CVE-2021-28476

CVE-2021-28476: Microsoft Hyper-V: vmswitch における複数の脆弱性 set OID リクエストの処理時に WPP コードに複数のバグが存在します。そのうちの1つは、攻撃者が制御するポインタの参照解除（読み取りアクセス）を可能にし、残りは範囲外読み取りアクセスを引き起こします。このリポジトリには、特定された問題を引き起こすための概念実証コードが含まれています。 問題の完全な技術的説明は、https://labs.bluefrostsecurity.de/advisories/bfs-sa-2021-001/ にあります。...

hyperv_local_dos_poc

Hyper-V DoS PoC。 これはVisual Studio 2019ドライバプロジェクトのコードファイルです。 1. ドライバをコンパイルします。 2. 次のコマンドを使用して、ゲストOSのネストされた仮想化を有効にします: root@kitploit: Set-VMProcessor -VMName -ExposeVirtualizationExtensions $true 3. ゲストOS内でドライバを実行します。ホストOSが再起動されるか、HYPERVISORERRORコードでBSODが発生します。 バグはHyper-V（Windows Server...

s6_pcie_microblaze

Kit di hacking DIY per PCI Express Informazioni generali Contenuti Configurazione della scheda SP605 Configurazione del software Esempi Uso dell'API Python Attacchi DMA pratici Attacchi Option ROM Risoluzione dei problemi Compilazione del progetto dal codice sorgente Informazioni generali Questa...

gerhart01

gerhart01 CVE-2020-0890 | Codice proof-of-concept della vulnerabilità Denial of Service di Windows Hyper-V...

HyperDeceit

HyperDeceit Questa repository contiene il codice sorgente completo del progetto HyperDeceit, una libreria che ti consente di impersonare Hyper-V e intercettare le hypercall eseguite dal kernel di Windows. Articolo del blog: https://reversing.info/posts/hyperdeceit/ Disclaimer Il codice non è stat...

CVE-2021-28476-tools-env

pacchetto test e sviluppo exploit per POC CVE-2021-28476 del ricercatore bluefrostsecurity guida all'installazione: root@kitploit: cd tools/ ./addtopathtools.sh addition tools for /usr/bin/ rimozione degli strumenti da /usr/bin: root@kitploit: cd tools/ ./deltopathtools.sh strumenti: pocinit:...

AZL-98150 CVE-2026-80676 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: use generic driveroverride infrastructure When a driver is probed through driverattach, the bus' match callback is called without the device lock held, thus accessing the driveroverride field without a lock,...

CVE-2026-80676

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: use generic driveroverride infrastructure When a driver is probed through driverattach, the bus' match callback is called without the device lock held, thus accessing the driveroverride field without a lock,...

CVE-2026-80676

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: use generic driveroverride infrastructure When a driver is probed through driverattach, the bus' match callback is called without the device lock held, thus accessing the driveroverride field without a lock,...

CVE-2026-80676

CVE-2026-80676 affects the Linux kernel Hyper-V vmbus driver. When a driver is probed via __driver_attach(), the bus match() callback is invoked without the device lock held, allowing an unlocked access to the driver_override field that can lead to a Use-After-Free (UAF) condition. The fix migrat...

EUVD-2026-67552

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: use generic driveroverride infrastructure When a driver is probed through driverattach, the bus' match callback is called without the device lock held, thus accessing the driveroverride field without a lock,...

CVE-2025-21333

CVE-2025-21333 Hyper-V NT Kernel Integration VSP（vkrnlintvsp.sys）Heap overflow in Paged Pool → Local Privilege Escalation LPE. Questa directory contiene il codice sorgente PoC per il laboratorio basato su MrAle98/CVE-2025-21333-POC, con patch locale. 1. Riepilogo della vulnerabilità Voce|...

CVE-2021-28476

CVE-2021-28476: Eine "Microsoft Hyper-V Remote Code Execution Vulnerability" von Gast zu Host in vmswitch.sys. Dies ist ein Proof of Concept für CVE-2021-28476 "Hyper-V Remote Code Execution Vulnerability", einen beliebigen Speicherlesevorgang in vmswitch.sys...

CVE-2023-36407

CVE-2023-36407 Dies ist ein PoC für CVE-2023-36407, eine Hyper-V-Sicherheitslücke zur Rechteausweitung. https://github.com/pwndorei/CVE-2023-36407/assets/96749184/a8ef87d3-e0d0-40e5-9b23-35ab057a9c78 Schwachstelle OOB-Lesen aus dem / Schreiben in den Non-Paged Pool über...

0vercl0k

0vercl0k PoC für CVE-2021-28476, eine „Hyper-V Remote Code Execution Vulnerability“ Gast-zu-Host-Schwachstelle in vmswitch.sys...

CVE-2021-28476

CVE-2021-28476: Dereferenziamento arbitrario di puntatore in Hyper-V vmswitch.sys da VM guest Riepilogo: Una macchina virtuale guest di Hyper-V può innescare una condizione di Denial-of-Service sul proprio host sottostante a causa di un parsing non sicuro dell'input da parte della funzione...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix handling of virtual Fibre Channel timeouts Hyper-V provides the ability to connect Fibre Channel LUNs to the host system and present them as SCSI devices in a guest VM. I/O to the vFC device is handled by the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: x86/hyperv: Disabling IBT when the hypercall page lacks the ENDBR instruction. On hardware that supports Indirect Branch Tracking IBT, Hyper-V VMs with ConfigVersion 9.3 or later support IBT in the guest. However, current version...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Drivers: hv: vmbus: Disabled the option to deactivate sysctlrecordpanicmsg by default in isolated guests. hvpanicpage might contain information sensitive to guests; do not dump this information to Hyper-V by default in isolate...

PT-2026-76674

Just a quick note that I saw a new SABB Active Backup spk posted this morning. Version is 3.2.1-25059 dated 12-Aug-2026. This is one of my most important packages so I'll be checking it out. Changelog Fixed a security vulnerability CVE-2026-15716 Fixed an issue where backing up or restoring Hyper...