Chimera

Chimera 하드웨어 에뮬레이션 및 근접 공격 왜 Hak5 장비는 무겁고 눈에 띕니다. 제 폰에는 완전한 Linux 커널이 들어 있어서, ConfigFS를 통해 HID 에뮬레이션, RNDIS, 대용량 저장소 등 모든 작업을 동일하게 수행하도록 만들었습니다. 추가 하드웨어도, 가방 밖으로 늘어지는 케이블도 없습니다. 대상에 연결하고 페이로드를 선택한 뒤 실행하세요. 키 입력은 /dev/hidg0로 직접 전달됩니다. 중간에 아무것도 없습니다. 기능 ConfigFS를 통한 Raw HID — Android의 USB 스택을 완전히...

tap-ducky

TapDucky - 안드로이드 USB HID 키스트로크 인젝터 TapDucky - 안드로이드 USB HID 키스트로크 인젝터 루팅된 안드로이드에서 USB GadgetConfigFS을 지원하는 오픈소스 DuckyScript 실행기 TapDucky 는 USB 키보드, 마우스 또는 복합 HID 장치를 에뮬레이션하여 DuckyScript를 생성, 사용자 지정, 예약 및 실행할 수 있게 해주며, 승인된 테스트 및 자동화를 위해 설계되었습니다. 페이로드 매개변수화, 여러 스케줄러 트리거, 실행 로그, GitHub 기반 페이로드 라이브러리...

AutoGadgetFS

이더리움 기부 : 0xA919e40ddB0563918dDc174320D91992e0048477 목차 1. AutoGadgetFS란 무엇인가? 2. 요구사항 3. 설정 a. 기기 테스트 전용 b. 중간에 최소 agfs 설정 c. 디버깅 지원을 포함한 완전한 중간 agfs 설정 4. USB 기기 클래스 지원 5. 기능 6. 로드맵 7. 설치 a. Linux b. Raspberry Pi Zero with WIFI 8. AutogadgetFS 튜토리얼 9. 스크린샷 10. Youtube 재생목록 11. Slack 12. 지원 13. ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: frndis: Protect RNDIS options with a mutex The class/subclass/protocol options are susceptible to race conditions, as they can be accessed concurrently through configfs. A mutex should be used to protect these option...

Rocky Linux 9.6 [TuxCare] Security Update: kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1779434490)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779434490 advisory. - In the Linux kernel, the following vulnerability has been resolved: configfs: fix a race in configfs,unregistersubsystem When...

SUSE CVE-2026-97949

In the Linux kernel, the following vulnerability has been resolved: configfs: unhash the dentry before dropping the item in rmdir configfsgetconfigitem treats a hashed dentry as proof that sd-selement is a live configitem. configfsrmdir breaks that: simplermdir leaves the dentry hashed, the last...

SUSE CVE-2026-97950

In the Linux kernel, the following vulnerability has been resolved: configfs: pin the symlink target's dirent instead of chasing -cidentry createlink reads the target's configfsdirent from item-cidentry-dfsdata, relying on the item reference taken by gettarget. That reference pins the item, not i...

CVE-2026-97950

A flaw was found in the Linux kernel's configfs filesystem. A local user could exploit a race condition between creating a symbolic link and deleting its target directory to cause a Denial of Service DoS. When this race condition occurs, the kernel attempts to access a freed directory entry, whic...

CVE-2026-97949

A flaw was found in the Linux kernel's configfs filesystem. A race condition between directory removal and symbolic link creation can result in a use-after-free vulnerability, where the system attempts to access memory after it has been released. A local user can exploit this flaw by concurrently...

DEBIAN-CVE-2026-97949

In the Linux kernel, the following vulnerability has been resolved: configfs: unhash the dentry before dropping the item in rmdir configfsgetconfigitem treats a hashed dentry as proof that sd-selement is a live configitem. configfsrmdir breaks that: simplermdir leaves the dentry hashed, the last...

DEBIAN-CVE-2026-97950

In the Linux kernel, the following vulnerability has been resolved: configfs: pin the symlink target's dirent instead of chasing -cidentry createlink reads the target's configfsdirent from item-cidentry-dfsdata, relying on the item reference taken by gettarget. That reference pins the item, not i...

AZL-104555 CVE-2026-97949 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: configfs: unhash the dentry before dropping the item in rmdir configfsgetconfigitem treats a hashed dentry as proof that sd-selement is a live configitem. configfsrmdir breaks that: simplermdir leaves the dentry hashed, the last...

AZL-104570 CVE-2026-97950 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: configfs: pin the symlink target's dirent instead of chasing -cidentry createlink reads the target's configfsdirent from item-cidentry-dfsdata, relying on the item reference taken by gettarget. That reference pins the item, not i...

CVE-2026-97950

In the Linux kernel, the following vulnerability has been resolved: configfs: pin the symlink target's dirent instead of chasing -cidentry createlink reads the target's configfsdirent from item-cidentry-dfsdata, relying on the item reference taken by gettarget. That reference pins the item, not i...

CVE-2026-97949

In the Linux kernel, the following vulnerability has been resolved: configfs: unhash the dentry before dropping the item in rmdir configfsgetconfigitem treats a hashed dentry as proof that sd-selement is a live configitem. configfsrmdir breaks that: simplermdir leaves the dentry hashed, the last...

UBUNTU-CVE-2026-97950

In the Linux kernel, the following vulnerability has been resolved: configfs: pin the symlink target's dirent instead of chasing -cidentry createlink reads the target's configfsdirent from item-cidentry-dfsdata, relying on the item reference taken by gettarget. That reference pins the item, not i...

UBUNTU-CVE-2026-97949

In the Linux kernel, the following vulnerability has been resolved: configfs: unhash the dentry before dropping the item in rmdir configfsgetconfigitem treats a hashed dentry as proof that sd-selement is a live configitem. configfsrmdir breaks that: simplermdir leaves the dentry hashed, the last...

CVE-2026-97949 configfs: unhash the dentry before dropping the item in rmdir

In the Linux kernel, the following vulnerability has been resolved: configfs: unhash the dentry before dropping the item in rmdir configfsgetconfigitem treats a hashed dentry as proof that sd-selement is a live configitem. configfsrmdir breaks that: simplermdir leaves the dentry hashed, the last...

CVE-2026-97950 configfs: pin the symlink target's dirent instead of chasing ->ci_dentry

In the Linux kernel, the following vulnerability has been resolved: configfs: pin the symlink target's dirent instead of chasing -cidentry createlink reads the target's configfsdirent from item-cidentry-dfsdata, relying on the item reference taken by gettarget. That reference pins the item, not i...

CVE-2026-97950

The Linux kernel contains a vulnerability in configfs where create_link() incorrectly relies on an item reference that pins the item but not its dentry. A race condition between a symlink creation and an rmdir of its target can cause configfs_remove_dir() to release the dentry via simple_rmdir() ...