569 matches found
pspy
pspy - 권한 없는 Linux 프로세스 염탐 pspy는 루트 권한 없이 프로세스를 염탐하기 위해 설계된 명령줄 도구입니다. 다른 사용자가 실행하는 명령, cron 작업 등을 실행되는 그대로 볼 수 있습니다. CTF에서 Linux 시스템을 열거enumeration하는 데 유용합니다. 또한 명령줄 인수로 비밀을 전달하는 것이 왜 나쁜 생각인지 동료에게 시연하는 데도 유용합니다. 이 도구는 procfs 스캔에서 정보를 수집합니다. 파일 시스템의 선택된 부분에 배치된 Inotify 감시자가 이러한 스캔을 트리거하여 수명이 짧은...
sysbox
はじめに Sysbox は、オープンソースかつ無料のコンテナランタイム（特殊化された「runc」）です。元々はNestyboxによって開発され（2022年5月にDockerが買収）、以下の2つの重要な方法でコンテナを強化します： コンテナ分離の強化： すべてのコンテナでLinuxユーザー名前空間を使用（つまり、コンテナ内のrootユーザー はホスト上では特権を一切持ちません）。 コンテナ内のprocfsおよびsysfsの一部を仮想化。 コンテナ内でホスト情報を隠蔽。 コンテナの初期マウントをロックする、など。 コンテナがVMと同じワークロードを実行できるようにする ：...
AZL-103544 CVE-2026-97503 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: genirq/proc: Size interrupt directory names for 10-digit interrupt numbers /proc/irq// directory names are built in char name10 buffers with sprintfname, "%u", irq. Ten-digit IRQ numbers already need 11 bytes including the traili...
DEBIAN-CVE-2026-93206
In the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use filenscapable when checking config space read access procbuspciread decides how much of the config space is readable based on capableCAPSYSADMIN, which checks the credentials of the task calling read, not the...
CVE-2026-93206
In the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use filenscapable when checking config space read access procbuspciread decides how much of the config space is readable based on capableCAPSYSADMIN, which checks the credentials of the task calling read, not the...
CVE-2026-97503 genirq/proc: Size interrupt directory names for 10-digit interrupt numbers
In the Linux kernel, the following vulnerability has been resolved: genirq/proc: Size interrupt directory names for 10-digit interrupt numbers /proc/irq// directory names are built in char name10 buffers with sprintfname, "%u", irq. Ten-digit IRQ numbers already need 11 bytes including the traili...
CVE-2026-97503
The Linux kernel contains a vulnerability where the /proc/irq// directory names are built using a char name[10] buffer with sprintf(name, "%u", irq). Because sparse-IRQ configurations allow interrupt numbers in the ten-digit range, these numbers require 11 bytes including the trailing NUL, leadin...
EUVD-2026-86101
In the Linux kernel, the following vulnerability has been resolved: genirq/proc: Size interrupt directory names for 10-digit interrupt numbers /proc/irq// directory names are built in char name10 buffers with sprintfname, "%u", irq. Ten-digit IRQ numbers already need 11 bytes including the traili...
CVE-2026-93206 PCI/proc: Use file_ns_capable() when checking config space read access
In the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use filenscapable when checking config space read access procbuspciread decides how much of the config space is readable based on capableCAPSYSADMIN, which checks the credentials of the task calling read, not the...
Linux Distros Unpatched Vulnerability : CVE-2026-97503
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - genirq/proc: Size interrupt directory names for 10-digit interrupt numbers /proc/irq// directory names are built in char name10 buffers with sprintfname, %u, ir...
CVE-2026-90164 smb/server: abort initialization when proc setup fails
In the Linux kernel, the following vulnerability has been resolved: smb/server: abort initialization when proc setup fails ksmbdserverinit calls ksmbdprocinit before creating the remaining proc entries and server subsystems. ksmbdprocinit tears down partial state on a procfs or percpucounter...
CVE-2026-90163
This CVE affects the Linux kernel ksmbd (SMB server) module. When a later initializer during ksmbd module initialization fails, the unwind path releases resources created after the procfs setup but jumps directly to class_unregister() , leaving the proc tree and its per-CPU counters allocated wit...
CVE-2026-90163 smb/server: call ksmbd_proc_cleanup() on module init failure
In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbdproccleanup on module init failure When a later initializer fails, the unwind chain releases resources created after procfs and then jumps directly to classunregister. Returning an error from moduleinit leav...
CVE-2026-90163: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbdproccleanup on module init failure When a later initializer fails, the unwind chain releases resources created after procfs and then jumps directly to classunregister. Returning an error from moduleinit leav...
Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: The issue involves bcm: – a UAF Use-After-Free flaw in bcmprocshow. Bug: KASAN: A slabuse-after-free issue occurs in bcmprocshow+0x969/0xa80. A size 8 byte read was performed at address ffff888155846230 by the task cat/7862. CPU:...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: NFSD: Hold a reference to the net structure for the lifetime of the open file descriptor. The /proc/fs/nfs/exports proc entry is created during module initialization and remains valid throughout the lifetime of the module. The...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: procfs: Fixed a missing RCU protection when reading realparent in dotaskstat. When reading /proc/pid/stat, dotaskstat accesses task-realparent without proper RCU protection. This leads to the following sequence of events: cpu 0 c...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: The issue involves bcm: adding missing rcu read protection for procfs content. When the procfs content is generated for a bcmop that is about to be removed, the procfs output might display unreliable data UAF. Since the removal o...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: atm: The atmdevmutex is released after removing procfs in atmdevderegister. syzbot reported a warning during atmdevregister. 0 Before creating a new device and procfs/sysfs for it, atmdevregister looks up a duplicate device throu...
