42 matches found
kern
kern: 데몬 없는 루트리스 컨테이너 런타임이자 샌드박스. 에이전트 도구 호출과 LLM이 생성한 코드를 커널이 강제하는 컨테이너 안에서 실행합니다. 몇 밀리초 만에, 데몬 없이 단일 정적 바이너리 하나로 만드는 진짜 커널 강제 컨테이너. MCP 지원 : Kern Sandbox를 통해 Claude Code, Cursor, Claude Desktop, LM Studio에서 사용 가능. 유휴 시 RAM 0 · 데몬도, 소켓도, 시작할 것도 없음 · 단일 정적 바이너리, 유일한 Rust 의존성은 libc Linux. Windows...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: tipc: fixed an information leak in tipctopsrvkernsubscr A 8-byte write was used to initialize sub.usherhandle in tipctopsrvkernsubscr. Otherwise, four bytes remained uninitialized when calling setsockopt..., SOLTIPC,.... This...
SUSE CVE-2026-64449
In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: bound slave read/write to the kernbuf size The SLAVE-path helpers buffertouser and bufferfromuser copy 'count' bytes into/out of the fixed-size kernbuf sizebuf == PCIBUFSIZE == 0x20000, 128 KiB using ppos as the...
CVE-2026-64449 staging: vme_user: bound slave read/write to the kern_buf size
In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: bound slave read/write to the kernbuf size The SLAVE-path helpers buffertouser and bufferfromuser copy 'count' bytes into/out of the fixed-size kernbuf sizebuf == PCIBUFSIZE == 0x20000, 128 KiB using ppos as the...
EUVD-2026-39963
sigqueue2 was marked as permitted in capability mode with the introduction of Capsicum in 2011, but the implementation of kernsigqueue did not include a capability mode check restricting signal delivery to the calling process's own PID. A process in capability mode can use sigqueue2 to send signa...
CVE-2026-57589: Use After Free
sys/kern/sysvsem.c in OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root. This is a context switch use-after-free after tsleep in syssemget...
CVE-2022-50531 tipc: fix an information leak in tipc_topsrv_kern_subscr
In the Linux kernel, the following vulnerability has been resolved: tipc: fix an information leak in tipctopsrvkernsubscr Use a 8-byte write to initialize sub.usrhandle in tipctopsrvkernsubscr, otherwise four bytes remain uninitialized when issuing setsockopt..., SOLTIPC, .... This resulted in an...
CVE-2025-22535
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in jonkern WPListCal wplistcal allows SQL Injection.This issue affects WPListCal: from n/a through = 1.3.5...
SUSE CVE-2025-21660
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix unexpectedly changed path in ksmbdvfskernpathlocked When ksmbdvfskernpathlocked met an error and it is not the last entry, it will exit without restoring changed path buffer. But later this buffer may be used as the...
CVE-2025-22535 WordPress WPListCal Plugin <= 1.3.5 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in jonkern WPListCal wplistcal allows SQL Injection.This issue affects WPListCal: from n/a through = 1.3.5...
Apple macOS libFontValidation kern Table Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the libFontValidation library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists...
kerncitizensforenergy.com Cross Site Scripting vulnerability OBB-3898570
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2022-34952
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.6 Description The issue concerns an information leak in tipc topsrv kern subscr. It was introduced in version v4.17 and fixed in Linux Kernel version v6.0.6. The actual impact and attack plausibility have no...
PT-2022-35241
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.76 Description The issue concerns an information leak in tipc topsrv kern subscr. It was introduced in version v4.17 and fixed in Linux Kernel version v5.15.76. The actual impact and attack plausibility hav...
PT-2022-35734
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.264 Description The issue is related to an information leak in tipc topsrv kern subscr. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2022-35616
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.221 Description The issue concerns an information leak in tipc topsrv kern subscr. It was introduced in version v4.17 and fixed in version v5.4.221. The actual impact and attack plausibility have not yet bee...
The vulnerability of the `fuse_kern_mount` function in the `libfuse-lite` library, implemented in the NTFS file system, allows a malicious actor to execute arbitrary code with elevated privileges.
The vulnerability of the fusekernmount function in the libfuse-lite library, implemented in the NTFS file system, affects the FUSE module NTFS-3G. This vulnerability involves returning an incorrect process status code. Exploiting this vulnerability could allow an attacker to execute arbitrary cod...
An invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite.
...
