CVE-2019-2215

CVE-2019-2215 출처: https://bugs.chromium.org/p/project-zero/issues/detail?id=1942 https://bugs.chromium.org/p/project-zero/issues/attachmentText?aid=414885 Samsung S7 및 S7 Edge 커널 3.18.x는 취약하지 않은 것으로 보입니다. 하지만 PoC 조정을 통해 더 많은 작업을 하면 취약할 수 있습니다. 루팅된 장치가 없어 더 이상 확인할 수 없습니다. Samsung S3Neo+ LineageOS,...

bad-epoll

Bad Epoll: Mythosが見逃したバグ Google kernelCTF上で非特権プロセスがrootに昇格している様子。 Bad Epoll（CVE-2026-46242）は、Linuxカーネルの epoll サブシステムにおける競合状態のuse-after-free脆弱性です。このバグにより、非特権プロセスがルート権限を取得でき、Linuxデスクトップやサーバーだけでなく、Androidデバイスでも影響を受けます。 Bad Epollは、Jaeyoung Chung によってGoogle kernelCTF...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

CVE-2019-2215

CVE-2019-2215 以下の問題は、https://android.googlesource.com/kernel/msm の android-msm-wahoo-4.4-pie ブランチ（およびおそらく他のブランチ）に存在します： /drivers/android/binder.c のバインダードライバにおける binderthread 構造体の wait メンバーに use-after-free が存在します。 アップストリームのコミットで説明されているとおり： 「binderpoll は、作業のためにスリープ可能な thread-wait ウェイトキューを渡します。epoll...

ROOT-APP-MAVEN-CVE-2026-42577 CVE-2026-42577 in io.netty:netty-transport-native-epoll - Patched by Root

Root has patched CVE-2026-42577 in the io.netty:netty-transport-native-epoll package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-45536 CVE-2026-45536 in io.netty:netty-transport-native-epoll - Patched by Root

Root has patched CVE-2026-45536 in the io.netty:netty-transport-native-epoll package for Root:Maven. Multiple fixed versions available...

Rocky Linux 9 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-64k / kernel-64k-core / etc Multiple Vulnerabilities (crlsa-2024_4928)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20244928 advisory. kernel: block: null pointer dereference in ioctl.c when length and logical block size are misaligned CVE-2023-52458 kernel: ext4: avoid allocating blocks...

cve-2019-2215_SH-M08

2019 年 10 月より前のセキュリティパッチが当たった Android 端末で root 権限を取得する概念実証コードの AQUOS sense 2SH-M08移植版です。 動作環境 以下の OS バージョンで動作を確認しています。他のバージョンや他の機種で動かす場合は「移植方法」の章に従って移植してください。 ro.build.date: 2019年 3月 20日 水曜日 04:58:03 JST ro.build.description: Anasui-user 8.1.0 S3200 01.00.02 release-keys ro.build.display.id:...

ScannerBadEpoll

ScannerBadEpoll 취약점 검사기: Bad Epoll CVE-2026-46242 취약점 검사기: Bad Epoll CVE-2026-46242 Soluciones & Proyectos Franklin 개발 전문적인 지원을 받는 기술 솔루션 이것은 Bad Epoll CVE-2026-46242 취약점커널 6.46.11에 영향을 받는 범위 내에 시스템이 있는지 확인하기 위해 현재 Linux 커널 버전을 감사하는 자동화된 Bash 스크립트입니다. 🚀 특징 즉시 탐지: 커널의 메이저 및 마이너 구성 요소를 정확하게...

CVE-2019-2215

CVE-2019-2215 CVE-2019-2215 — Android Binder Use-After-Free 特権昇格 説明 CVE-2019-2215 の脆弱性 Android カーネルの binder ドライバーにおける use-after-free のエクスプロイト。脆弱なデバイス上で root への特権昇格を可能にします。 脆弱性 CVE-2019-2215 — epoll 使用時の binderthread における use-after-free。このエラーは binderpoll の wait キューの不適切な処理に起因し、カーネルメモリの上書きを可能にします。...

CVE-2026-46242

🚨 CVE-2026-46242 - BadEpoll 深刻なUse-After-Free脆弱性がLinuxカーネルのeventpollサブシステムに存在し、ローカル権限昇格、メモリ破壊、またはサービス拒否を引き起こす可能性があります。 📖 概要 CVE-2026-46242 は、Linuxカーネルの eventpoll epoll 実装における Use-After-Free UAF 脆弱性です。 問題は epremove のロジック内にあり、競合状態によって struct file とそれに関連する eventpoll オブジェクトがまだ参照中に解放されてしまうことに起因します。...

CVE-2026-46242

CVE-2026-46242 — "Bad Epoll" このリポジトリは、x86向けに既に存在するエクスプロイトをベースにした、aarch64カーネル向けのBad Epollバリデータです。 epoll のUse-After-Free競合状態を介したLinuxカーネルのローカル特権昇格 フィールド| 詳細 ---|--- CVE| CVE-2026-46242 ニックネーム| Bad Epoll タイプ| 競合状態によるUse-After-Free UAF CVSS| 7.8 高 影響| ローカル特権昇格 → root 影響を受けるカーネル| 5.10 – 6.11 LTS & COS...

CVE-2019-2215

CVE-2019-2215 면책 조항: 여기에 제공된 코드는 교육 및 시연 목적으로만 제공됩니다. 저는 이 코드또는 그 안의 정보, 빌드, 이 저장소의 어떤 것도를 불법적이거나 비도덕적인 이유로 사용하는 사람을 지원하지 않으며, 그에 대한 책임도 지지 않습니다. 크레딧 Google Project Zero의 Jann Horn & Maddie Stone의 개념 증명을 기반으로 함 특별히 CloudFuzz의 워크숍 덕분에 이 익스플로잇을 작성할 수 있었습니다. 또한 참조 자료를 제공해 준 kangtastic에게 감사드립니다. 사용법...

android-kernel-exploitation-lab

Android 커널 익스플로잇 실습 이 실습은 binder 서브시스템의 중요한 Android 커널 취약점인 CVE-2019-2215를 탐색할 수 있는 환경을 설정하는 과정을 안내합니다. 문서 환경 설정 gdb 스크립트를 사용한 커널 권한 상승 syzkaller를 사용한 퍼징 AFL++를 사용한 퍼징 기술 세부 사항: CVE-2019-2215 이 취약점은 Android binder 드라이버의 use-after-free로, 다음과 같은 특징이 있습니다: 1. 근본 원인 : binder fd가 epoll 인스턴스에 추가된 후 스레드...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in netty-transport-native-epoll

Summary IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in netty-transport-native-epoll Vulnerability Details CVEID:CVE-2026-42577 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. From 4.2.0.Final to 4.2.13.Final , Netty's epoll transpor...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Binder: Signals for epoll threads that perform self-work In epoll mode, threads often rely on I/O events to determine when data is ready for consumption. Within binder, a thread may initiate a command via BINDERWRITEREAD without...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Media: dvb-core: Fixed an issue where incorrect reinitializations of the ringbuffer occurred upon reopening the device. The dvbdvropen function calls dvbringbufferinit, when a new reader opens the DVR device. dvbringbufferinit th...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: eventpoll: Fixed semi-unbounded recursion. Ensured that epoll instances never form a graph with more than EPMAXNESTS+1 links. Currently, eploopcheckproc ensures that the graph is free of loops and performs some recursion depth...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: List: Fixed a data race around ep-rdllist. The eppoll function first calls epeventsavailable without holding a lock and checks if ep-rdllist is empty using listemptycareful, which reads from rdllist-prev. Therefore, all access...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: afunix: Clearing stale u-oobskb. Syzkaller began reporting a deadlock of unixgclock after the commit 4090fa373f0. However, this only reveals the bug that had been present since the commit 314001f0bf92 “afunix: Adding OOB support”...