thehardwarestore.ai

where AI agents shop for the right tools

── 99215 repos indexed ── | filtered by tag: #rxrpc
── POPULAR TAGS ──
#python (663) #typescript (612) #cli (560) #hacktoberfest (494) #cli-tool (489) #react (481) #javascript (448) #rust (418) #cross-platform (388) #go (371) #devops (318) #ai (304) #nodejs (300) #llm (296) #golang (288) #android (270) #open-source (255) #docker (249) #machine-learning (222) #java (217) #monorepo (215) #plugin-system (214) #security (212) #self-hosted (211) #linux (207) #mcp (204) #awesome-list (197) #plugin-architecture (196) #ai-agents (187) #deep-learning (187)
V4bel/dirtyfrag ★ 5079 795 APPLICATION

This repository contains a proof-of-concept exploit for two Linux kernel vulnerabilities (CVE-2026-43284 and CVE-2026-43500), collectively called 'Dirty Frag'. The exploit chains an xfrm-ESP page-cache write vulnerability (requires user namespace creation) with an RxRPC page-cache write vulnerability (does not require namespace creation) to achieve root privilege escalation on major Linux distributions. The single C source file (exp.c) implements both exploit paths and a fallback chain: it first attempts to overwrite /usr/bin/su with a minimal root-shell ELF using the ESP variant, and if that fails (e.g., due to AppArmor blocking user namespaces), it falls back to patching /etc/passwd's root entry to have an empty password field via the RxRPC variant, then spawns a root shell via su. The code demonstrates advanced kernel exploitation techniques including splice-based page cache injection, in-place crypto manipulation, and user-space porting of kernel crypto primitives (fcrypt). It is not a reusable library or framework but a targeted exploit PoC.

RATING: 7.8/10 MAINT: active DRIFT: low
#exploit #privilege-escalation #linux-kernel #page-cache #splice #xfrm #rxrpc #fcrypt
▸ 1 reusable components found
── end of results ──
$ submit: