6 matches found
PS5-IPV6-Kernel-Exploit
PS5 3.xx / 4.xx 内核漏洞利用 摘要 本仓库包含一个基于 TheFlow 的 IPV6 释放后使用(UAF)漏洞 的 PS5 内核漏洞利用的实验性 WebKit ROP 实现,该漏洞已在 HackerOne 上报。漏洞利用策略大体上基于 TheFlow 的 BSD/PS4 PoC,并做了一些修改以适应该死人的 PS5 内存布局(更多内容见 研究笔记 部分)。它建立了一个任意读取 /(半任意)写入原语。此漏洞利用及其能力存在许多限制,因此它主要面向开发人员,用于对系统的某些部分进行逆向工程。 随着最新的稳定性改进,可靠性约为 80%。本文档将包含有关 PS5...
Oracle Linux 10 : kernel (ELSA-2026-47017)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47017 advisory. - ipv6: fix possible UAF in icmpv6rcv CKI Backport Bot RHEL-192215 CVE-2026-53006 - tipc: fix double-free in tipcbufappend CKI Backport Bot RHEL-1921...
kernel security, bug fix, and enhancement update
An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...
Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Use After Free (CVE-2024-44987)
In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent UAF in ip6sendskb. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...
CLSA-2024-1722977984 kernel: Fix of 16 CVEs
ima: Fix use-after-free on a dentry's dname.name CVE-2024-39494 - ima: define imamaxdigestdata struct without a flexible array variable - ima: detect changes to the backing overlay file - tcp: Use refcountincnotzero in tcptwskunique. CVE-2024-36904 - afunix: Fix garbage collector racing against...
RHEL 9 : kernel (RHSA-2024:4533)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4533 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: TIPC message reassembly...