Linksys-WRT54GL-Exploitation

Del soldador a la shell: explotación completa del hardware del router Linksys WRT54GL CVE-2022-43973 Un viaje de investigación de seguridad embebida en 10 fases: desde el descubrimiento de pines JTAG hasta la ejecución remota de código en un router doméstico basado en MIPS. | ---|--- Autor| Umber...

bowcaster

Bowcaster Exploit Development Framework This framework, implemented in Python, is intended to aid those developing exploits by providing useful set of tools and modules, such as payloads, encoders, connect-back servers, etc. Currently the framework is focused on the MIPS CPU architecture, but the...

CVE-2018-18852

CERIO router Authenticated RCE backdoor vendor creds CVE-2018-18852 Python PoC hook-s3c github.com/andripwn, @andripwn on twitter Working Python PoC for CVE-2018-18852, originally appearing on; https://github.com/andripwn/CVE-2018-18852 What's up CERIO Router models and variants of, DT300N, DT100...

CVE-2026-80627

A flaw was found in the Linux kernel, specifically within the MIPS architecture's memory management component. The maarreswalk function performs an out-of-bounds write when processing memory ranges. This occurs because the function fails to check if its internal array is full before writing new...

CVE-2026-80627

This Linux kernel vulnerability affects the MIPS memory management subsystem. The function maar_res_walk() uses wi->num_cfg as an index into a fixed-size wi->cfg array but checks whether the array is full only after writing the entry. If walk_system_ram_range() reports more than 16 memory r...

EUVD-2026-67503

In the Linux kernel, the following vulnerability has been resolved: MIPS: mm: Fix out-of-bounds write in maarreswalk maarreswalk uses wi-numcfg as the index into the fixed-size wi-cfg array, but checks whether the array is full only after it has filled the selected entry. If walksystemramrange...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerabilities have been resolved: mips: bmips: BCM6358: disabled RAC flush for TP1 RAC flush causes kernel panics on BCM6358 with EHCI/OHCI when booting from TP1: 3.881739 usb 1-1: new high-speed USB device number 2 using ehci-platform 3.895011 Reserved...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: MIPS: pgalloc: fixed a memory leak caused by pgdfree The pgd page is freed by the generic implementation pgdfree since commit f9cb654cb550 „asm-generic: pgalloc: provides a generic pgdfree”, however, there are scenarios in which...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: MIPS: cpuinfo: Fixed a warning for CONFIGCPUMASKOFFSTACK When CONFIGCPUMASKOFFSTACK and CONFIGDEBUGPERCPUMAPS are selected, cpumaxbitswarn generates a runtime warning similar to the following, while we display /proc/cpuinfo...

Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-5.10

In the Linux kernel, the following vulnerability has been resolved: MIPS: fw: Allow firmware to pass an empty environment variable. fwgetenv will use the environment variable entry to determine the style of the environment variables. However, it is legal for the firmware to simply pass an empty...

CVE-2026-72181

A flaw was found in the Linux kernel's scheduler component, specifically when handling CPU masks on MIPS architecture with CONFIGCPUMASKOFFSTACK enabled. An incorrect size calculation during the copyfromuser operation could lead to memory corruption. This vulnerability allows a local attacker to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100768)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100768 advisory. In the Linux kernel, the following vulnerability has been resolved: MIPS: Work around LLVM bug when gp is used as global register variable On MIPS, currentthreadinfo...

The vulnerability in the `arch/mips/kernel/relocate.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the arch/mips/kernel/relocate.c component of the Linux operating system relates to the pointer relocation beyond the allocated memory range. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-72215

In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Ensure 32-bit stack location for o32 promprintf In 64-bit configurations calling any firmware entry points from a kernel thread other than the initial one will result in a situation where the stack has been placed in t...

PT-2026-72502

In the Linux kernel, the following vulnerability has been resolved: regulator: core: regulator lock two should test for EDEADLK not EDEADLOCK Compare against -EDEADLK, which is what ww mutex lock actually returns and what every other deadlock check in this file already uses. Function regulator lo...

Linux Distros Unpatched Vulnerability : CVE-2026-72181

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mips: sched: Fix CPUMASKOFFSTACK memory corruption This patch addresses a critical memory management flaw. When CONFIGCPUMASKOFFSTACK is enabled, cpumaskvart is...

USN-8620-2 linux-azure-fips vulnerabilities

Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...

CVE-2026-64248

A flaw was found in the Linux kernel, specifically affecting systems using the MIPS architecture. During the shutdown process of a CPU, the kernel's internal mechanism responsible for managing concurrent data access Read-Copy Update or RCU is not properly informed that the CPU is no longer active...

USN-8620-1: Linux kernel vulnerabilities

Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...

USN-8618-1: Linux kernel vulnerabilities

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. CVE-2025-54518 Several security issues...