slides

diapositivas Una colección de diapositivas. 2025 Una historia sobre cómo desafiar a MTE: Rootear Google Pixel con el MTE del kernel habilitado en un solo intento Conferencia: POC 2025 2024 Un bug simple pero no fácil de explotar: Rootear dispositivos Android de una sola vez Conferencia: Cansecwes...

CVE-2026-16280

An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 GB. This can lead to incorrect GPU MMU mappings and may allow a non-privileged user to trigger access to unintended physical memory, resulting in...

CVE-2026-7639 GPU DDK - Page UAF read in PMMETA_PROTECT heap memory

Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causing use after free, which helps in facilitating unprivileged memory access from a shader code. Triggering failure path in the MMU mapping logic by a malicious code could lead to incomplete...

CVE-2024-0108

NVIDIA Jetson Linux contains a vulnerability in NvGPU where error handling paths in GPU MMU mapping code fail to clean up a failed mapping attempt. A successful exploit of this vulnerability may lead to denial of service, code execution, and escalation of privileges...

CVE-2024-0108: Improper Handling of Exceptional Conditions

NVIDIA Jetson Linux contains a vulnerability in NvGPU where error handling paths in GPU MMU mapping code fail to clean up a failed mapping attempt. A successful exploit of this vulnerability may lead to denial of service, code execution, and escalation of privileges...

PT-2024-15346 · Nvidia +1 · Nvidia Jetson Linux +1

Name of the Vulnerable Software and Affected Versions: NVIDIA Jetson Linux affected versions not specified Palo Alto firewalls affected versions not specified Description: The issue concerns a vulnerability in NVIDIA Jetson Linux, specifically in NvGPU, where error handling paths in GPU MMU mappi...