firmware-mod-kit

免责声明 从 googlecode.com/p/firmware-mod-kit 自动导出 固件修改工具包 本工具包是一套脚本和工具，用于提取和重建基于 Linux 的固件映像。 将固件映像提取为其组成部件 用户对固件文件系统或 Web UI（webif）进行所需修改 重建固件 将修改后的固件刷写到设备上并使其变砖（哈哈） 警告：使用本工具包后你的设备将会变砖（也许不会，但最好还是说会）。变砖意味着设备实际上变成了一块无功能的“砖头”。有时无需硬件修改即可恢复。有时需要硬件修改（例如在 PCB 上焊接串行或 JTAG 接头）。有时根本不可行，或者总恢复成本超过设备本身价值。...

CVE-2026-79551-Tenda

CVE-2026-79551 Clave privada TLS embebida en Tenda ID de CNVD: CNVD-2026-25884 Fabricante: Tenda Technology Co., Ltd. Producto: Grabador de video en red NVR4H versión de hardware CH3V2.1 Firmware: V27.5.58.6 Clase: CWE-321 — Uso de clave criptográfica embebida Descripción general El firmware del...

CVE-2025-47827

CVE-2025-47827 针对 CVE-2025-47827 的概念验证与漏洞报告。 目录 描述 披露 影响 检测 缓解措施 二进制文件 概念验证 资源 描述 在 v11 之前的 IGEL OS 中，Secure Boot 可被绕过，原因是 igel-flash-driver 模块未正确验证密码学签名。最终，一个精心构造的根文件系统可以从未经验证的 SquashFS 镜像中挂载。 IGEL OS 10 中 Linux 内核模块 igel-flash-driver 对密码学签名验证不当，允许恶意行为者通过启动由 Microsoft 第三方 UEFI CA 签名的 shim 来绕过...

AlmaLinux 9.2 [TuxCare] Security Update: squashfs-tools (ALMALINUX9.2:CLSA-2025:1751888935)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1751888935 advisory. - squashfsopendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs...

Rocky Linux 8.8 [CIQ] Security Update: squashfs-tools (ciqsa-2026_0309)

The Rocky Linux 8.8 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260309 advisory. This advisory aggregates security fixes for the squashfs-tools SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2021-41072. Tenable has extracted the preceding...

Rocky Linux 9 [CIQ] Security Update: squashfs-tools / squashfs-tools-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_2396)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242396 advisory. squashfs-tools: unvalidated filepaths allow writing outside of destination CVE-2021-40153 squashfs-tools: possible Directory Traversal via symbolic link...

CentOS Linux 7.9 [CIQ] Security Update: squashfs-tools Multiple Vulnerabilities (ciqsa-2026_0738)

The CentOS Linux 7.9 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260738 advisory. This advisory aggregates security fixes for the squashfs-tools SRPM in CIQ CentOS Bridge 7.9. It addresses 2 CVEs: CVE-2021-40153, CVE-2021-41072. Tenab...

Rocky Linux 9.2 [CIQ] Security Update: squashfs-tools (ciqsa-2026_1327)

The Rocky Linux 9.2 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20261327 advisory. This advisory aggregates security fixes for the squashfs-tools SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2021-40153. Tenable has extracted the preceding...

Rocky Linux 9.2 [CIQ] Security Update: squashfs-tools (ciqsa-2026_0494)

The Rocky Linux 9.2 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260494 advisory. This advisory aggregates security fixes for the squashfs-tools SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2021-41072. Tenable has extracted the preceding...

Rocky Linux 8.6 [CIQ] Security Update: squashfs-tools (ciqsa-2026_0261)

The Rocky Linux 8.6 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260261 advisory. This advisory aggregates security fixes for the squashfs-tools SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2021-41072. Tenable has extracted the preceding...

Rocky Linux 8 [CIQ] Security Update: squashfs-tools / squashfs-tools-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_3139)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243139 advisory. squashfs-tools: unvalidated filepaths allow writing outside of destination CVE-2021-40153 squashfs-tools: possible Directory Traversal via symbolic link...

AlmaLinux 9.6 [TuxCare] Security Update: kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2025:1766488019)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1766488019 advisory. - In the Linux kernel, the following vulnerability has been resolved: Squashfs: sanity check symbolic link size Syzkiller reports a...

Rocky Linux 9.6 [TuxCare] Security Update: kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2025:1766488019)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1766488019 advisory. - In the Linux kernel, the following vulnerability has been resolved: Squashfs: sanity check symbolic link size Syzkiller reports ...

CentOS Linux 7.9 [CIQ] Security Update: squashfs-tools (ciqsa-2026_0739)

The CentOS Linux 7.9 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260739 advisory. This advisory aggregates security fixes for the squashfs-tools SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2021-40153. Tenable has extracted the...

EUVD-2026-89431

U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfsreaddirectorytable function when allocating the directory table buffer. Attackers can supply a crafted SquashFS image with an attacker-controlled superblock metablkscount value that causes heap buffer under-allocation and...

CentOS Linux 7 [TuxCare] Security Update: squashfs-tools (CENTOS7:CLSA-2026:1777544697)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1777544697 advisory. - squashfsopendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to create the...

AZL-105723 CVE-2026-71973 affecting package qemu 10.1.0-1

U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfsreaddirectorytable function when allocating the directory table buffer. Attackers can supply a crafted SquashFS image with an attacker-controlled superblock metablkscount value that causes heap buffer under-allocation and...

ROS-20260928-73-0039

The vulnerability of the squashfsread inode function in the SquashFS file system of Linux operating systems is related to the comparison of numerical ranges without any minimum checks. Exploiting this vulnerability could allow a attacker to cause a service failure...

BIT-RCLONE-2026-79775 rclone Archive Backend SquashFS Parser Denial of Service

rclone versions = v1.72.0 and = v1.74.4 fixed in v1.75.0 contain multiple denial-of-service vulnerabilities in the archive backend's SquashFS parser, which relies on the github.com/diskfs/go-diskfs dependency. The parser fails to validate attacker-controlled superblock and metadata values before...

PT-2026-99014

rclone versions = v1.72.0 and = v1.74.4 fixed in v1.75.0 contain multiple denial-of-service vulnerabilities in the archive backend's SquashFS parser, which relies on the github.com/diskfs/go-diskfs dependency. The parser fails to validate attacker-controlled superblock and metadata values before...