CVE-2024-56426

Exynos 990 / Exynos9830 统一 BootROM 漏洞利用 针对 Exynos 990 Galaxy S20、S20 FE 和 Note20 系列的统一 CVE-2024-56426 工具。该漏洞利用接受全部十种 型号名称，并将其映射到六个已验证的出厂引导加载程序系列。 !CAUTION 跟踪的密钥包和生成的镜像具备熔断（fusing）能力。熔断是 不可逆的。熔断到某个密钥的手机只能启动与该密钥兼容的镜像。 错误的型号、回滚版本、补丁集或密钥包可能导致设备陷入熔断启动循环。 在迭代过程中请使用开发密钥和 UFS 载荷。除非明确打算进行自定义密钥熔断，...

Elysium-Vanguard-Sentinel-Audit

SENTINEL-ROOT-AUDIT: Honor Magic V2 虚拟机监控器检测套件 ➲ 项目概述 SENTINEL-ROOT-AUDIT 是一款专业级安全套件，旨在审计内核完整性并检测针对 Honor Magic V2 SM8550 的虚拟机监控器级干预。 虽然核心漏洞（CVE-2025-38352）允许在内核中实现 OOB 读/写 原语，但本套件侧重于“纵深防御”方面——展示现代硬件级保护（EL2 RKP）如何成功挫败利用尝试。 ⚡ 关键特性 利用逻辑（阶段4） ：功能性独立PoC，展示内核内存读取。 KASLR 绕过 ：通过驱动程序信息泄露进行实时偏移计算。 隐身监视器...

PT-2026-85792

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Write ESR EL2 for injected nested SError exceptions kvm inject el2 exception writes ESR EL2 for synchronous exceptions but not for SError. enter exception64 does not write ESR ELx for any exception type, so the...

CVE-2026-64555

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for ARM64 architecture, specifically affecting nested virtualization. The kvmhyphandlemops function, responsible for handling certain virtualization operations, incorrectly restored the SPSREL2 register. This occurred because...

SUSE CVE-2026-64555

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix SPSREL2 restore in kvmhyphandlemops kvmhyphandlemops resets the single-step state machine as part of rewinding state for a MOPS exception by modifying vcpucpsr and writing the result directly into hardware. In...

UBUNTU-CVE-2026-64555

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix SPSREL2 restore in kvmhyphandlemops kvmhyphandlemops resets the single-step state machine as part of rewinding state for a MOPS exception by modifying vcpucpsr and writing the result directly into hardware. In...

CVE-2026-64555 KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops()

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix SPSREL2 restore in kvmhyphandlemops kvmhyphandlemops resets the single-step state machine as part of rewinding state for a MOPS exception by modifying vcpucpsr and writing the result directly into hardware. In...

CVE-2026-64555 KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops()

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix SPSREL2 restore in kvmhyphandlemops kvmhyphandlemops resets the single-step state machine as part of rewinding state for a MOPS exception by modifying vcpucpsr and writing the result directly into hardware. In...

CVE-2026-64555

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix SPSREL2 restore in kvmhyphandlemops kvmhyphandlemops resets the single-step state machine as part of rewinding state for a MOPS exception by modifying vcpucpsr and writing the result directly into hardware. In...

Linux Distros Unpatched Vulnerability : CVE-2026-64555

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: nv: Fix SPSREL2 restore in kvmhyphandlemops kvmhyphandlemops resets the single-step state machine as part of rewinding state for a MOPS exception by...

SUSE CVE-2026-64286

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Clear hyprunningvcpu when flushing the pKVM hyp vCPU flushhypvcpu copies the host vCPU context into the hyp's private vCPU on every run. ctxttovcpu expects a guest context to have a NULL hyprunningvcpu, which is only...

CVE-2026-64286

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Clear hyprunningvcpu when flushing the pKVM hyp vCPU flushhypvcpu copies the host vCPU context into the hyp's private vCPU on every run. ctxttovcpu expects a guest context to have a NULL hyprunningvcpu, which is only...

CVE-2026-64287

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Bound usedlrs when flushing the pKVM hyp vCPU flushhypvcpu copies the host vGIC state into the hyp's private vCPU on every run. The vGIC list register save and restore use usedlrs as their loop bound and expect it to...

PT-2026-64507

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM arm64 implementation where the flush hyp vcpu function copies the host vCPU context into the hyp's private vCPU during every run. Because the ctxt to vcpu...

CVE-2026-63941

CVE-2026-63941 documents a Linux kernel KVM arm64 issue where ZCR_EL2 updates from a guest hypervisor could bypass proper masking, allowing L2 guests to observe VL values they shouldn’t. The fix moves the VL capping into restore points so the HW is always programmed with a capped value, regardles...

CVE-2026-63941 KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Correctly cap ZCREL2 provided by a guest hypervisor ZCREL2 can be updated by a VHE guest hypervisor either using ZCREL2 which traps or ZCREL1 which does not trap. KVM handles both in different way: - on ZCREL2 trap,...

EUVD-2026-45714

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Correctly cap ZCREL2 provided by a guest hypervisor ZCREL2 can be updated by a VHE guest hypervisor either using ZCREL2 which traps or ZCREL1 which does not trap. KVM handles both in different way: - on ZCREL2 trap,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fixed the host’s stage-2 PGD refcount issue The KVM page-table library counts the pages of concatenated stage-2 PGs individually. However, when KVM runs in protected mode, the host’s stage-2 PGD is currently managed b...

CVE-2019-20556

An issue was discovered on Samsung mobile devices with P9.0 SM6150, SM8150, SM8150FUSION, exynos7885, exynos9610, and exynos9820 chipsets software. RKP memory corruption allows attackers to control the effective address in EL2. The Samsung ID is SVE-2019-15221 October 2019...

CVE-2025-40184 KVM: arm64: Fix debug checking for np-guests using huge mappings

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix debug checking for np-guests using huge mappings When running with transparent huge pages and CONFIGNVHEEL2DEBUG then the debug checking in asserthostsharedguest fails on the launch of an np-guest. This WARNON...