DirtyClone

DirtyClone CVE-2026-43503 - Python PoC Non-official Python port of DirtyClone — a Linux kernel local privilege escalation vulnerability. This repository contains a working Proof of Concept that allows an unprivileged local user to gain root privileges by exploiting page-cache corruption via clone...

optee_ftpm

OP-TEE integration for the MS TPM 2.0 Reference Implementation fTPM fTPM TA The fTPM Trusted Application TA provides a secure firmware implementation of a TPM using the MS reference implementation. The platform specific integration code is kept in this repository. This is a fork from the the MS...

dirtyclone-exploit

DirtyClone Exploit Framework CVE-2026-46331 — Linux Kernel Local Privilege Escalation TC pedit + IPsec TEE Page Cache Corruption · Affected kernels: ≤ 6.12.9 root@kitploit: ╔═══════════════════════════════════════════════════════════════╗ ║ ║ ║ | \ | | / | | ║ ║ | | | | | '| | | | | | | |/ | ' \ ...

syzkaller

syzkaller - kernel fuzzer syzkaller siːzˈkɔːlə is an unsupervised coverage-guided kernel fuzzer. Supported OSes: FreeBSD, Fuchsia, gVisor, Linux, NetBSD, OpenBSD, Windows. Mailing list: [email protected] join on web or by email. Found bugs: Darwin/XNU, FreeBSD, Linux, NetBSD, OpenBSD, Window...

CVE-2026-92701

trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS aTLS Intel TDX verification path does not copy the expected current-session freshness value into the TDX quote-body policy before quote validation, so structurally valid TDX QuoteV4 Evidence is...

TEE-reversing

TEE 기초 및 일반 TEETrusted Execution Environment 소개: ARM의 TrustZone https://blog.quarkslab.com/introduction-to-trusted-execution-environment-arms-trustzone.html TEE 소개 원제: TEEを中心とするCPUセキュリティ機能の動向 https://seminar-materials.iijlab.net/iijlab-seminar/iijlab-seminar-20181120.pdf ARM TrustZone 공격...

cmcp

cMCP: 기밀 MCP 런타임 TEE 내부에서 MCP 도구 정책을 강제하며, 관리 대상 에이전트가 해당 정책에 접근할 수 없도록 함 빠른 시작 · 아키텍처 · 구성 · CLI · 변경 로그 개발자 프리뷰 - 2026년 6월 23일 기밀 컴퓨팅 서밋Confidential Computing Summit에서 공개되었습니다. v1.0 이전에는 호환성이 깨지는 변경 사항이 있을 수 있습니다. 현재 제공되는 기능과 로드맵에 있는 기능의 정확한 구분은 STATUS.md를 참조하세요. cMCP기밀 MCP 런타임는 MCP를 실행하는 안전하고...

CVE-2026-43503

CVE-2026-43503 DirtyClone - PoC - SecurewithUmer POC of DirtyClone — a Linux kernel local privilege escalation vulnerability. This repository contains a working Proof of Concept that allows an unprivileged local user to gain root privileges by exploiting page-cache corruption via cloned socket...

CVE-2026-33317

CVE-2026-33317 OP-TEE PKCS11 PoC このリポジトリには、CVE-2026-33317 / GHSA-8cqw-mg7v-c9p9 に関するNormal Worldの概念実証（PoC）、再現手順、および取得したログが含まれています。 公式のOP-TEEアドバイザリでは、PKCS11CMDGETATTRIBUTEVALUE に対する entrygetattributevalue における検証欠落が説明されています。このバグにより、PKCS11...

CVE-2026-56941

In multiple functions of fpcteehal.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2019-1010298

CVE-2019-1010298 OP-TEE-2018-0011 Used in the seccamp lecture...

CVE-2018-9411

CVE-2018-9411 MediaCasService를 위한 CVE-2018-9411 익스플로잇 코드입니다. 이 익스플로잇은 교육 또는 방어 목적으로만 제공되며, 악의적이거나 공격적인 용도로 사용되어서는 안 됩니다. 취약점과 익스플로잇에 대한 전체 글은 Zimperium 블로그에서 확인할 수 있습니다. 질문이 있으시면 트위터@tamirzb로 DM 보내주세요. 빌드 참고: 이 익스플로잇은 특정 기기 및 빌드Pixel 2, 2018년 5월 보안 업데이트에서만 작동하도록 의도되었습니다 핑거프린트:...

Astra Linux – Vulnerability in Linux, Linux 5.10

A use-after-free exists in the drivers/tee/teeshm.c file within the TEE subsystem of the Linux kernel, as of version 5.15.11. This issue arises due to a race condition during the teeshmgetfromid function, when attempting to free a shared memory object...

CVE-2022-46152

CVE-2022-46152 OP-TEE OScleanupshmrefs Out-of-Bounds Read — Reproduction Environment Reference: https://optee.readthedocs.io/en/latest/building/devices/qemu.htmlqemu-v8 Security Advisory: https://github.com/OP-TEE/opteeos/security/advisories/GHSA-65w8-6mrg-52g7 Vulnerability Overview Field| Detai...

The vulnerability of the `register_shm_helper()` function in the `drivers/tee/tee_shm.c` driver for the trusted execution environment of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the registershmhelper function in the drivers/tee/teeshm.c file of the Linux kernel’s trusted execution environment driver relates to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to cause a service...

CVE-2026-80524

A flaw was found in the Linux kernel's OP-TEE Open Portable Trusted Execution Environment Fast Fault-tolerant Architecture FFA component. A local attacker could exploit a missing null check when allocating protected memory. Under specific memory pressure conditions, this could lead to a null...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fixed the kernel panic caused by incorrect error handling. The error path when failing to register devices on the TEE bus contains a bug that leads to kernel panic. The details are as follows: 15.398930 Unable to hand...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: tee: added a overflow check in registershmhelper When special lengths are provided by the user space, registershmhelper may cause an integer overflow when calculating the number of pages covered by a given user space memory regio...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: tee: amdtee: fixed an issue where ISERR returned NULL instead of an error pointer. The getfreepages function does not return error pointers; it returns NULL instead. Therefore, this condition needs to be corrected to avoid NUL...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100743)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100743 advisory. In the Linux kernel, the following vulnerability has been resolved: tee: optee: prevent use-after-free when the client exits before the supplicant Commit 70b0d6b0a19...