RWCTF21-VirtualBox-61-escape

RWCTF21-VirtualBox-61-escape 0day VirtualBox 6.1 Escape for RealWorld CTF 2020/2021 Demo What? This is our solution for RealWorld CTF's "Box Escape" challenge from the 2020/2021 quals. Currently a 0day but we'll add the CVE number once there is one. CVE-2021-2119 How does it work? We wrote a...

CVE-2026-53359

🚨 CVE-2026-53359 — Januscape Linux KVM シャドウページング Use-After-Free（ゲストからホストへの脱出） Januscape は、x86 Shadow MMU における Use-After-Free UAF 状態によって引き起こされる Linux カーネル KVM の脆弱性です。脆弱な設定では、悪意のあるゲストがホストメモリを破損させ、ホストのクラッシュや VM 分離の破綻につながる可能性があります。 📌 概要 📖 説明 この脆弱性は、KVM のレガシーシャドウページング実装 に存在します。 以前のセキュリティ修正では Guest Fra...

januscape

Januscape — Linux KVM/x86 guest-to-host escape tracking site Source for the Januscape patch-status tracker: a single-page site recording which distributions have shipped a fix for the KVM/x86 guest-to-host escape in the Linux kernel. Where the facts live Everything about the bug — CVE IDs, affect...

itscape

ITScape — Linux KVM/arm64 guest-to-host escape tracking site Source for the ITScape patch-status tracker: a single-page site recording which distributions have shipped a fix for the KVM/arm64 guest-to-host escape in the Linux kernel. Where the facts live Everything about the bug — CVE IDs, affect...

Zapscape

La trilogia dell'escape KVM ITScape CVE‑2026‑46316 | Januscape CVE‑2026‑53359 | Zapscape CVE‑2026‑64561 ---|---|--- Zapscape: Escape da guest a host in KVM/x86 Sommario Questo documento descrive la vulnerabilità Zapscape CVE-2026-64561 scoperta e segnalata da Hyunwoo Kim @v4bel. Si tratta di una...

ITScape

ITScape: Fuga da guest a host in KVM/arm64 Abstract Questo documento descrive la vulnerabilità ITScape CVE-2026-46316 segnalata e corretta da Hyunwoo Kim @v4bel. Si tratta di una vulnerabilità di escape KVM che consente a un guest di evadere verso l'host in un ambiente KVM/arm64 ed eseguire coman...

Januscape

Januscape: Fuga da Ospite a Host in KVM/x86 Sommario Questo documento descrive la vulnerabilità Januscape CVE-2026-53359 scoperta e segnalata da Hyunwoo Kim @v4bel. Si tratta di una vulnerabilità di fuga da KVM che consente a un ospite di sfuggire all'host in un ambiente KVM/x86. Al meglio della...

Januscape-Hotfix

Raccolta di correzioni Januscape — CVE-2026-53359 English Raccolta completa di correzioni per la vulnerabilità di fuga dalla macchina virtuale KVM/x86 shadow MMU CVE-2026-53359. Dalla correzione a caldo con zero downtime all'aggiornamento del kernel, copre tutti gli scenari operativi. Diagnostica...

CVE-2026-47243 Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. Prior to 3.31.0, the runtime-rs standalone virtio-fs path is vulnerable to a guest-root to host-root escape. In this configuration, Kata runs the host...

EUVD-2020-27254

Malware in sbrugna...

CVE-2020-6100

An exploitable memory corruption vulnerability exists in AMD atidxx64.dll 26.20.15019.19000 graphics driver. A specially crafted pixel shader can cause memory corruption vulnerability. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2023-4155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in KVM AMD Secure Encrypted Virtualization SEV in the Linux kernel. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a doubl...

kernel: KVM: SEV-ES / SEV-SNP VMGEXIT double fetch vulnerability

A flaw was found in KVM AMD Secure Encrypted Virtualization SEV in the Linux kernel. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a double fetch race condition vulnerability and invoke the VMGEXIT handler recursively. If an attacker manages to call the handler multiple time...

Race condition

A flaw was found in KVM AMD Secure Encrypted Virtualization SEV in the Linux kernel. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a double fetch race condition vulnerability and invoke the VMGEXIT handler recursively. If an attacker manages to call the handler multiple time...

CVE-2023-4155 Sev-es / sev-snp vmgexit double fetch vulnerability

A flaw was found in KVM AMD Secure Encrypted Virtualization SEV in the Linux kernel. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a double fetch race condition vulnerability and invoke the VMGEXIT handler recursively. If an attacker manages to call the handler multiple time...

CVE-2023-4155

CVE-2023-4155 describes a vulnerability in the Linux kernel’s KVM AMD SEV implementation. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a double fetch race that causes the VMGEXIT handler to be invoked recursively. If the handler is called multiple times, this can lead to a ...

CVE-2023-4155

A flaw was found in KVM AMD Secure Encrypted Virtualization SEV in the Linux kernel. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a double fetch race condition vulnerability and invoke the VMGEXIT handler recursively. If an attacker manages to call the handler multiple time...

Fedora 37 : kernel (2023-d9509be489)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-d9509be489 advisory. The 6.4.10 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly...

NVIDIA D3D10 Driver Shader Functionality dcl_input index memory corruption vulnerability

Talos Vulnerability Report TALOS-2023-1720 NVIDIA D3D10 Driver Shader Functionality dclinput index memory corruption vulnerability August 10, 2023 CVE Number CVE-2022-34671 SUMMARY A memory corruption vulnerability exists in the Shader Functionality of NVIDIA D3D10 Driver NVIDIA D3D10 Driver,...

CVE-2023-4155

A flaw was found in KVM AMD Secure Encrypted Virtualization SEV in the Linux kernel. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a double fetch race condition vulnerability and invoke the VMGEXIT handler recursively. If an attacker manages to call the handler multiple time...