kasld

KASLD는 로컬 프로세스로부터 Linux 커널의 가상 및 물리 메모리 레이아웃 — 주로 커널 텍스트 베이스 — 을 복원합니다. 무엇을 복원할 수 있는지는 해당 프로세스의 관점vantage에 따라 달라집니다. 즉, 프로세스의 권한과 capability, 시스템 구성, 그리고 컨테이너 격리 여부에 달려 있습니다. 누출이나 부채널이 허용하는 경우에는 베이스를 그대로 복원하고, 그렇지 않은 경우에는 사용 가능한 증거가 뒷받침하는 가장 작은 배치 집합으로 좁힙니다. 추론 엔진은 수십 가지 독립적인 기법의 증거를 아키텍처의 알려진 불변...

kasld v0.4.0

KASLD recovers the Linux kernel's virtual and physical memory layout — primarily the kernel text base — from a local process. What it can recover is a function of that process's vantage: its privileges and capabilities, the system's configuration, and any container confinement. It recovers the ba...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004216)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004216 advisory. In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable. This could lead to local escalati...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004032)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004032 advisory. In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable. This could lead to local escalati...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001143)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001143 advisory. In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable. This could lead to local escalati...

AZL-47642 CVE-2024-35955 affecting package kernel for versions less than 6.6.28.1-1

In the Linux kernel, the following vulnerability has been resolved: kprobes: Fix possible use-after-free issue on kprobe registration When unloading a module, its state is changing MODULESTATELIVE - MODULESTATEGOING - MODULESTATEUNFORMED. Each change will take a time. ismoduletextaddress and...

DEBIAN-CVE-2019-2182

In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

UBUNTU-CVE-2019-2182

In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Linux Kernel 4.14.7 (Ubuntu 16.04 CentOS 7) - (KASLR SMEP Bypass) Arbitrary File Read

Linux Kernel 4.14.7 Ubuntu 16.04 CentOS 7 - KASLR SMEP Bypass Arbitrary File Read // A proof-of-concept exploit for CVE-2017-18344. // Includes KASLR and SMEP bypasses. No SMAP bypass. // No support for 1 GB pages or 5 level page tables. // Tested on Ubuntu xenial 4.4.0-116-generic and...