Platbox

Platbox UEFI and SMM Assessment Tool Features Platbox is a tool that helps assessing the security of the platform: Dumps the platform registers that are interesting security-wise Flash Locks MMIO and Remapping Locks SMM Base and Locks MSRs RW access to the PCI configuration space of devices. RW t...

SmmExploit

SmmExploit 这是针对 CVE-2021-26943 的一份报告和利用代码，该漏洞是华硕 UX360CA BIOS 版本 303 中存在的内核到 SMM 本地权限提升漏洞。该问题已在 版本 304 中修复。 问题描述 摘要 UX360CA BIOS 版本 303 包含 3 个存在漏洞的模块，允许具有 ring0 权限的攻击者覆盖几乎任意物理内存（包括 SMRAM），并在 SMM 中执行任意代码。 这些模块的标识如下： 名称| GUID| SHA256 ---|---|--- UsbRt| 04EAAAA1-29A1-11D7-8838-00500473D4EB|...

CVE-2026-75810

Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassing driver authentication and sending requests to trigger system management interrupts SMIs. Repeatedly triggering SMI may lead to a denial-of-service DoS condition.Refer to the '...

EUVD-2026-72618

Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassing driver authentication and sending requests to trigger system management interrupts SMIs. Repeatedly triggering SMI may lead to a denial-of-service DoS condition.Refer to the '...

CVE-2026-75810

ASUS Armoury Crate contains an exposed dangerous method or function that allows a local user to bypass driver authentication and send requests to trigger system management interrupts (SMIs) . A single trigger causes a brief system stall; repeatedly triggering SMIs can escalate to a denial-of-serv...

CVE-2026-75810

Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassing driver authentication and sending requests to trigger system management interrupts SMIs. Repeatedly triggering SMI may lead to a denial-of-service DoS condition.Refer to the '...

The vulnerability of the mtk_smi_larb_remove() function in the drivers/memory/mtk-smi.c module of the memory controller driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mtksmilarbremove function in the driver/memory/mtk-smi.c file of the memory driver for the Linux operating system’s kernel is related to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the mtk-smi component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the mtk-smi component in the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-19398

An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash BSOD or BIOS corruption via a crafted software SMI SW SMI request with an oversized length value.Refer to the ' Security Update for ASUS FA507NV / FA507NU...

EUVD-2026-66834

“unsupported-when-assigned.” An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash BSOD or BIOS corruption via a crafted software SMI SW SMI request with an oversized length value.Refer to the ' Security Update for...

CVE-2026-19398

An out-of-bounds write in the SmiFlash SMM module of the ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash (BSOD) or BIOS corruption by sending a crafted software SMI (SW SMI) request with an oversized length value. The CVSS 4.0 score is 6.8 (Medium) , reflecting ...

CVE-2026-19398

An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash BSOD or BIOS corruption via a crafted software SMI SW SMI request with an oversized length value.Refer to the ' Security Update for ASUS FA507NV / FA507NU...

CVE-2026-19398

An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash BSOD or BIOS corruption via a crafted software SMI SW SMI request with an oversized length value.Refer to the ' Security Update for ASUS FA507NV / FA507NU...

Astra Linux – Vulnerability in amd64-microcode

Improper validation in a model-specific register MSR could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution...

CISCO-SA-20180328-SMI

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:16+00:00| seen| https://t.me/informationsec/2591 2026-08-23 00:00:37+00:00| seen| https://t.me/informationsec/2591...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: Memory: mtk-smi – fixed the device leak during the larb probe. Make sure to remove the references made when checking the SMI device during a larb probe, especially in cases of late probe failures e.g., probe deferral or when t...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: Memory: mtk-smi – fixed device leaks during the common probe. Make sure to remove the references made when checking the SMI device during a common probe after a late probe failure e.g., probe deferral, as well as during driver...

SUSE CVE-2025-71287

In the Linux kernel, the following vulnerability has been resolved: memory: mtk-smi: fix device leak on larb probe Make sure to drop the reference taken when looking up the SMI device during larb probe on late probe failure e.g. probe deferral and on driver unbind...

SUSE CVE-2025-71288

In the Linux kernel, the following vulnerability has been resolved: memory: mtk-smi: fix device leaks on common probe Make sure to drop the reference taken when looking up the SMI device during common probe on late probe failure e.g. probe deferral and on driver unbind...

CVE-2025-71287

A flaw was found in the Linux kernel's mtk-smi driver. This vulnerability occurs due to a failure to properly drop a reference to the SMI device during larb probe on late probe failure or driver unbind. An attacker could potentially exploit this memory leak to cause resource exhaustion, leading t...