1957 matches found
meltdown-exploit
MELTDOWN EXPLOIT POC Speculative optimizations execute code in a non-secure manner leaving data traces in microarchitecture such as cache. Lipp et. al 2018 published their code 2018-01-09 at https://github.com/IAIK/meltdown. Look at their paper for details: https://meltdownattack.com/meltdown.pdf...
meltdown-exploit
MELTDOWN 漏洞利用概念验证 推测执行以不安全的方式执行代码,会在微架构(如缓存)中留下数据痕迹。 Lipp 等人于 2018 年 1 月 9 日在 https://github.com/IAIK/meltdown 发布了他们的代码。详情请参考他们的论文:https://meltdownattack.com/meltdown.pdf。 目前只能转储 linuxprocbanner,因为所需内存必须在缓存中,而每次读取 /proc/version 时 linuxprocbanner 都会被缓存。可能与 prefetch 配合使用。与 schedyield 配合使用。 使用 make...
firehol
FireHOL http://firehol.org/ root@kitploit: FireHOL, an iptables stateful packet filtering firewall for humans! FireQOS, a TC based bandwidth shaper for humans! Git These instructions are for people who are working with the git repository. There are more general instructions starting with Upgrade...
TID-The-Instant-Destroyer
TID — El Destructor Instantáneo Investigación de seguridad independiente en el campo de la protección contra ataques de canal lateral basados en caché. Resumen TID es un protocolo especializado diseñado para eliminar los restos de datos sensibles como claves criptográficas de las capas de caché d...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush the cache for the PASID table before using it. When writing the address of a newly allocated, zero-initialized PASID table to a PASID directory entry, do so after flushing the CPU cache for this PASID table, not...
CVE-2026-89655
In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in kickflushingcaps on cf entry freed during unlock listforeachentry iterates ci-icapflushlist but drops icephlock to send cap messages. During the unlock window, handlecapflushack can acquire icephlock, detach cf...
spectre-attack
Ejemplo de ataque Spectre Ejemplo de uso del exploit revelado "Spectre" del 2 de enero de 2018 CVE-2017-5753 y CVE-2017-5715 Spectre rompe el aislamiento entre diferentes aplicaciones. Permite a un atacante engañar a programas libres de errores, que siguen las mejores prácticas, para que filtren...
Linux Distros Unpatched Vulnerability : CVE-2026-80932
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vsock/virtio: flush works in dependency order virtiovsockremove stops the virtqueues and then flushes each work item before freeing the enclosing virtiovsock. T...
Linux Distros Unpatched Vulnerability : CVE-2026-89655
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ceph: fix UAF in kickflushingcaps on cf entry freed during unlock listforeachentry iterates ci-icapflushlist but drops icephlock to send cap messages. During th...
AZL-100904 CVE-2026-89655 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in kickflushingcaps on cf entry freed during unlock listforeachentry iterates ci-icapflushlist but drops icephlock to send cap messages. During the unlock window, handlecapflushack can acquire icephlock, detach cf...
DEBIAN-CVE-2026-89655
In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in kickflushingcaps on cf entry freed during unlock listforeachentry iterates ci-icapflushlist but drops icephlock to send cap messages. During the unlock window, handlecapflushack can acquire icephlock, detach cf...
AZL-100383 CVE-2026-80932 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in dependency order virtiovsockremove stops the virtqueues and then flushes each work item before freeing the enclosing virtiovsock. The current order does not account for dependencies between those item...
DEBIAN-CVE-2026-80932
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in dependency order virtiovsockremove stops the virtqueues and then flushes each work item before freeing the enclosing virtiovsock. The current order does not account for dependencies between those item...
CVE-2026-80932
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in dependency order virtiovsockremove stops the virtqueues and then flushes each work item before freeing the enclosing virtiovsock. The current order does not account for dependencies between those item...
EUVD-2026-76567
In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in kickflushingcaps on cf entry freed during unlock listforeachentry iterates ci-icapflushlist but drops icephlock to send cap messages. During the unlock window, handlecapflushack can acquire icephlock, detach cf...
CVE-2026-89655
In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in kickflushingcaps on cf entry freed during unlock listforeachentry iterates ci-icapflushlist but drops icephlock to send cap messages. During the unlock window, handlecapflushack can acquire icephlock, detach cf...
CVE-2026-89655 ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock
In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in kickflushingcaps on cf entry freed during unlock listforeachentry iterates ci-icapflushlist but drops icephlock to send cap messages. During the unlock window, handlecapflushack can acquire icephlock, detach cf...
CVE-2026-89655
A use-after-free (UAF) vulnerability exists in the Linux kernel's Ceph file system component, specifically in the __kick_flushing_caps() function. The root cause is a race condition : the function iterates over ci->i_cap_flush_list using list_for_each_entry() but drops i_ceph_lock to send cap ...
CVE-2026-80932
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in dependency order virtiovsockremove stops the virtqueues and then flushes each work item before freeing the enclosing virtiovsock. The current order does not account for dependencies between those item...
CVE-2026-80932 vsock/virtio: flush works in dependency order
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in dependency order virtiovsockremove stops the virtqueues and then flushes each work item before freeing the enclosing virtiovsock. The current order does not account for dependencies between those item...