Vol3xp

Vol3xp, Volatility 3 Explorer Plugins WinObj - Windows Kernel Objects Explorer an improve of https://github.com/kslgroup/WinObj for volatility 3 winobj.py WinObj very similar to WinObj sysinternals Also supports Struct Analyzer and WinObjGui from VolExp. RAMMap - Physical Address Mapping pfn.py...

CVE-2023-36427

CVE-2023-36427 Este repositorio contiene el informe y el exploit de CVE-2023-36427, una corrupción de memoria en direcciones físicas arbitrarias desde la partición raíz en Windows. Los detalles y el exploit de la vulnerabilidad se encuentran en el informe enviado a Microsoft. Cronología 2 de juli...

cormem-read-poc

DISCLAIMER : This project is for educational and security research purposes only. Use only on systems you own or have explicit permission to test. Unauthorized use may be illegal in your jurisdiction. cordrvexploit — CVE-2026-38194 Vulnerability This tool demonstrates CVE-2026-38194, a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Net: Ethernet: ecbhf: Fixed the dmafreecoherent function’s DMA handle. In the error-prone implementation of dmafreecoherent, it incorrectly uses priv-rxbuf.alloclen as the DMA handle. This could result in improper unmapping of th...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: powerpc/32: Fixed the hard lockup that occurred due to vmap stack overflow. Since the commit c118c7303ad5 “powerpc/32: Fixed vmap stack – Do not activate the MMU before reading the task struct”, a vmap stack overflow would result...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Avoid truncating memory addresses. On 32-bit machines with CONFIGARMLPAE, it is possible for lowmem allocations to be backed by addresses located physically beyond the 32-bit address limit. This issue was...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: efi/capsule-loader: corrected incorrect allocation size gcc-14 notes that the allocation using sizeofvoid on 32-bit architectures is insufficient for a 64-bit physaddrt: drivers/firmware/efi/capsule-loader.c: In the function...

PT-2026-86226

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulnerability in DirectIo64.sys that allows local users to clear arbitrary bits at any physical memory address due to missing validation of the...

Linux Distros Unpatched Vulnerability : CVE-2026-80682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: riscv/mm: use physical alignment for vmemmapstartpfn RISC-V computes vmemmapstartpfn by...

CVE-2026-80682

In the Linux kernel, the following vulnerability has been resolved: riscv/mm: use physical alignment for vmemmapstartpfn RISC-V computes vmemmapstartpfn by rounding physrambase down to VMEMMAPADDRALIGN. That alignment must therefore be expressed in the physical-address domain. Commit 476849b0fba4...

CVE-2026-80682 riscv/mm: use physical alignment for vmemmap_start_pfn

In the Linux kernel, the following vulnerability has been resolved: riscv/mm: use physical alignment for vmemmapstartpfn RISC-V computes vmemmapstartpfn by rounding physrambase down to VMEMMAPADDRALIGN. That alignment must therefore be expressed in the physical-address domain. Commit 476849b0fba4...

UBUNTU-CVE-2026-64310

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for SEV ioctls Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and zero o...

PT-2026-64531

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the crypto ccp component where the sev move to init state function incorrectly initializes SNP for certain SEV ioctls. A userspace process could potentially trigger th...

SUSE CVE-2026-53047

In the Linux kernel, the following vulnerability has been resolved: efi/capsule-loader: fix incorrect sizeof in phys array reallocation The krealloc call for capinfo-phys in eficapsulesetupinfo uses sizeofphysaddrt instead of sizeofphysaddrt, which might be causing an undersized allocation. The...

CVE-2026-53047

A flaw was found in the Linux kernel's EFI Extensible Firmware Interface capsule loader. An incorrect size calculation during memory reallocation for physical addresses can lead to an undersized buffer. This issue, specifically on 32-bit systems with Physical Address Extension PAE, may result in ...

CVE-2026-53047

In the Linux kernel, the following vulnerability has been resolved: efi/capsule-loader: fix incorrect sizeof in phys array reallocation The krealloc call for capinfo-phys in eficapsulesetupinfo uses sizeofphysaddrt instead of sizeofphysaddrt, which might be causing an undersized allocation. The...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mm/memfdluo: fixed the physical address conversion in the putfolios cleanup process. In the putfolios cleanup path of memfdluoretrievefolios: 1. khorestorefolio expects a physaddrt physical address, but receives a raw PFN...

Linux Distros Unpatched Vulnerability : CVE-2026-46013

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/memfdluo: fix physical address conversion in putfolios cleanup In memfdluoretrievefolios'...

SUSE CVE-2026-46013

In the Linux kernel, the following vulnerability has been resolved: mm/memfdluo: fix physical address conversion in putfolios cleanup In memfdluoretrievefolios's putfolios cleanup path: 1. khorestorefolio expects a physaddrt physical address but receives a raw PFN pfolio-pfn. This causes...

CVE-2026-46013

A flaw was found in the Linux kernel. An issue in the memfdluo component, specifically within the putfolios cleanup path of memfdluoretrievefolios, leads to incorrect physical address conversion and a missing check for sparse file holes. This could result in incorrect memory handling, potentially...