563 matches found
EUVD-2026-103909
In the Linux kernel, the following vulnerability has been resolved: perf: Require kernel access for text poke events Perf events with excludekernel=1 can be opened without kernel perf access. However, excludekernel does not suppress text-poke sideband records. Every PERFRECORDTEXTPOKE is marked...
CVE-2026-98655
The Linux kernel contains a vulnerability where unprivileged tasks can bypass security restrictions to leak the runtime kernel text base , effectively undermining KASLR . The issue stems from perf events with exclude_kernel=1 failing to suppress text-poke sideband records . Because every PERF_REC...
CVE-2026-98655 perf: Require kernel access for text poke events
In the Linux kernel, the following vulnerability has been resolved: perf: Require kernel access for text poke events Perf events with excludekernel=1 can be opened without kernel perf access. However, excludekernel does not suppress text-poke sideband records. Every PERFRECORDTEXTPOKE is marked...
CVE-2026-98655 perf: Require kernel access for text poke events
In the Linux kernel, the following vulnerability has been resolved: perf: Require kernel access for text poke events Perf events with excludekernel=1 can be opened without kernel perf access. However, excludekernel does not suppress text-poke sideband records. Every PERFRECORDTEXTPOKE is marked...
CVE-2026-98655: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: perf: Require kernel access for text poke events Perf events with excludekernel=1 can be opened without kernel perf access. However, excludekernel does not suppress text-poke sideband records. Every PERFRECORDTEXTPOKE is marked...
Linux Distros Unpatched Vulnerability : CVE-2026-98655
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf: Require kernel access for text poke events Perf events with excludekernel=1 can be opened without kernel perf access. However, excludekernel does not...
PT-2026-116874
In the Linux kernel, the following vulnerability has been resolved: perf: Require kernel access for text poke events Perf events with exclude kernel=1 can be opened without kernel perf access. However, exclude kernel does not suppress text-poke sideband records. Every PERF RECORD TEXT POKE is...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.9 contains security vulnerabilities. These vulnerabilities stem from the lack of mandatory kernel access permissions for the textpoke event. This allows privileged tasks to obtain the kernel’s instruction address through PERFRECORDTEXTPOKE, thereby leaking the runtime...
CVE-2026-65343-e7eb2ed
CVE-2026-65343 — AppleKeyStore OOB Read KASLR Defeat Component: AppleKeyStore kernel extension — LibSerSEPControlDeserialize Affected: iOS / iPadOS 26.6 23G71 and earlier Fixed in: iOS / iPadOS 26.6.1 23G83 Type: Out-of-Bounds read in SEP control message deserialization Impact: Kernel pointer lea...
omae-wa-cheese-da
omae-wa-cheese-da Image L/E física arbitraria de GPU CVE-2025-21479 - filtración de KASLR - SELinux permisivo - servidor root de gancho de inicio seguro de RKP & bypass de DEFEX ejecución de binario personalizado LDPRELOAD Tarda unos 6 minutos.. Ten paciencia. Lo optimizaré después. Dispositivos...
iOS26.6-CVE-2026-65343
CVE-2026-65343 — AppleKeyStore OOB Read KASLR Defeat Component: AppleKeyStore kernel extension — LibSerSEPControlDeserialize Affected: iOS / iPadOS 26.6 23G71 and earlier Fixed in: iOS / iPadOS 26.6.1 23G83 Type: Out-of-Bounds read in SEP control message deserialization Impact: Kernel pointer lea...
prefetch-tool
Strumento Prefetch KASLR per Windows Uno strumento proof-of-concept per bypassare KASLR ASLR del kernel su Windows 11. Ispirato da EntryBleed per Linux. Questo strumento è stato sviluppato come parte di un exploit che ha come target Windows 11 24H2. Non sono affatto un esperto di canali laterali,...
SUSE CVE-2026-89616
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix info-leak on partial LZNT decompress in nireadframe nireadframe decompresses an LZNT $DATA frame into the vmapped target pages and then trusts decompresslznt's return value: uncsize = decompresslzntframeondisk,...
sh53d-temp-root
SH-53D temporary root This is a build-specific proof of conce...
kasld v0.4.0
KASLD recovers the Linux kernel's virtual and physical memory layout — primarily the kernel text base — from a local process. What it can recover is a function of that process's vantage: its privileges and capabilities, the system's configuration, and any container confinement. It recovers the ba...
CVE-2026-89616
A flaw was found in the Linux kernel's NTFS3 filesystem driver. When decompressing LZNT data, the nireadframe function may not fully zero out memory after a partial decompression. This can lead to the disclosure of previously used kernel memory pages to a local attacker who reads a specially...
AZL-100632 CVE-2026-89616 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix info-leak on partial LZNT decompress in nireadframe nireadframe decompresses an LZNT $DATA frame into the vmapped target pages and then trusts decompresslznt's return value: uncsize = decompresslzntframeondisk,...
DEBIAN-CVE-2026-89616
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix info-leak on partial LZNT decompress in nireadframe nireadframe decompresses an LZNT $DATA frame into the vmapped target pages and then trusts decompresslznt's return value: uncsize = decompresslzntframeondisk,...
CVE-2026-89616
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix info-leak on partial LZNT decompress in nireadframe nireadframe decompresses an LZNT $DATA frame into the vmapped target pages and then trusts decompresslznt's return value: uncsize = decompresslzntframeondisk,...
UBUNTU-CVE-2026-89616
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix info-leak on partial LZNT decompress in nireadframe nireadframe decompresses an LZNT $DATA frame into the vmapped target pages and then trusts decompresslznt's return value: uncsize = decompresslzntframeondisk,...