BootStomp

BootStomp BootStomp 是一个引导加载程序漏洞查找工具。它针对两类不同的漏洞进行检测：内存损坏和状态存储漏洞。更多信息请参考 BootStomp 论文：https://seclab.cs.ucsb.edu/academic/publishing/bootstomp-security-bootloaders-mobile-devices-2017 要运行 BootStomp 的分析，请阅读以下说明。请注意，BootStomp 适用于为 ARM 架构（32 位和 64 位）编译的引导加载程序，并且结果可能因 angr 和 Z3 的版本而略有不同。这是因为 angr...

kali-rpi-luks-crypt

Cifrado de disco completo para Kali en Raspberry u otra arquitectura similar usando LUKS Esta guía está dedicada a ejecutar Kali en Raspberry u otra arquitectura similar, p. ej. ODROID-C2 usando cifrado de disco completo con LUKS. Basada en el documento un poco desactualizado aquí. Motivación...

cabir_analysis

description: Bluetooth-Worm:SymbOS/Cabir Analysis Bluetooth-Worm:SymbOS/Cabir Analysis 在你开始阅读之前，我必须先声明：请对你读到的一切持保留态度，因为我绝不是 SymbianOS 开发者，也完全不熟悉 SymbianOS 环境。 但为什么还要分析这么老的东西呢？因为这是进入远程攻击领域最简单的途径，如今这类事情动辄价值百万美元的 nday/0day 🤑🤑🤑。而且我还缺乏做那种攻击的专业能力。 好了，既然这些废话都说完了，我们开始吧。Cabir 是什么鬼？它是一个运行在 Symbian...

CVE-2023-40930

介绍 这是一个关于如何搭建 CVE-2023-40930 复现环境的介绍 在 "issue detail.pdf" 中了解更多关于此 CVE 问题的信息 搭建 概述 你可以使用树莓派 Pi Zero 2W 或其他 ARM64（ARM32 也可）架构的设备来搭建这个环境，也可以在已 root 的 Android 设备上搭建。 如何搭建 针对非安卓设备 创建目录路径 "/system/lib"，并将本程序中的 "lib" 目录复制到 /system/lib。 然后创建目录路径 "/system/bin"，并将 "blkid" 和 "linker" 复制到此路径。 之后，插入你的恶意 U 盘并...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ARM: 9317/1: kexec: Make smp stop calls asynchronous If a panic is triggered by a hrtimer interrupt, all online CPUs will be notified and set to offline. However, as highlighted in the commit 19dbdcb8039c “smp: Warn on function...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: secretmem: Disable memfdsecret if arch cannot set the direct map. The memfdsecret syscall returns -ENOSYS if !cansetdirectmap is true. This occurs, for example, in some arm64 configurations, where marking 4k PTEs in the direct ma...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fixed the flushtlbrange function when it is used to erase normal PMD entries PMD entries that point to page tables, along with the PTE entries in the pointed-to page table. In the arm64 version of flushtlbrange, there is ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Avoid truncating memory addresses. On 32-bit machines with CONFIGARMLPAE, it is possible for lowmem allocations to be backed by addresses located physically beyond the 32-bit address limit. This issue was...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Disassociate vcpus from the redistributor region during teardown When tearing down a redistributor region, make sure that there are no dangling pointers to that region stored in the vcpus...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerabilities have been resolved: arm64: mm: fixed the sanity check for VA-range Both createmappingnoalloc and updatemappingprot perform sanity checks on their ‘virt’ parameter. However, the check itself doesn’t make much sense. The condition used today seems ...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ARM: hisi: Add missing ofnodeput after offindcompatiblenode offindcompatiblenode will increment the refcount of the returned devicenode. Calling ofnodeput is necessary to avoid the refcount leak...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: checking the return value after calling platformgetresource. This will cause a null-ptr-deref if platformgetresource returns NULL; therefore, we need to check the return value...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: In the bpf and arm64 implementations, the value of prog-jitedlen was cleared along with prog-jited. The syzbot reported an attempt to perform an illegal copytouser operation from the bpfproggetinfobyfd function 1. There has been ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: edma: Fix memory allocation size for queueprioritymap A critical memory allocation bug was fixed in the edmasetupfromhw function, where queueprioritymap was allocated with insufficient memory. The code declared...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ARM: versatile: Added ofnodeput in dcscbinit. The devicenode pointer is returned by offindcompatiblenode, with the reference count incremented. We should use ofnodeput to avoid the reference count leak...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Firmware: armscmi: A consistency check is performed on the mailbox/SMT channel. Upon receiving a completion interrupt, the shared memory area is accessed to retrieve the message header first. If the message sequence number...

Astra Linux – Vulnerability in Firefox, Thunderbird

On arm64, WASM code might result in incorrect assembly generation, leading to a register allocation issue and potentially a exploitable crash. This vulnerability affects Thunderbird 91.10, Firefox 101, and Firefox ESR 91.10...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15, Linux 5.10

Integer overflow or wrap-up vulnerability in the Linux kernel on Linux, x86, and ARM md, raid, raid5 modules allows for forced integer overflow...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: arm64: sme: Use STR P to clear the FFR context field in streaming SVE mode The FFR is a predicate register whose size can range from 16 to 256 bits, depending on the configured vector length. When saving the SVE state in streamin...

Astra Linux – Vulnerability in Firefox and Thunderbird

On arm64, an WASM brtable instruction with many entries could cause the label to be too far away from the instruction, leading to truncation and incorrect computation of the branch address. This vulnerability was fixed in Firefox 141, Firefox ESR 115.26, Firefox ESR 128.13, Firefox ESR 140.1,...