Linux CVEs — PoCs and detection rules¶
6 Linux vulnerabilities with detection-only proof-of-concept code and Docker labs; 6 ship ready-to-deploy detection and prevention rules (Snort, YARA, Nginx, Apache). For authorized testing and blue-team detection engineering.
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-0193 — Netfilter UAF | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-36886 — Linux Kernel UAF | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-36971 — Linux Kernel UAF | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-53104 — Linux Kernel USB Video UAF | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
CVE-2026-46333 — In the Linux kernel, a vulnerability exists in the ptrace subsystem's get_dumpable()… |
High (7.1) | Snort, Sigma | ✅ |
| CVE-2024-50302 — Linux Kernel Uninitialized | Medium (5.5) | Snort, YARA, Nginx, Apache | ✅ |