BootStomp

BootStomp BootStomp — это инструмент поиска ошибок в загрузчиках. Он ищет два типа уязвимостей: повреждение памяти и небезопасное хранение состояния. Для получения дополнительной информации обратитесь к статье о BootStomp по адресу...

shim

shim, 1단계 UEFI 부트로더 shim은 실행 시 다른 애플리케이션을 열어 실행하려고 시도하는 간단한 EFI 애플리케이션입니다. 처음에는 표준 EFI LoadImage 및 StartImage 호출을 통해 이를 시도합니다. 이러한 호출이 실패하면예: Secure Boot가 활성화되어 있고 바이너리가 적절한 키로 서명되지 않은 경우 shim은 내장 인증서를 기준으로 바이너리를 검증합니다. 검증에 성공하고 바이너리 또는 서명 키가 금지되지 않은 경우 shim은 바이너리를 재배치하고 실행합니다. 프로토콜 shim 잠금 프로토콜...

Astra Linux – Vulnerability in u-boot

In Das U-Boot through 2022.07-rc5, an integer signedness error and resulting stack-based buffer overflow occur in the “i2c md” command, which allows for the corruption of the return address pointer of the doi2cmd function...

Astra Linux – Vulnerability in u-boot

A carefully crafted self-referential DOS partition table will cause all Das U-Boot versions up to 2019.07-rc4 to infinitely recur, causing the stack to grow indefinitely. This could lead to a system crash or the overwriting of other data...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ext4: fixed the bug in estreesearch caused by an invalid boot loader inode. We have the following issues: kernel BUG at fs/ext4/extentsstatus.c:203! invalid opcode: 0000 1 PREEMPT SMP CPU: 1 PID: 945 Comm: cat Not tainted...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: EXT4: Zeroing idisksize when initializing the bootloader inode If the bootloader inode has never been used before, the EXT4IOCSWAPBOOT inode will initialize it, including setting isize to 0. However, if the “never before used”...

dracut-112+suse.29.gc0c5e1d-1.1 on GA media (moderate)

dracut-112+suse.29.gc0c5e1d-1.1 on GA media Announcement ID: openSUSE-SU-2026:11504-1 Rating: moderate Cross-References: CVE-2026-15816 CVSS scores: CVE-2026-15816 SUSE : 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerabilit...

CLSA-2026-1776731791 TuxCare security update for bl (1 CVE)

TuxCare rebuilt bl to address 1 CVE. Fixed in 1.1.2-tuxcare.1...

CLSA-2026-1772756021 TuxCare security update for bl (2 CVEs)

TuxCare rebuilt bl to address 2 CVEs. Fixed in 1.0.0-tuxcare.1...

Уязвимость загрузчика Windows Boot Loader операционных систем Windows, позволяющая нарушителю обойти существующие ограничения безопасности

Уязвимость загрузчика Windows Boot Loader операционных систем Windows связана с отсутствием необходимого этапа шифрования. Эксплуатация уязвимости может позволить нарушителю обойти существующие ограничения безопасности...

CVE-2026-58638

Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally...

CVE-2026-58638 Windows Boot Loader Security Feature Bypass Vulnerability

...

EUVD-2026-44315

Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally...

CVE-2026-58638 Windows Boot Loader Security Feature Bypass Vulnerability

...

CVE-2026-58638

CVE-2026-58638 is a Windows Boot Loader security feature bypass caused by a missing cryptographic step. The vulnerability allows a locally authenticated attacker to bypass a security feature. Public material in connected sources attributes the issue to Windows Boot Loader behavior and notes Micro...

Windows Boot Loader Security Feature Bypass Vulnerability

Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally...

PT-2026-58673

Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally...

CVE-2026-58638: Missing Cryptographic Step

Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally...

CVE-2026-29008

U-Boot through 2026.04-rc3 contains an integer underflow vulnerability in the tcprxstatemachine function net/tcp.c that allows a network-adjacent attacker to crash the bootloader by sending a malformed TCP SYN+ACK packet with a manipulated data offset field causing payloadlen to become negative...

CVE-2026-29008

U-Boot through 2026.04-rc3 contains an integer underflow vulnerability in the tcprxstatemachine function net/tcp.c that allows a network-adjacent attacker to crash the bootloader by sending a malformed TCP SYN+ACK packet with a manipulated data offset field causing payloadlen to become negative...