StackRot

StackRot CVE-2023-3269: Linux kernel privilege escalation vulnerability GitHub-CI-verified exploit A flaw was found in the handling of stack expansion in the Linux kernel 6.1 through 6.4, aka "Stack Rot". The maple tree, responsible for managing virtual memory areas, can undergo node replacement...

page_table_walk

Capture the Flag in Physical Memory You've read about paging. The diagrams make sense. Four levels, 9 bits each, page frame, offset. Sure. But then you hit a challenge that requires actually walking page tables, and you realize you don't know it. You know about it. Big difference. What worked for...

CVE-2026-20637-AppleSEPKeyStore-UAF

CVE-2026-20637：AppleSEPKeyStore 释放后使用 CVE-2026-20637 | 作者：Johnny Franks @zeroxjf 组件： AppleKeyStore 影响： App 或许能够导致系统意外终止 描述： 已通过改进内存管理解决释放后使用问题。 ——Apple 安全内容，iOS 26.3 和 iPadOS 26.3 受影响版本 | ---|--- iOS| 26.1 - 26.2（已测试） macOS| 26.1 - 26.2（已测试） 组件| com.apple.driver.AppleSEPKeyStore 已修补| iOS 26.3 /...

salt

Welcome to salt , a tool to reverse and learn kernel heap memory management. It can be useful to develop an exploit, to debug your own kernel code, and, more importantly, to play with the kernel heap allocations and learn its inner workings. This tool helps tracing allocations and the current sta...

CVE-2026-23416-POC

CVE-2026-23416 — PoC mm/mseal: 合并时正确更新 VMA 结束地址 漏洞发现者：Antonius / Blue Dragon Security 概述 字段| 详情 ---|--- CVE ID| CVE-2026-23416 子系统| mm/mseal — mm/vma.c 影响范围| Linux 内核 6.17 至 7.0-rc5 修复版本| Linux 7.0-rc6，稳定版回溯 6.18.21、6.19.11 所需权限| 非特权用户（UID 1000，无 capabilities） 使用的系统调用| memfdcreate、mmap、mseal 可复现性...

USN-8729-1 linux, linux-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-raspi, linux-realtime, linux-realtime-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framework; - Drivers core;...

linux-insides

Linux insides 本仓库包含一本关于 Linux 内核及其内部原理的进行中的书籍。 这个项目的目标很简单——分享关于 Linux 内核内部机制及相关底层主题的知识。如果你对内核的底层实现感到好奇，请参阅目录。 章节状态（内核 v7.2.0） !IMPORTANT 我开始撰写本系列文章时，最新版本的内核是 3.18。自那以后发生了很多变化，我正在逐步更新内容以反映现代内核（v6.18+）。随着内核的演进，我会继续修订这些文章。 启动（已更新至 v7.2.0） 初始化（待 v6.18.0 审核） 中断（待 v6.18.0 审核） 系统调用（待 v6.18.0 审核）...

SUSE CVE-2026-80884

In the Linux kernel, the following vulnerability has been resolved: ntb: Store original DMA address for future release The DMA API requires that dmafreeattrs receive the exact dmahandle originally returned by the allocation function. Do not modify it...

CVE-2026-80893

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork copyhugetlbpagerange clears the uffd-wp bit of migration and hwpoison entries with hugepteclearuffdwp, which operates on the present-PTE bit position. Swap entri...

CVE-2026-80884

CVE-2026-80884 affects the Linux kernel's NTB (Non-Transparent Bridge) driver . The root cause is that the driver was modifying the DMA handle before passing it to dma_free_attrs, violating the DMA API contract that requires the exact dma_handle originally returned by the allocation function. Thi...

CVE-2026-80862

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix usage of pagefragcache nvme uses pagefragcache to preallocate PDU for each preallocated request of block device. Block devices are created in parallel threads, consequently pagefragcache is used in not thread-safe...

windows-api-function-cheatsheets

Windows API 函数速查表 联系方式 🌨️ Tetsuo: https://www.x.com/tetsuo 目录 Windows API 函数速查表 文件操作 进程管理 内存管理 线程管理 动态链接库（DLL）管理 同步 进程间通信 Windows 钩子 加密 调试 Winsock 注册表操作 错误处理 资源管理 Unicode 字符串函数 字符串长度 字符串复制 字符串拼接 字符串比较 字符串搜索 字符分类与转换 Win32 结构体速查表 常用结构体 Win32 套接字结构体速查表 winsock.h Win32 套接字结构体速查表 winsock2.h Win32...

Scalar-Venom-Attack

This paper analyzes cryptographic vulnerabilities discovered in modern cryptographic key management infrastructure, with a particular focus on critical flaws in the architecture of hardware security modules HSMs when handling elliptic curve private keys. The study focuses on a class of attacks th...

The vulnerability of the amdgpu_userq_vm_validate() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c file of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the amdgpuuserqvmvalidate function in the drivers/gpu/drm/amd/amdgpu/amdgpuuserq.c file of the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

CVE-2026-80729 mm/huge_memory: initialise workingset state before folio split

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: initialise workingset state before folio split xastrysplit adds GFPACCOUNT for page-cache xanodes, but foliosplit leaves the xastate's xalru unset. That lets a live, memcg-charged xanode exist without being linked...

CVE-2026-20637-AppleSEPKeyStore-UAF

CVE-2026-20637 — AppleSEPKeyStore 释放后使用 CVE-2026-20637 · Enfilade · enfilade.io 组件： AppleKeyStore 影响： 应用或许能够导致系统意外终止。 描述： 通过改进内存管理解决了一个释放后使用问题。 —Apple 安全内容，iOS 26.3 和 iPadOS 26.3 目标 | ---|--- iOS| 26.1 – 26.2（已测试） macOS| 26.1 – 26.2（已测试） 组件| com.apple.driver.AppleSEPKeyStore 已修补| iOS 26.3 / iPadO...

CVE-2024-0070-NVIDIA-GPU-Driver--Resonance-Vulnerability

CVE-2024-0070-NVIDIA-GPU-Driver--Resonance-Vulnerability NVIDIA's GPU drivers have a temporal coherence flaw in their memory management. At 587 kHz resonance, the driver's memory pages experience α-decay interference, allowing kernel memory access from user space. NVIDIA GPU α-Resonance Exploit...

CVE-2025-49844_POC

CVE-2025-49844POC CVE-2025-49844 POC -h 查看帮助信息 ··· Redis 存在Redis Lua脚本远程代码执行漏洞CVE-2025-49844。该漏洞的成因核心是 Redis 中 Lua 脚本引擎与内存管理逻辑的交互存在设计缺陷。 ··· ··· 相关URL：https://nvd.nist.gov/vuln/detail/CVE-2025-49844 ··· 免责声明：请确保在有授权的情况下使用此脚本，禁止用于未授权的网络攻击。...

CVE-2026-20281

A vulnerability in Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 that are running Cisco Session Initiation Protocol SIP Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This...

CVE-2026-20281 Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerability

A vulnerability in Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 that are running Cisco Session Initiation Protocol SIP Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This...