IPC-Memory-Mac-OSX-Exploit

IPC-Memory-Mac-OSX-Exploit IPC Local Security Bypass Межпроцессное взаимодействие через разделяемую память — это концепция, при которой два или более процесса могут иметь доступ к общей памяти. Связь осуществляется через эту разделяемую память, и изменения, внесённые одним процессом, могут быть...

Triple_fetch

triplefetch - ianbeer https://bugs.chromium.org/p/project-zero/issues/detail?id=1247 Ceci est un exploit pour CVE-2017-7047, une erreur de logique dans libxpc qui permettait aux expéditeurs de messages malveillants d'envoyer des objets xpcdata soutenus par de la mémoire partagée. Les consommateur...

nanoclaw

Un assistant IA qui exécute des agents en toute sécurité dans leurs propres conteneurs. Léger, conçu pour être facilement compris et entièrement personnalisé selon vos besoins. nanoclaw.dev • docs • 中文 • 日本語 • 한국어 • • Pourquoi j'ai créé NanoClaw OpenClaw est un projet impressionnant, mais je...

triton-cve-2025-23320

CVE-2025-23320の実証 このリポジトリはCVE-2025-23320を再現し、CWE-209（機密情報を含むエラーメッセージの生成）を実証します（CVSSスコア: 7.5）。この脆弱性は、NVIDIA Triton推論サーバー25.06以前のすべてのバージョンに存在します。 このDockerセットアップは、NVIDIA Triton推論サーバーと攻撃クライアントを含むネットワークを実行します。この環境はクライアントがLinux上で実行されることも保証するため、CVEはすべてのオペレーティングシステムで再現可能です。 ビルド/実行方法 docker compose...

CVE-2026-58094

The FIOSSHMLPGCNF ioctl2 operation configures the page size for a largepage shared memory object. This is intended to be used immediately after creating the object, before any memory is allocated for the object. The handler checked whether a page size had already been configured without holding t...

CVE-2026-58094 TOCTOU race in POSIX shared memory large page configuration

The FIOSSHMLPGCNF ioctl2 operation configures the page size for a largepage shared memory object. This is intended to be used immediately after creating the object, before any memory is allocated for the object. The handler checked whether a page size had already been configured without holding t...

EUVD-2026-66253

The FIOSSHMLPGCNF ioctl2 operation configures the page size for a largepage shared memory object. This is intended to be used immediately after creating the object, before any memory is allocated for the object. The handler checked whether a page size had already been configured without holding t...

CVE-2026-58094

FreeBSD is affected by a TOCTOU race condition in the posixshm module, specifically in the FIOSSHMLPGCNF ioctl(2) handler, which checks whether a largepage shared memory object's page size has been configured without holding the rangelock. Two concurrent unprivileged callers can both observe an u...

CVE-2022-2590-analysis

CVE-2022-2590, Dirty COW limitato a shmem versione del kernel Linux: Linux/x86 6.0.0-rc1 commit 37887783b3fef877bf34b8992c9199864da4afcb Introduzione: questa vulnerabilità consente all'attaccante di scrivere contenuto arbitrario in una pagina di memoria condivisa di sola lettura, facendo soddisfa...

FreeBSD -- TOCTOU race in POSIX shared memory large page configuration

Problem Description: The FIOSSHMLPGCNF ioctl2 operation configures the page size for a largepage shared memory object. This is intended to be used immediately after creating the object, before any memory is allocated for the object. The handler checked whether a page size had already been...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ipc: fixed to protect IPCS lookups using RCU. syzbot reported that it discovered a use-after-free vulnerability. 0 0: https://lore.kernel.org/all/[email protected]/ idrforeach is protected by rwsem, but...

CVE-2026-74584

A flaw was found in the Linux kernel's RDMA/bnxtre component. A local attacker with access to the RDMA device could exploit this vulnerability due to a failure to zero out a shared memory page before exposing it to userspace. This could lead to information disclosure, allowing the attacker to rea...

CVE-2026-74451

A flaw was found in the drm/panthor component of the Linux kernel. The ifacefwtocpuaddr function, responsible for validating firmware interface structure sizes, does not adequately check if the firmware-provided Microcontroller Unit MCU virtual address fits entirely within the shared memory...

CVE-2026-49427

Pages belonging to largepage shared memory objects were not explicitly wired. When sendfile2 transmitted such an object with the SFNOCACHE flag, it freed the underlying pages after transmission even though existing mappings still referred to them. An unprivileged local user can abuse the bug to...

SUSE CVE-2026-74451

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: validate firmware interface structure sizes ifacefwtocpuaddr only checks that the firmware-provided MCU virtual address points inside the shared section. The returned pointer is later used as a full firmware interfac...

UBUNTU-CVE-2026-74451

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: validate firmware interface structure sizes ifacefwtocpuaddr only checks that the firmware-provided MCU virtual address points inside the shared section. The returned pointer is later used as a full firmware interfac...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: mm, shmem: prevent infinite loop on truncate race When truncating a large swap entry, shmemfreeswap returns 0 when the entry’s index does not match the given index due to lookup alignment. The failure fallback path checks whether...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: shmem: fixed the issue where renaming failed due to insufficient memory; MapleTree insertions may fail if there is severely low memory available; simpleoffsetrename does not handle failures properly when encountering such...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: For mm/shmem and swap: The race between the truncate operation and the swap entry splitting has been fixed. The helper function for shmem swap does not handle the order of swap entries correctly. It uses xacmpxchgirq to erase...

CVE-2026-64566

A flaw was found in the Linux kernel's iptfs module, which handles network packet processing. When copying shared packet fragments, a critical flag indicating shared memory is not correctly propagated. This can lead to memory corruption within the kernel, potentially causing the system to crash a...