skitter-creek-bath-salts

skitter-creek-bath-salts DRAMスクランブリングでCPU上のすべて を解錠する — PSP、C6、マイクロコード、 SMM、そして仕様書が省いたその他すべて。 &x == &x。 通常は。 DRAMコントローラをいじれば、アドレスをメモリ内の好きな場所に着地させることができる。skitter-creek-bath-saltsはメモリ階層の最下層を改変し、物理DRAMアドレス変換を再配線する。これによりプラットフォームメモリがスクランブルされ、DRAMの保護領域 — カーネルにさえ見えないカーブアウト —...

smm_usbrt_poc

UsbRt SMM 권한 상승 이것은 CVE-2017-5721 취약점의 익스플로잇을 시연하는 개념 증명 코드입니다. 이 PoC는 Machine Check Exception이 발생하여 시스템을 완전히 정지시킵니다. 필요한 것은 CHIPSEC Framework가 설치되어 있어야 합니다. 또한 Intel 장치를 사용하는 경우 /etc/default/grub에 GRUBCMDLINELINUXDEFAULT="quiet splash acpi=off"를 추가하는 것을 잊지 마세요. 사용 예시: root@kitploit: sudo python...

CVE-2026-81627

A flaw in QEMU 's VAPIC setup hypercall (hw/i386/vapic.c) fails to validate that the writable RAM alias remains within the option ROM window. A privileged guest user on a Q35/KVM machine can position this alias over locked SMRAM , bypassing chipset D_LCK protection and injecting code into System ...

Platbox

Platbox UEFI 및 SMM 평가 도구 기능 Platbox는 플랫폼의 보안을 평가하는 데 도움을 주는 도구입니다: 보안 측면에서 중요한 플랫폼 레지스터를 덤프합니다 플래시 잠금 MMIO 및 리매핑 잠금 SMM 베이스 및 잠금 MSR 장치의 PCI 구성 공간에 대한 읽기/쓰기 액세스. 물리 메모리 및 가상 메모리 읽기/쓰기. 물리 메모리 할당 및 사용자 모드로 메모리 매핑을 허용합니다. MSR 읽기 및 쓰기. SPI 플래시 내용BIOS을 파일로 덤프합니다. 기본적인 SMI 퍼저. S3 부트스크립트SMM-Lockbox에서를...

SmmBackdoor

UEFIベースのプラットフォーム向けSMMバックドア !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! これはレガシーで放棄されたプロジェクトです。現在のバージョンの バックドアについては、SMM Backdoor Next Genプロジェクトページとその ドキュメントを確認してください: https://github.com/Cr4sh/SmmBackdoorNg !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!...

SmmExploit

SmmExploit これは、ASUS UX360CA BIOSバージョン303におけるカーネルからSMMへのローカル権限昇格の脆弱性であるCVE-2021-26943に関するレポートとエクスプロイトです。この問題はバージョン304で修正されました。 問題の説明 概要 UX360CA BIOSバージョン303には、ring0権限を持つ攻撃者がSMRAMを含むほぼ任意の物理メモリを上書きし、SMM内で任意のコードを実行できるようにする3つの脆弱なモジュールがあります。 これらのモジュールは以下のように識別できます: 名前| GUID| SHA256 ---|---|--- UsbRt|...

microcode_ctl security, bug fix, and enhancement update

An update is available for microcodectl. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The microcodectl packages provide microcode updates for Intel and AMD...

microcode_ctl security, bug fix, and enhancement update

An update is available for microcodectl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The microcodectl packages provide microcode updates for Intel and AMD...

AlmaLinux 9 : microcode_ctl (ALSA-2026:68011)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:68011 advisory. kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 kernel: microcodectl: Intel Xeon 6...

RockyLinux 9 : microcode_ctl (RLSA-2026:68011)

The remote RockyLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:68011 advisory. kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 kernel: microcodectl: Intel Xeon 6...

RockyLinux 10 : microcode_ctl (RLSA-2026:67979)

The remote RockyLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:67979 advisory. kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 kernel: microcodectl: Intel Xeon 6...

AlmaLinux 10 : microcode_ctl (ALSA-2026:67979)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:67979 advisory. kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 kernel: microcodectl: Intel Xeon 6...

kernel: microcode_ctl: Intel Xeon 6 Processors: Privilege escalation via improper memory range handling in SMM

A flaw was found in IntelR XeonR 6 processors when using IntelR TDX within System Management Mode SMM. Improper handling of overlap between protected memory ranges may allow a local attacker with privileged user access to escalate privileges. This vulnerability could lead to high impact on...

Important: Red Hat Security Advisory: microcode_ctl security, bug fix, and enhancement update

An update for microcodectl is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Important: Red Hat Security Advisory: microcode_ctl security, bug fix, and enhancement update

An update for microcodectl is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

kernel: microcode_ctl: Intel Xeon 6 Processors: Privilege escalation via improper memory range handling in SMM

A flaw was found in IntelR XeonR 6 processors when using IntelR TDX within System Management Mode SMM. Improper handling of overlap between protected memory ranges may allow a local attacker with privileged user access to escalate privileges. This vulnerability could lead to high impact on...

CVE-2025-55575

smm-panel-sqliCVE-2025-55575 SMM 패널에 대한 시간 기반 SQL 인젝션 탐지 개요 이 템플릿은 HTTP POST 요청을 통해 /ajaxdata로 전송되는 SMM 패널의 servicedetail 파라미터에서 시간 기반 SQL 인젝션 취약점을 탐지합니다. 악용 시 원격 공격자가 민감한 데이터에 접근하거나 권한을 상승시킬 수 있습니다. 저자: Aether 심각도: 치명적 태그: sqli, mysql, timing, dork:'intitle:"1 SMM Panel "' "smm panel" 참조:...

ALSA-2026:67979 Important: microcode_ctl security, bug fix, and enhancement update

The microcodectl packages provide microcode updates for Intel and AMD processors. Security Fixes: kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 kernel: microcodectl: Intel Xeon 6 Processors: Privilege escalation via improper memory...

RHEL 9 : microcode_ctl (RHSA-2026:68011)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:68011 advisory. The microcodectl packages provide microcode updates for Intel and AMD processors. Security Fixes: kernel: hypervisor: Intel Processors:...

RHEL 10 : microcode_ctl (RHSA-2026:67979)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:67979 advisory. The microcodectl packages provide microcode updates for Intel and AMD processors. Security Fixes: kernel: hypervisor: Intel Processors:...