TPMGenie

TPM Genie TPM Genie está diseñado para ayudar en la investigación de vulnerabilidades de los Módulos de Plataforma Confiable TPM. Como un interpositor de bus serie, TPM Genie es capaz de interceptar y modificar todo el tráfico que se envía a través del canal I2C entre la máquina anfitriona y un...

hdmi-sniff

hdmi-sniff Herramienta de inspección HDMI DDC I2C Última versión: https://github.com/ApertureLabsLtd/hdmi-sniff Esta herramienta está diseñada para demostrar lo fácil que es recuperar las claves criptográficas HDCP de dispositivos HDMI, pero podría ampliarse para decodificar todos los datos que s...

SparkAltBatteryBoard

SparkAltBatteryBoard 一个面向研究的定制电池接口和遥测板，适用于 DJI Spark 平台，基于标准 3S LiPo 电池包，取代了已停产、难以找到的原厂智能电池。 本项目记录了一个逆向工程的 I2C/SMBus 智能电池通信接口，最初是为了研究 DJI Spark 飞控如何与电池包通信而开发的。该板位于标准 3S 电池包和无人机之间，读取真实的电芯电压和电流，并复现该通信接口。 工作原理 1. 拆解了原装 DJI Spark 智能电池，并使用 Saleae 逻辑分析仪捕获了其与飞控之间的 I2C/SMBus 通信。 2. 对该通信进行解码，还原了 SBS 及 DJI...

DEBIAN-CVE-2026-93287

In the Linux kernel, the following vulnerability has been resolved: i2c: smbus: reject oversized block transfers in the common path The SMBus block transfer length data-block0 is validated in i2csmbusxferemulated but that check runs too late for tracepoints and is skipped entirely when the adapte...

CVE-2026-93287

In the Linux kernel, the following vulnerability has been resolved: i2c: smbus: reject oversized block transfers in the common path The SMBus block transfer length data-block0 is validated in i2csmbusxferemulated but that check runs too late for tracepoints and is skipped entirely when the adapte...

EUVD-2026-86091

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Bound GPIO I2C table entry count from VBIOS Reject undersized tables and cap the derived entry count to AMDGPUMAXI2CBUS so we do not overrun adev-i2cbus or walk an absurd number of entries on corrupt size fields...

CVE-2026-97493

The Linux kernel contains a vulnerability in the drm/amdgpu driver where the bound GPIO I2C table entry count is sourced from the VBIOS . This can lead to a buffer overrun of adev->i2c_bus[] if the table is undersized or the count is excessively large due to corrupt size fields. The fix involv...

EUVD-2026-86166

In the Linux kernel, the following vulnerability has been resolved: i2c: smbus: reject oversized block transfers in the common path The SMBus block transfer length data-block0 is validated in i2csmbusxferemulated but that check runs too late for tracepoints and is skipped entirely when the adapte...

CVE-2026-93287 i2c: smbus: reject oversized block transfers in the common path

In the Linux kernel, the following vulnerability has been resolved: i2c: smbus: reject oversized block transfers in the common path The SMBus block transfer length data-block0 is validated in i2csmbusxferemulated but that check runs too late for tracepoints and is skipped entirely when the adapte...

CVE-2026-93287

The Linux kernel contains a vulnerability where SMBus block transfer lengths are not properly validated in the common path, specifically when using native smbus_xfer implementations. This allows user-controlled oversized block lengths to reach tracepoint memcpy calls and driver callbacks unchecke...

CVE-2026-93287

In the Linux kernel, the following vulnerability has been resolved: i2c: smbus: reject oversized block transfers in the common path The SMBus block transfer length data-block0 is validated in i2csmbusxferemulated but that check runs too late for tracepoints and is skipped entirely when the adapte...

UBUNTU-CVE-2026-93287

In the Linux kernel, the following vulnerability has been resolved: i2c: smbus: reject oversized block transfers in the common path The SMBus block transfer length data-block0 is validated in i2csmbusxferemulated but that check runs too late for tracepoints and is skipped entirely when the adapte...

kernel: i2c: stub: Reject I2C block transfers with invalid length

A flaw was found in the Linux kernel's i2c-stub driver. A local user with access to the /dev/i2c- device can exploit this vulnerability by issuing an I2C System Management Bus SMBus input/output control ioctl command with a specially crafted block transfer length. This invalid length can cause th...

kernel: i2c: stub: Reject I2C block transfers with invalid length

A flaw was found in the Linux kernel's i2c-stub driver. A local user with access to the /dev/i2c- device can exploit this vulnerability by issuing an I2C System Management Bus SMBus input/output control ioctl command with a specially crafted block transfer length. This invalid length can cause th...

ROS-20260922-73-0035

The vulnerability of the stubxfer function in the drivers/i2c/i2c-stub.c file of the Linux I2C driver kernel relates to the issue of operations going beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

RHEL 7 : kernel-rt (RHSA-2026:70308)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70308 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

RHEL 7 : kernel (RHSA-2026:70290)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70290 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: fanotify: fix false positive ...

ps5-uart

Cabecera de 24 pines cerca de salina EDM-010 root@kitploit: emc header 1 5v 2 5v 3 gnd 4 gnd 5 emc gpio a1. pulling low at emc boot causes emc rom to enter uart shell @ 460800 6 uart rx emc 115200 7 uart tx emc 115200 8 3v3, goes low when emc resets 9 0v? 10 gnd 11 titania uart0 tx efc fw: 460800...

Linux Distros Unpatched Vulnerability : CVE-2026-90360

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - regulator: core: use systemfreezablewq for init complete work scheduledelayedwork uses systemwq, which is non-freezable, allowing regulatorinitcompletework to r...

Linux Distros Unpatched Vulnerability : CVE-2026-90070

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tpm: st33zp24: Return zero on status read failure st33zp24status ignores the result of the transport read and returns data even when no byte was received. The I...