SMShell

SMShell SMS 기반 셸의 PoC입니다. 모바일 광대역이 가능한 컴퓨터에서 SMS로 명령을 보내고 응답을 받습니다. 이 도구는 Markus Vervier가 주도한 eSIM 보안 영향에 대한 연구 중 영감을 받아 만들어졌으며, Offensivecon 2023에서 발표되었습니다. 면책 조항 이것은 완전한 C2가 아니라 SMS를 통해 원격으로 명령을 실행하기 위한 간단한 개념 증명입니다. 요구 사항 셸이 작동하려면 SMS를 보낼 수 있는 장치 두 대가 필요합니다. 피해자의 컴퓨터에는 물리적 SIM 또는 eSIM이 배포된 WWA...

kernel: Linux kernel t7xx WWAN driver: Denial of Service via buffer overflow

A flaw was found in the Linux kernel's t7xx WWAN driver. A malicious, buggy, or compromised modem firmware can exploit this by sending packets with excessive fragments. This leads to a buffer overflow in the skbshinfoskb-frags array, corrupting adjacent memory. This can result in kernel crashes o...

kernel: Linux kernel t7xx WWAN driver: Denial of Service via buffer overflow

A flaw was found in the Linux kernel's t7xx WWAN driver. A malicious, buggy, or compromised modem firmware can exploit this by sending packets with excessive fragments. This leads to a buffer overflow in the skbshinfoskb-frags array, corrupting adjacent memory. This can result in kernel crashes o...

ALSA-2026:68570 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel t7xx WWAN driver: Denial of Service via buffer overflow CVE-2026-23172 kernel: xfrm: hold dev ref until after transportfinish NFHOOK CVE-2026-31663 kernel: RDMA/rxe: Fix race...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net: wwan: t7xx: Fixed the FSM command timeout issue When the driver processes the internal state change command, it uses an asynchronous thread to handle the command operation. If the main thread detects that the task has tim...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: net: wwan: Fixed a global out-of-bounds read in wanrtnlpolicy. The variable wanrtnllinkops assigns a larger value to maxtype, leading to a global out-of-bounds read when parsing netlink attributes. This is exactly the same bug...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net: wwan: t7xx: Fixed 64-bit access splitting to resolve alignment issues. Some registers are aligned at a 32-bit boundary, causing alignment errors on 64-bit platforms. Unable to handle kernel paging requests at the virtual...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: USB: wdm: the race between wdmopen and wdmwwanportstop has been eliminated. Clearing WDMWWANINUSE must be the last action; otherwise, we may open a device whose URBs User-Role-Based Services are still compromised...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: wwanhwsim: Fixed a possible memory leak in wwanhwsimdevnew. When a fault is injected while probing a module, if deviceregister fails, and the refcount of the kobject is not decreased to 0, the name allocated in devsetname may ...

CVE-2026-69862

Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally...

CVE-2026-69862

CVE-2026-69862 is an out-of-bounds read in the Windows Wireless Wide Area Network Service that allows an authorized local attacker to disclose information . The CVSS v3.1 score is 5.5 (Medium) with High confidentiality impact, no integrity or availability impact, and requires low privileges over ...

EUVD-2026-73055

Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally...

PT-2026-87764

Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally...

SUSE CVE-2026-72059

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: destroy DMA pool on CLDMA late init failure t7xxcldmalateinit creates mdctrl-gpddmapool before initializing the TX and RX rings. If any ring initialization fails, the error path frees the already initialized ring...

SUSE CVE-2026-72029

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: bound device offsets in the MUX downlink decoder muxdladbdecode walks a chain of aggregated datagram tables using offsets and lengths taken from the modem. firsttableindex, nexttableindex, tablelength,...

SUSE CVE-2026-74263

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: check skbclone in control TX t7xxportctrltx clones each skb fragment before passing it to the port transmit path. The clone is used immediately to set cloned-len, so an skbclone failure results in a NULL pointer...

The vulnerabilities of the functions ipc_imem_run_state_worker() (drivers/net/wwan/iosm/iosm_ipc_imem.c) and ipc_imem_wwan_channel_init() (drivers/net/wwan/iosm/iosm_ipc_imem_ops.c) of the Linux kernel’s network device drivers allow a attacker to cause a service failure.

The vulnerabilities of the functions ipcimemrunstateworker drivers/net/wwan/iosm/iosmipcimem.c and ipcimemwwanchannelinit drivers/net/wwan/iosm/iosmipcimemops.c of the Linux kernel’s network device drivers are related to the use of pointers. Exploiting these vulnerabilities could allow an attacke...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: Device offsets in the MUX downlink decoder were incorrectly handled. The muxdladbdecode function iterates through a chain of aggregated datagram tables, using offsets and lengths provided by the modem. Values suc...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: Destroying the DMA pool on CLDMA during late initialization failure The function t7xxcldmalateinit creates mdctrl-gpddmapool before initializing the TX and RX rings. If any of these ring initializations fail, the...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net: usb: qmiwwan: fix a memory leak for non-IP packets. Free the unused skb objects when no non-IP packets arrive...