CVE-2026-46300

The provided content describes a Linux kernel privilege escalation exploit chain but lacks actual exploit code. It references external links (Patreon, GitHub) for the exploit and patch, which is characteristic of suspicious repositories.

This repository contains a functional exploit for CVE-2026-46300, a Linux kernel local privilege escalation vulnerability. The exploit leverages page cache replacement via ESP-in-TCP/TCP coalesce to achieve byte-controlled pollution, allowing an attacker to modify the page cache of a read-only file (e.g., /usr/bin/su) to execute arbitrary code with elevated privileges.

The repository contains a functional local privilege escalation exploit for CVE-2026-46300, leveraging a logic flaw in the Linux kernel's socket buffer handling within the XFRM/ESP-in-TCP subsystem to achieve arbitrary byte writes in the kernel page cache.

This PoC demonstrates a local privilege escalation (LPE) exploit leveraging Linux namespace isolation (CLONE_NEWUSER and CLONE_NEWNET) to gain root access. It uses unshare() to create new user and network namespaces, then spawns a shell with elevated privileges.

This repository documents the analysis of CVE-2026-46300, a Linux kernel page-cache corruption vulnerability that allows local privilege escalation by modifying cached file pages without altering the underlying disk files. The content appears to be a technical writeup based on a TryHackMe lab project.

This repository contains a functional Go-based exploit for CVE-2026-46300, leveraging a kernel page-cache write primitive via TCP_ULP espintcp to achieve local privilege escalation (LPE). The exploit builds a keystream table for AES-GCM decryption, flips bytes in the page cache of /usr/bin/su, and spawns a root shell via a PTY.

This repository contains a functional exploit PoC for CVE-2026-46300, demonstrating a kernel memory corruption vulnerability via TCP_ULP setsockopt and namespace escape techniques. The exploit includes a Docker-based test environment to simulate both mitigated and unmitigated scenarios.

This repository contains a functional simulation of CVE-2026-46300, a privilege escalation vulnerability in Cisco Secure Command Center. The exploit leverages a logical flaw in the espintcp module to corrupt file-backed page cache, leading to arbitrary code execution with root privileges.

This repository contains a functional Go exploit for CVE-2026-46300, leveraging a Linux kernel vulnerability in the XFRM ESP-in-TCP subsystem to achieve local privilege escalation (LPE). The exploit uses a controlled single-byte write primitive via AES-GCM decryption in the page cache to overwrite /usr/bin/su with a root shell payload.

This repository contains a functional Go-based exploit for CVE-2026-46300, leveraging a Linux kernel vulnerability in the XFRM ESP-in-TCP subsystem to achieve local privilege escalation (LPE). The exploit uses a controlled single-byte write primitive via AES-GCM decryption in-place on page-cache pages, allowing arbitrary code execution as root.

This repository contains a Go-based tool that mitigates CVE-2026-43500 and CVE-2026-43284 by disabling vulnerable kernel modules (esp4, esp6, rxrpc) and applying kernel updates. It includes functionality to detect vulnerable modules, apply hotfixes, and clean up artifacts post-update.

This repository provides a detailed technical analysis of CVE-2026-46300, a local privilege escalation vulnerability in the Linux kernel's XFRM ESP-in-TCP subsystem. It includes root cause analysis, patch information, and remediation steps but does not contain exploit code.

The repository contains no actual exploit code, only a README with instructions to clone and run a non-existent 'exploit' file. This is a social engineering lure designed to trick users into downloading external content.

This repository contains a functional local privilege escalation (LPE) exploit for CVE-2026-46300, targeting a logic bug in the Linux XFRM ESP-in-TCP subsystem. The exploit achieves arbitrary byte writes into the kernel page cache of read-only files by manipulating the ESP-in-TCP ULP mode transition and AES-GCM keystream bytes.