Lucene search
+L

217 matches found

Kitploit
Kitploit
added 2026/09/03 10:52 a.m.4 views

CVE-2023-0045

Bypassing Spectre-BTI User Space Mitigations on Linux This is a working document, please send us feedback if you think we got something wrong or if we missed a citation Version 1.0 José Oliveira esoj Rodrigo Branco BSDaemon Introduction When testing the success rate of Spectre-BTI attacks, we...

7.5CVSS6.7AI score0.02399EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/03 5:58 a.m.7 views

Jump-over-ASLR-BTB

分支预测器与 ASLR 作者:Byte Reaper 描述 该仓库包含一个研究性 C 实现,用于演示在地址空间布局随机化(ASLR)背景下与分支预测器、推测执行和基于缓存的侧信道相关的概念。 要求: root@kitploit: Linux x8664 GCC CPU that supports BTB 构建: root@kitploit: gcc btb.c -o BTB ./BTB 快速输出(示例): root@kitploit: + check System Security for Check branch predictors... + Sleep Success. - Not...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 10:10 p.m.3 views

CVE-2021-33624

Proof of Concept for CVE-2021-33624 compile with gcc -pthread -o bpfspectretypeconfusion bpfspectretypeconfusion.c -Wall -ggdb -std=gnu99 execute with sudo ./bpfspectretypeconfusion 1 2 ffffffffa4925620 0x10 where 1 and 2 are CPU threads which run on two distinct hardware cores, ffffffffa4925620 ...

4.7CVSS6.7AI score0.00922EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/31 12:55 p.m.3 views

spectre-attack-example

Spectre Attack Example January 2, 2018 CVE-2017-5753 and CVE-2017-5715 "Spectre" exploit example What is this? We place the text "The Magic Words are Squeamish Ossifrage." in memory, and then we attempt to read it using the vulnerability. If the system is vulnerable, you will see the same text on...

5.6CVSS6.9AI score0.93838EPSS
SaveExploits13References3
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.5 views

Astra Linux – Vulnerability in Linux 5.15, Linux

Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type, potentially leading to information disclosure...

6.5CVSS6.5AI score0.00776EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/07/29 10:26 a.m.12 views

CVE-2026-64507

A flaw was found in the Linux kernel. This vulnerability involves an incomplete defense against Spectre-v2, a type of attack that can expose sensitive information by exploiting how modern processors predict future operations. Specifically, when the Berkeley Packet Filter BPF Just-In-Time JIT...

5.5CVSS6AI score0.00161EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/07/25 3:58 p.m.8 views

SUSE CVE-2026-64508

In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those allocations as programs are loaded and freed. When fresh code is...

5.5CVSS5.8AI score0.00161EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/25 10:17 a.m.13 views

CVE-2026-64508

In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those allocations as programs are loaded and freed. When fresh code is...

0.00161EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/25 10:17 a.m.11 views

UBUNTU-CVE-2026-64508

In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those allocations as programs are loaded and freed. When fresh code is...

5.7AI score0.00161EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/25 8:52 a.m.10 views

CVE-2026-64508 bpf: Support for hardening against JIT spraying

In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those allocations as programs are loaded and freed. When fresh code is...

5.8AI score
SaveExploits0References9
Cvelist
Cvelist
added 2026/07/25 8:52 a.m.46 views

CVE-2026-64508 bpf: Support for hardening against JIT spraying

In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those allocations as programs are loaded and freed. When fresh code is...

0.00161EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/25 8:52 a.m.42 views

CVE-2026-64508

CVE-2026-64508 relates to a Linux kernel vulnerability in BPF JIT memory reuse. The issue arises when the BPF JIT allocator reuses space for new programs, potentially letting indirect jumps reuse stale branch predictions. Fix implemented: flush indirect branch predictors on JIT memory reuse via a...

5.8AI score0.00161EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/25 8:52 a.m.14 views

CVE-2026-64508

In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those allocations as programs are loaded and freed. When fresh code is...

5.8AI score0.00161EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2026/07/25 8:52 a.m.12 views

CVE-2026-64507 x86/bugs: Enable IBPB flush on BPF JIT allocation

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2 mitigations are in use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip enabling the IBPB flush if the BPF...

5.8AI score
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2026/07/25 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-64508

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those...

5.9AI score0.00161EPSS
SaveExploits0References4
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.9 views

Astra Linux – Vulnerability in Linux, Linux 5.10

The non-transparent sharing of the branch predictor within the context of some Intel processors may allow an authorized user to potentially enable information disclosure through local access...

6.5CVSS6.7AI score0.00447EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.5 views

Astra Linux – Vulnerability in Linux 5.10, Linux

The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ibprctlset function updates the Thread Information Flags TIFs for the task and updates the SPECCTRL MSR in the function speculationctrlupdate, but the IBPB is only issued at the next schedul...

7.5CVSS6.7AI score0.02399EPSS
SaveExploits3References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.7 views

Astra Linux – Vulnerability in Linux, Linux 5.10

The non-transparent sharing of branch predictor selectors between contexts in some Intel processors may allow an authorized user to potentially enable information disclosure through local access...

6.5CVSS6.6AI score0.00508EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2026/05/19 6:36 a.m.109 views

xiangshan-bpu-asid-poc

XiangShan Cross-ASID BPU Leak PoC Minimal proof of concept fo...

5.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/01/30 12:00 a.m.6 views

SUSE SLED15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2026:0329-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0329-1 advisory. - CVE-2025-58150: Fixed buffer overrun with shadow paging and tracing XSA-477 bsc1256745 - CVE-2026-23553: Fix...

8.8CVSS6AI score0.00132EPSS
SaveExploits0References7
Rows per page
Query Builder