After-Free (UAF) vulnerability in the rt_mutex PI requeue mechanism (kernel/locking/rtmutex.c). The PoC triggers the vulnerability via futex syscalls, leading to a kernel panic (DoS), and includes a scanner to detect vulnerable kernel versions.

This repository contains a functional local privilege escalation (LPE) exploit for CVE-2026-43499, targeting a race condition in the Linux kernel's file operations (fops) handling via pselect and configfs manipulation. The exploit achieves root access by hijacking kernel function pointers and installing a su daemon.

This repository contains a functional Linux kernel exploit for CVE-2026-43499, leveraging pipe buffer manipulation and slab cache shaping to achieve local privilege escalation (LPE). The exploit includes KernelSnitch-based memory leaks, physical read/write primitives, and post-exploitation payloads for root access and persistence.

The repository claims to provide a proof-of-concept exploit for CVE-2026-43499, a use-after-free vulnerability in the Linux kernel's futex PI requeue path for local privilege escalation on Xiaomi Redmi Turbo 5. However, it lacks actual exploit code and only includes a README with instructions and a LICENSE file.

This repository provides a functional proof-of-concept for CVE-2026-43499, a signature authentication bypass vulnerability in a Cloudflare Pages-based service. The exploit leverages a custom RSA-PSS and AES-GCM cryptographic scheme to generate valid signatures for arbitrary challenges, enabling privilege escalation.

This repository contains a functional Linux kernel exploit for CVE-2026-43499, leveraging a pipe buffer manipulation technique to achieve privilege escalation. The exploit includes memory layout shaping, slab cache manipulation, and physical memory read/write primitives to bypass KASLR and gain root access.

Repository contains only a README.md and LICENSE file with no actual exploit code or technical details about CVE-2026-43499. The README mentions a kernel privilege escalation vulnerability for Xiaomi 17T (chagall) but provides no proof-of-concept or analysis.

This repository contains a functional exploit for CVE-2026-43499, a futex PI (Priority Inheritance) Use-After-Free (UAF) vulnerability in the Linux kernel. The exploit disables SELinux enforcing by crafting fake PI waiter structures and manipulating the pselect syscall to achieve a controlled write primitive.

This repository contains a functional local privilege escalation (LPE) exploit for CVE-2026-43499, targeting a kernel vulnerability in IonStack device drivers. The exploit leverages a use-after-free in the kernel's futex subsystem to achieve arbitrary kernel memory write, then installs a root shell via modprobe or direct su daemon deployment.

This repository contains a functional local privilege escalation (LPE) exploit for CVE-2026-43499, targeting the vivo X Fold6 (MT6993) Android kernel. The exploit leverages a KASLR slide technique via pselect syscall stack manipulation and futex requeue operations to leak kernel memory and achieve root access.

This repository contains a functional Linux kernel exploit targeting a use-after-free vulnerability in the pipe buffer management subsystem (CVE-2026-43499) on OPPO MT6835 devices. The exploit leverages precise slab manipulation, KernelSnitch for memory leaks, and physmap spraying to achieve privilege escalation.

This repository contains a functional Linux kernel exploit for CVE-2026-43499, leveraging a pipe buffer manipulation technique to achieve privilege escalation. The exploit includes precise memory corruption primitives, slab cache shaping, and physical read/write capabilities to bypass KASLR and achieve arbitrary kernel memory access.

This repository contains a Linux kernel exploit targeting CVE-2026-43499, a use-after-free vulnerability in the pipe buffer management subsystem. The exploit leverages precise slab manipulation, KernelSnitch for memory collision detection, and physical read/write primitives to achieve local privilege escalation (LPE).

This repository contains a Linux kernel exploit targeting CVE-2026-43499, a local privilege escalation vulnerability. The exploit leverages pipe buffer manipulation and slab cache shaping to achieve arbitrary physical memory read/write, enabling root access on affected systems.

This repository contains a functional local privilege escalation (LPE) exploit for CVE-2026-43499, targeting a Linux kernel race condition in the `pselect` system call. The exploit uses heap spraying and fake waiter structures to achieve arbitrary kernel memory writes, then installs a root shell daemon via a Unix socket.

This repository contains a functional Linux kernel exploit targeting CVE-2026-43499, leveraging pipe buffer manipulation and slab cache shaping to achieve privilege escalation. The exploit includes detailed memory corruption techniques, kernel object spraying, and a custom 'KernelSnitch' collision-finding mechanism for reliable exploitation.

This repository contains a Python script that automates the extraction of kernel symbol offsets and structure field offsets from Android boot.img files, specifically targeting the IonStack vulnerability (CVE-2026-43499) for exploit compatibility. The script handles kernel decompression, kallsyms recovery, and generates a target.h file for exploit development.

The repository contains only a README file with vague claims about a modified Android rooting method for Samsung devices (specifically N970U1) via CVE-2026-43499, with no actual exploit code or technical details provided. The reference to a forked repo is also non-functional for analysis.

The repository contains only a README.md file with a minimal title and no technical details, exploit code, or vulnerability analysis. It serves as a placeholder with no functional content.

This repository contains a functional Linux kernel exploit for CVE-2026-43499, leveraging pipe buffer manipulation and slab cache shaping to achieve privilege escalation. The exploit uses KernelSnitch for memory leaks and targets specific Android kernel versions (e.g., caiman-CP2A.260605.012) with precise pipe object management for arbitrary read/write primitives.

This repository contains a functional exploit for CVE-2026-43499, a race condition in the Linux kernel's futex subsystem (GhostLock) leading to a use-after-free and privilege escalation on Logitech G Cloud (SD720G) devices. The exploit leverages perf_event_open for KASLR bypass and pselect stack spraying to achieve arbitrary write primitives.

This repository contains a functional local privilege escalation (LPE) exploit for CVE-2026-43499, a kernel vulnerability in the Linux futex subsystem. The exploit uses a race condition in `pselect` syscall handling to achieve arbitrary kernel memory writes, then escalates privileges to root via a custom su daemon.

This repository contains a functional local privilege escalation (LPE) exploit for CVE-2026-43499, targeting a race condition in the Linux kernel's futex subsystem on OnePlus 15 devices. The exploit uses a pselect-based timing side channel to achieve arbitrary kernel memory writes and escalate privileges to root via a custom su daemon.

This repository masquerades as an Android exploit PoC for CVE-2026-43499 but contains no actual vulnerability code. The included native libraries (libpoc32.so, libpoc64.so) are suspicious and likely malicious, as they are not accompanied by source code or any technical explanation of the exploit. The Android app structure is minimal and serves no apparent exploit purpose.

This repository contains a functional local privilege escalation (LPE) exploit for CVE-2026-43499, leveraging a race condition in the Linux kernel's futex and PI futex (Priority Inheritance) mechanisms combined with KASLR bypass via perf_event_open. The exploit demonstrates a complex attack chain involving thread synchronization, scheduler manipulation, and memory corruption to achieve root privileges.

This repository provides a functional exploit for CVE-2026-43499, a local privilege escalation vulnerability in Xiaomi/Redmi devices via LD_PRELOAD injection. The exploit gains root access, flashes a patched bootloader to unlock the bootloader, and performs a factory reset.

This repository contains a functional local privilege escalation (LPE) exploit for CVE-2026-43499, targeting a race condition in the Linux kernel's futex and pipe operations. The exploit leverages a memory corruption technique to achieve arbitrary kernel memory writes and escalate privileges to root via a custom su daemon.

This repository provides a backported patch for CVE-2026-43499 (GhostLock), a use-after-free vulnerability in the OpenVZ kernel's RT-mutex subsystem. The patch fixes a dangling pointer issue in `remove_waiter()` where `current` was incorrectly used instead of `waiter->task` during proxy lock operations, leading to potential kernel memory corruption.

The repository claims to provide an exploit for CVE-2026-43499, a Linux kernel rtmutex vulnerability, but contains no actual exploit code or technical details. Instead, it links to an external download (tinyurl) without any substantive analysis or PoC.

This repository contains a Linux kernel exploit targeting CVE-2026-43499, leveraging pipe buffer manipulation and slab cache shaping to achieve privilege escalation. The exploit uses KernelSnitch for memory leaks and physrw primitives for arbitrary read/write.

This repository contains a Linux kernel exploit targeting CVE-2026-43499, leveraging pipe buffer manipulation and slab cache shaping for local privilege escalation (LPE). The exploit uses KernelSnitch for memory leaks and includes detailed memory corruption techniques to achieve arbitrary physical read/write primitives.

This repository provides a functional proof-of-concept exploit for CVE-2026-43499, a Linux kernel futex PI use-after-free vulnerability affecting ARM v7 architectures. The exploit triggers a kernel panic via a crafted futex requeue operation, demonstrating the UAF condition in the futex priority inheritance mechanism.

The repository contains only a README file with the CVE identifier and no technical details, exploit code, or vulnerability analysis. It serves as a placeholder with minimal content.

This repository claims to be a PoC for CVE-2026-43499 but contains no actual exploit code, technical details, or vulnerability analysis. It only includes a README with generic setup instructions, a screenshot, a license, and a .gitignore file.