12 matches found
CyberMeowfiaNS
CyberMeowfia Android 内核研究 本仓库整理 Android 内核样本分析的方法、工具和案例记录,主题沿用 CyberMeowfia。研究主线是 CVE-2026-43499 与 CVE-2026-43074。内容是概念验证与方法说明:如何判断根因、绑定精确身份、选择路线、记录证据,以及如何解释成功或失败。 范围 文档、离线分析工具、案例矩阵、按 KMI 归档的参考源码。 结论绑定精确 kernelsha256 与证据等级;同 KMI 不能替代身份核验。 不含设备镜像、预编译 payload 或一键执行包。 阅读顺序 1. 总览 — 两条路线与 KMI 分轨 2. 范围...
badepoll-selinux-disabler
badepoll-selinux-disabler 从 CVE-2026-43074 eventpoll UAF 利用中独立提取的 SELinux 禁用阶段。它竞态利用 eventpoll 循环深度检查(epgetupwardsdepthproc),将一个零写入 selinuxstate.enforcing,通过单字节内核写入将设备切换到 Permissive 模式。这仅包含 MAC 禁用原语——不包含提权。 !WARNING 内核漏洞概念验证。可能导致内核崩溃、数据损坏或设备状态不一致。仅在你拥有或有权测试的设备上运行。请先备份。 来源 从 NebuSec 的完整 PoC...
Virtuozzo Infrastructure 7.2 Hotfix 5 (7.2.0-267)
This update delivers security fixes. Vulnerability id: VSTOR-137729 A security fix for CVE-2026-43499. Vulnerability id: VSTOR-137957 Security fixes for CVE-2026-46242 and CVE-2026-43074. Vulnerability id: VSTOR-139815 A security fix for CVE-2026-52993. Vulnerability id: VSTOR-139816 A security f...
MiracleLinux 9 : kernel-5.14.0-687.23.1.el9_8 (AXSA:2026-1569:64)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1569:64 advisory. kernel: eventpoll: defer struct eventpoll free to RCU grace period CVE-2026-43074 kernel: eventpoll: fix epremove struct eventpoll / struct file UAF...
Exploit for Missing Release of Memory after Effective Lifetime in Linux Linux_Kernel
android-selinux-disabler Standalone extraction of the SELinux...
RHEL 10 : kernel (RHSA-2026:39371)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:39371 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: proc: use the same treatment...
Important: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
CVE-2026-43074
creationtimestamp| type| source ---|---|--- 2026-07-09 00:45:11+00:00| seen| https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities20260702 2026-07-09 01:17:35+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260702...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
Important: Red Hat Security Advisory: kernel security update
An update for kernel is now available for NVIDIA for RHEL 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
RHEL 10 : kernel (RHSA-2026:36186)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:36186 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: eventpoll: defer struct...
CVE-2026-43074
In the Linux kernel, the following vulnerability has been resolved: eventpoll: defer struct eventpoll free to RCU grace period In certain situations, epfree in eventpoll.c will kfree the epi-ep eventpoll struct while it still being used by another concurrent thread. Defer the kfree to an RCU...