reload.sh

reload.sh Don't do it... Please don't do it on live systems e.g. production or on your private computer where you stored critical data. This recipe show you how to install fresh system where other system exist and running. It's really cool and amazing but very risky! If you want to go into the...

meltdown-exploit

MELTDOWN EXPLOIT POC Speculative optimizations execute code in a non-secure manner leaving data traces in microarchitecture such as cache. Lipp et. al 2018 published their code 2018-01-09 at https://github.com/IAIK/meltdown. Look at their paper for details: https://meltdownattack.com/meltdown.pdf...

meltdown-exploit

MELTDOWN エクスプロイト PoC 投機的実行最適化は、安全でない方法でコードを実行し、キャッシュなどのマイクロアーキテクチャにデータの痕跡を残します。 Lipp 他 2018 は 2018-01-09 にコードを https://github.com/IAIK/meltdown で公開しました。詳細は論文 https://meltdownattack.com/meltdown.pdf を参照してください。 現時点では linuxprocbanner のみダンプ可能です。アクセスするメモリがキャッシュにある必要があり、/proc/version から読み取るたびに...

TID-The-Instant-Destroyer

TID — 即时销毁器 针对基于缓存的旁路攻击防护领域的独立安全研究。 概述 TID 是一种专用协议，旨在在使用后立即从 CPU 缓存层（$L1、L2$ 和 $L3$）中消除敏感数据残留（例如加密密钥）。它解决了数据在系统内存（RAM）中被擦除后仍存在于硬件结构中的关键安全漏洞。 主要成就 已验证的防御： 有效缓解 Flush+Reload 及类似的微架构旁路攻击。 可衡量的性能： 未受保护的访问： 78 CPU 周期（缓存命中）。 TID 保护的访问： 286 CPU 周期（缓存未命中）。 安全边际： 提供 3.7 倍延迟屏障 ，成功迷惑潜在攻击者。 硬件级精度： 利用优化的 CPU...

CVE-2026-74718 devlink: fix net namespace reference leak in reload

In the Linux kernel, the following vulnerability has been resolved: devlink: fix net namespace reference leak in reload devlinknlreloaddoit calls devlinknetnsget, which returns a net with a held reference. When the requested namespace differs from the current one and the reload action is not...

PT-2026-79723

In the Linux kernel, the following vulnerability has been resolved: devlink: fix net namespace reference leak in reload devlink nl reload doit calls devlink netns get, which returns a net with a held reference. When the requested namespace differs from the current one and the reload action is not...

EUVD-2026-62905

In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could cause Splunk Enterprise to reload token-signing keys through the Representational State Transfer REST API. The vulnerability does not affect Splunk Enterprise versions below 10.4. The vulnerability is possible because...

CVE-2026-72325

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path Branch Sampling BRS and Last Branch Record LBR are mutually exclusive hardware features, and users of both are tracked via cpuc-lbrusers. When SVM is toggled on a CPU...

CVE-2026-72325

Technical details of CVE-2026-72325 are not public in the provided documents. Available descriptions summarize the issue but do not expose affected products, versions, or fixes. Monitor for updates from vendors/security advisories.

GO-2023-2095 vulnerabilities

Vulnerabilities for packages: metrics-server, kind, kubeflow-katib, configmap-reload-fips, smarter-device-manager-fips...

GO-2023-2382 vulnerabilities

Vulnerabilities for packages: sops, gosu, aactl, amass, oras, ctop, go-licenses, aws-flb-firehose, go-bindata, k3d, cass-operator, hey, docker-cli, aws-flb-kinesis, cortex, configmap-reload, hubble-ui, sbom-scorecard, go-md2man, nats, render-template, docker-credential-ecr-login,...

CVE-2026-67990

Technical details are not publicly available in the provided documents; monitor for updates.

CVE-2026-68334

In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix iothread race in rxrpcwakeupiothread rxrpcwakeupiothread checks local-iothread before waking it, but then reloads the pointer for wakeupprocess. local-iothread is cleared with WRITEONCE when the I/O thread exits, so th...

CVE-2026-68428

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Fix use-after-free on vendor module reload mmudestroycaches destroys ptelistdesccache and mmupageheadercache, but leaves both pointers unchanged. The pointers live in kvm.ko, and therefore survive when a vendor modu...

EUVD-2026-55614

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Fix use-after-free on vendor module reload mmudestroycaches destroys ptelistdesccache and mmupageheadercache, but leaves both pointers unchanged. The pointers live in kvm.ko, and therefore survive when a vendor modu...

CVE-2026-68428

The CVE describes a use-after-free in KVM’s x86/mmu related to vendor module reloads, where mmu_destroy_caches() leaves pointers to caches (pte_list_desc_cache and mmu_page_header_cache) in kvm.ko. When a vendor module unload occurs while kvm.ko remains loaded, a subsequent cache initialization c...

CVE-2026-68428 KVM: x86/mmu: Fix use-after-free on vendor module reload

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Fix use-after-free on vendor module reload mmudestroycaches destroys ptelistdesccache and mmupageheadercache, but leaves both pointers unchanged. The pointers live in kvm.ko, and therefore survive when a vendor modu...

Cisco IOS XE Software SNMP DoS (cisco-sa-iosxe-snmp-dos-ZAqNm4MD)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability. - A vulnerability in the SNMP subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due ...

CVE-2026-20124

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. This vulnerability is due to improper error handling when parsing...

CVE-2026-20301

A vulnerability in the Extensible Messaging Client Protocol XMCP, also referred to as the External Client protocol, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability ...