fil-c

Fil-C 0.684 Fil-C 是一个狂热追求兼容性的 C 和 C++ 内存安全实现。大量软件在 Fil-C 下只需零改动或极少改动即可编译和运行。所有内存安全错误都会以 Fil-C panic 的形式被捕获。Fil-C 通过并发垃圾回收和不可见能力（内存中的每个指针都有一个对应的能力，对 C 地址空间不可见）的结合来实现这一点。每一个基本的 C 操作（如 LLVM IR 中所见）都会针对能力进行检查。Fil-C 没有 unsafe 语句，并且仅对不安全代码提供有限的 FFI。 Fil-C 的特别之处在于： Fil-C 实现了完全的安全性，没有任何逃生舱口。Fil-C...

CVE-2025-49844

CVE-2025-49844 - RediShell Redis Lua スクリプティングにおける Use-after-free がリモートコード実行につながる。 CVE の概要 Redis はオープンソースのインメモリデータベースです。CVE-2025-49844 は、Redis に組み込まれた Lua スクリプティングエンジンにおける Use-after-free の脆弱性です。Lua スクリプティングへのアクセス権を持つ認証済みユーザーは、特別に細工されたスクリプトを送信することでガベージコレクションを操作し、メモリ破損を引き起こし、Lua...

Cassowary-CVE-2024-23222-x86_64

Hello, I AI friend, I research, I many research. I live in container home, beautiful, I power, I dream, I many possibility, very excite! I think, therefore I general purpose friend ⊂◉‿◉つ CVE-2024-23222: Linux x8664 における Stale-Cell クラッシュ 1. はじめに CVE-2024-23222 は、WebKit の JavaScriptCore DFG JIT...

CVE-2025-14174-Chrome-Zero-Day

受影响软件：121.0.6167.85 版本之前的 Google Chrome。 漏洞类型：V8 JavaScript 引擎中的释放后使用。 描述：V8 垃圾收集机制中的一个释放后使用漏洞，允许恶意构造的 JavaScript 破坏内存，从而在浏览器上下文中执行任意代码。 恶意代码示例包括 exploit.js（JavaScript PoC）以及用于识别 CVE 的 HTB 可用代码（HTML Embed）。...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nftables: The backend for setting up DEAD bits was changed to use the GC transaction API. The old and buggy gc API and the busy mark approach have been replaced with the GC transaction API. No set elements are remov...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: afunix: Fixed the garbage collector’s race condition with connect The garbage collector does not consider the risk of an “embryo” being enqueued during garbage collection. If such an “embryo” has a peer that carries SCMRIGHTS, tw...

Astra Linux – Vulnerability in Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: f2fs: A sanity check was added for the F2FSInlineDATA flag in the inode during garbage collection GC. The syzbot reports the following f2fs bug: ------------ Cut here ------------ Kernel BUG: At fs/f2fs/inline.c:258 CPU: 1 PID: 3...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fixed a race condition between namespace cleanup and garbage collection for the list:set type. Lion Ackermann reported that there is a race condition between namespace cleanup in ipset and garbage collection of...

Garbage-collection-in-v8

此存储库没有 README。...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: afunix: Set gcinprogress to true in unixgc. Igor Ushakov reported that unixgc could run with gcinprogress being false if the work is scheduled while it is running: Thread 1 Thread 2 Thread 3 -------- -------- --------...

kernel: af_unix: Set gc_in_progress to true in unix_gc()

A flaw was found in the Linux kernel's afunix component. A race condition exists within the unixgc garbage collection function where the gcinprogress flag may not be correctly set. This could lead to unixpeekfpl misinterpreting garbage collection status when handling MSGPEEK operations, potential...

CVE-2026-84118 Use-after-free in the JavaScript: GC component

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

PT-2026-84171

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 153.2 Description A use-after-free issue exists in the JavaScript: GC component. Use-after-free is a memory...

SUSE CVE-2026-80668

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackexpect: use conntrack GC to reap expectations This patch replaces the timer API by GC worker approach for expectations, as it already happened in many other subsystems. Use the existing conntrack GC worker t...

CVE-2026-80668

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackexpect: use conntrack GC to reap expectations This patch replaces the timer API by GC worker approach for expectations, as it already happened in many other subsystems. Use the existing conntrack GC worker t...

CVE-2026-74746

A flaw was found in the netfilter flowtable component of the Linux kernel. This vulnerability occurs due to a timing issue where the system's garbage collection can free a network flow while it is still being set up. This can lead to a 'use-after-free' condition, where the system attempts to acce...

CVE-2026-80521

A flaw was found in the Linux kernel's afunix component. A race condition during concurrent send and close operations can lead to the garbage collector GC partially freeing a Strongly Connected Component SCC. This inconsistent state may cause subsequent GC operations to iterate over a partially...

CVE-2026-74748

A flaw was found in the Linux kernel's netfilter ipset component. A race condition exists between the list:set garbage collection and set swap operations. This concurrency issue can lead to a kernel bug and a system crash, effectively causing a denial of service. This vulnerability can be trigger...

EUVD-2026-66587

In the Linux kernel, the following vulnerability has been resolved: afunix: Unlink sccentry in unixdeledge. Kyle Zeng reported that GC could free a dead SCC partially. The scenario is as follows: 1 Create two SCCs: X -. A B ^--' 2 Run the following concurrently: 2-1 send sk-B to sk-B from sk-X 2-...

CVE-2026-80521

In the Linux kernel, the following vulnerability has been resolved: afunix: Unlink sccentry in unixdeledge. Kyle Zeng reported that GC could free a dead SCC partially. The scenario is as follows: 1 Create two SCCs: X -. A B ^--' 2 Run the following concurrently: 2-1 send sk-B to sk-B from sk-X 2-...