virtualbox_e1000_0day

为什么 我喜欢 VirtualBox，但这与我发布一个 0day 漏洞无关。原因在于我对当今信息安全领域，尤其是安全研究和漏洞赏金现状的不认同： 1. 等待半年直到漏洞被修补被认为是正常的。 2. 在漏洞赏金领域，以下情况被认为是正常的： 1. 提交漏洞后，等待一个多月才被验证并决定是否收购。 2. 临时改变决定。你发现某个漏洞赏金计划会收购某个软件的漏洞，一周后你带着漏洞和利用代码出现，却收到“不感兴趣”。 3. 没有精确列出漏洞赏金计划感兴趣的软件清单。这对漏洞赏金计划方便，对研究者却很尴尬。 4...

e1000_vulnerability_exploit

e1000漏洞利用 安装 $ ./install.sh 目前仅支持构建自有版本。请选择 own 和 debug 来构建你的调试版本。 警告：过程中可能出现错误，尤其是在编译源码时。你可能会看到类似 "Exit with error status 2." 的信息。 如果出现错误，请联系我们：[email protected] 调试 使用 RTLogPrintfstring, args 打印调试信息。调试信息将写入 VirtualBox 文件夹中的 .log 文件。 查看以下文件： src/VBox/Devices/Network/DevE1000 .cpp / .h；...

The vulnerability of the e1000_tx_map() function in the drivers/net/ethernet/intel/e1000/e1000_main.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the e1000txmap function in the drivers/net/ethernet/intel/e1000/e1000main.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the retention of a file descriptor after its use. Exploiting this vulnerability could allow an attacker t...

EulerOS 2.0 SP15 : kernel (EulerOS-SA-2026-2889)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : mm: blk-cgroup: fix use-after-free in cgwbreleaseworkfnCVE-2026-31586 e1000/e1000e: Fix leak in DMA error cleanupCVE-2026-43445 futex: Clear stale...

The vulnerability of the e1000_tbi_should_accept() function in the drivers/net/ethernet/intel/e1000/e1000_main.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the e1000tbishouldaccept function in the drivers/net/ethernet/intel/e1000/e1000main.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the use of the NULL pointer pointer. Exploiting this vulnerability could allow an attacker to...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: e1000: fixed an out-of-bounds error in e1000tbishouldaccept In e1000tbishouldaccept, we read the last byte of the frame via “datalength - 1” to evaluate the TBI workaround. If the descriptor’s reported length is zero or greater...

CLSA-2026-1780132159 Fix of 7 CVEs

CVE-2026-23193 - scsi: target: iscsi: Fix use-after-free in iscsitdecsessionusagecount CVE-2026-23193 CVE-2025-71093 - e1000: fix OOB in e1000tbishouldaccept CVE-2025-71093 CVE-2025-71116 - libceph: make decodepool more resilient against corrupted osdmaps CVE-2025-71116 CVE-2025-71136 - media:...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: e1000: Moved cancelworksync to avoid deadlock. Previously, e1000down called cancelworksync for the e1000 reset task via e1000downandstop, which caused a RTNL condition. According to user reports and syzbot, a deadlock may occur i...

CVE-2026-43445

In the Linux kernel, the following vulnerability has been resolved: e1000/e1000e: Fix leak in DMA error cleanup If an error is encountered while mapping TX buffers, the driver should unmap any buffers already mapped for that skb. Because count is incremented after a successful mapping, it will...

UBUNTU-CVE-2026-43445

In the Linux kernel, the following vulnerability has been resolved: e1000/e1000e: Fix leak in DMA error cleanup If an error is encountered while mapping TX buffers, the driver should unmap any buffers already mapped for that skb. Because count is incremented after a successful mapping, it will...

CVE-2026-43445

In the Linux kernel, the following vulnerability has been resolved: e1000/e1000e: Fix leak in DMA error cleanup If an error is encountered while mapping TX buffers, the driver should unmap any buffers already mapped for that skb. Because count is incremented after a successful mapping, it will...

CVE-2026-43445

In the Linux kernel, the following vulnerability has been resolved: e1000/e1000e: Fix leak in DMA error cleanup If an error is encountered while mapping TX buffers, the driver should unmap any buffers already mapped for that skb. Because count is incremented after a successful mapping, it will...

CVE-2026-43445 e1000/e1000e: Fix leak in DMA error cleanup

In the Linux kernel, the following vulnerability has been resolved: e1000/e1000e: Fix leak in DMA error cleanup If an error is encountered while mapping TX buffers, the driver should unmap any buffers already mapped for that skb. Because count is incremented after a successful mapping, it will...

CVE-2026-43445

CVE-2026-43445 is a Linux kernel vulnerability in the e1000/e1000e drivers (and potentially igbvf) where a DMA mapping error cleanup leak could occur. The root cause was an off-by-one condition in the dma_error path: count was decremented before the loop, so if any TX buffer mappings succeeded be...

PT-2026-39106

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the e1000 and e1000e drivers during DMA Direct Memory Access error cleanup. When an error occurs while mapping TX buffers, the driver fails to correctly unmap all...

Linux Distros Unpatched Vulnerability : CVE-2026-43445

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - e1000/e1000e: Fix leak in DMA error cleanup If an error is encountered while mapping TX buffers, the driver should unmap any buffers already mapped for that skb...

Huawei EulerOS: Security Advisory for qemu (EulerOS-SA-2026-1641)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.13.1 : qemu (EulerOS-SA-2026-1641)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A stack-based buffer overflow was found in the QEMU e1000 network device. The code for padding short frames was dropped from individu...

EulerOS Virtualization 2.13.0 : qemu (EulerOS-SA-2026-1644)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A stack-based buffer overflow was found in the QEMU e1000 network device. The code for padding short frames was dropped from individu...

USN-8073-1 qemu vulnerabilities

It was discovered that the UHCI controller implementation of QEMU could be brought into an invalid state. An attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service. CVE-2024-8354 It was discovered that QEMU incorrectly handled memory durin...