Recreate-cve-2023-21768

Causa: comparando o AFD.sys de 202209 com o de 202307, na função AfdNotifyRemoveIOCompletion, tanto o Windows de 202209 quanto o de 202307 têm uma etapa que usa a função ProbeForWrite para verificar se uma região de memória está no modo usuário, mas o endereço do buffer verificado difere em 0x8...

nullmap

nullmap Um mapeador de drivers manual muito simples baseado no meu antigo voidmap e no POC do CVE-2023-21768 por chompie e b33f. Como a primitiva de leitura/escrita de memória pós-exploração do IoRing subjacente não lida muito bem com muitas leituras e escritas consecutivas, decidi sobrescrever o...

CVE-2025-21333

CVE-2025-21333 você pode encontrar a primeira versão do exploit para esta CVE em https://github.com/MrAle98/CVE-2025-21333-POC/tree/master . Eu fiz este novo exploit inspirado no feito pelo MrAle98. Ele é mais estável e um pouco menos arriscado, pois não abre o processo de sandbox do Windows para...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004033)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004033 advisory. An issue was discovered in domadvise in mm/madvise.c in the Linux kernel before 5.6.8. There is a race condition between coredump operations and the IORINGOPMADVISE...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001672)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001672 advisory. A time-of-check to time-of-use issue exists in iouring subsystem's IORINGOPCLOSE operation in the Linux kernel's versions 5.6 - 5.11 inclusive, which allows a local...

OESA-2025-1285 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: IORINGOPREAD did not correctly consume the provided buffer list when read i/o returned 0 except for -EAGAIN and -EIOCBQUEUED return. This can lead to a potential...

Linux Distros Unpatched Vulnerability : CVE-2023-52926

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IORINGOPREAD did not correctly consume the provided buffer list when read i/o returned 0 except for -EAGAIN and -EIOCBQUEUED return. This can lead to a potentia...

UBUNTU-CVE-2023-52926

In the Linux kernel, the following vulnerability has been resolved: IORINGOPREAD did not correctly consume the provided buffer list when read i/o returned 0 except for -EAGAIN and -EIOCBQUEUED return. This can lead to a potential use-after-free when the completion via iorwdone runs at separate...

PT-2025-6059 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue arises when IORING REGISTER CLONE BUFFERS is used to clone buffers from one uring instance to another, where the two instances use different memory managers MMs for accountin...

UBUNTU-CVE-2023-1032

The Linux kernel iouring IORINGOPSOCKET operation contained a double free in function syssocketfile in file net/socket.c. This issue was introduced in da214a475f8bd1d3e9e7a19ddfeb4d1617551bab and fixed in 649c15c7691e9b13cbe9bf6c65c365350e056067...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from incorrect manipulation of iouring and IORINGOPSPLICE, resulting in memory reuse after release...

Linux kernel 竞争条件问题漏洞

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A competitive condition vulnerability exists in domadvise in mm/madvise.c in Linux kernel versions prior to 5.6.8. Th...

PT-2020-4973 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.6.8 Description: The issue is related to a race condition between coredump operations and the IORING OP MADVISE implementation in the do madvise function of the Linux kernel. This condition may allow an attack...