inception

Note: This tool is no longer under active development, please look at PCILeech instead. INCEPTION Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe HW interfaces...

XenoboxX

Hardware Sandbox Toolkit Malware frequently employs anti-VM techniques, which can vary in their difficulty to detect and counteract. While integrating anti-detection measures in our labs is a frequently used option, we should also consider using a real hardware sandbox, even if this sounds weird...

s6_pcie_microblaze

PCI Express DIY hacking toolkit General information Contents SP605 board configuration Software configuration Examples Using Python API Practical DMA attacks Option ROM attacks Troubleshooting Building project from the source code General information This repository contains a set of tools and...

pcileech

PCILeech Summary: PCILeech uses PCIe hardware devices to read and write target system memory. This is achieved by using DMA over PCIe. No drivers are needed on the target system. PCILeech also works without hardware together with a wide range of software memory acqusition methods supported by the...

CVE-2016-2067

ADRENO GPU IOMMU DMA EXPLOIT Tested under Nexus 6p google/angler/angler:6.0.1/MMB29M/2431559:user/release-keys About the bug Discussed in 2016 via Blackhat EU About the exploit With iommu dma writes, vdso.so is overwritten with shellcode. So after /init executes kernelclockgettime, the shellcode...

CVE-2026-98803

A flaw was found in the Linux kernel's stmmac ethernet driver. When receiving network frames larger than the primary buffer size, the Direct Memory Access DMA engine attempts to write excess data into a secondary receive buffer that is neither allocated nor mapped for regular frames. An attacker ...

CVE-2026-99081

The Linux kernel 's bnxt_en driver contains a vulnerability where small packets (under 52 bytes) are padded but the DMA mapping length remains unadjusted. This mismatch causes the NIC DMA engine to read beyond the mapped region, potentially triggering IOMMU DMA Read faults on BCM57412 NetXtreme-E...

EUVD-2026-108747

In the Linux kernel, the following vulnerability has been resolved: bnxten: fix DMA mapping length for padded small packets Stefan Fleischmann reported Intel IOMMU DMA Read faults on BCM57412 NetXtreme-E NICs when transmitting packets on VLAN/macvlan interfaces: DMAR: DMA Read NOPASID Request...

CVE-2026-99081

In the Linux kernel, the following vulnerability has been resolved: bnxten: fix DMA mapping length for padded small packets Stefan Fleischmann reported Intel IOMMU DMA Read faults on BCM57412 NetXtreme-E NICs when transmitting packets on VLAN/macvlan interfaces: DMAR: DMA Read NOPASID Request...

CVE-2026-99028

In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Free outstanding DMA buffers on dmaengine stop In the dmaengine path the driver pre-submits RX buffers and holds in-flight TX buffers whose SKBs are DMA-mapped by the driver and freed only in the completion...

EUVD-2026-108794

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix shrinker accounting double-subtraction on nested external pins xebopinexternal and xebounpinexternal support nested pins, since the underlying ttmbopin/ttmbounpin maintain a pincount refcount rather than a boolean...

CVE-2026-51585

realtek poc rt26cx21x64.sys exploit Realtek PCIe GbE/2.5GbE/5GbE family Overview OID 0xFF816871 maps the nic's mmio bar into the calling proc's virtual addr space, MmLockedPagesSpecifyCache, reachable from um via \.\RealTekCardGUID This IOCTL 0x0012C818 is gated by a registry value DrvMode=4 Once...

CVE-2026-90012

A flaw was found in the Linux kernel's Serial Peripheral Interface SPI subsystem. When handling Direct Memory Access DMA mappings, an issue arises if a receive RX mapping fails after a transmit TX mapping succeeds, or if a TX mapping fails during a subsequent transfer. This can lead to incorrect...

CVE-2026-64590

A flaw was found in the Linux kernel's dma-buf subsystem, specifically within the udmabuf component. When the CONFIGDMAAPIDEBUGSG option is enabled, importing a udmabuf into a Direct Rendering Manager DRM driver can trigger a spurious warning about overlapping cacheline mappings. This occurs...

CVE-2026-80884

A flaw was found in the Linux kernel's NTB Non-Transparent Bridge module. This vulnerability arises from the incorrect handling of Direct Memory Access DMA addresses during memory deallocation. The DMA API requires that the dmafreeattrs function receives the exact dmahandle originally provided by...

CVE-2026-98492

A flaw was found in the Linux kernel's Cadence MACB network driver. During network buffer allocation, the driver's error-handling routines fail to properly release allocated Direct Memory Access DMA memory buffers when a failure occurs. A local user could trigger these error conditions during...

CVE-2026-98601

A flaw was found in the Linux kernel's Intel Bluetooth PCIe driver. The driver fails to validate index values provided by the hardware device through Direct Memory Access DMA. A malicious or compromised PCIe device could supply out-of-range indices to trigger an out-of-bounds memory dereference o...

CVE-2026-93158

A flaw was found in the Linux kernel's crypto: sa2ul module. This vulnerability occurs because the saulprobe function does not properly handle errors when the system fails to create a necessary Direct Memory Access DMA pool for security context buffers. If the pool creation fails, the system...

CVE-2026-93170

A flaw was found in the Linux kernel's Xilinx DMA Direct Memory Access engine. A race condition in the AXIDMA and MCDMA interrupt handlers can cause the DMA channel to be incorrectly marked as idle while data transfer descriptors are still being processed. This premature idle state can lead to...

CVE-2026-93118

A flaw was found in the Linux kernel's USB gadget driver for Aspeed UDC. During the device initialization process, a failure to allocate a Direct Memory Access DMA buffer is not properly handled. This can lead to the driver attempting to use an invalid memory address, potentially causing a system...