Def1nit3lyN0tAJa1lbr3akTool

Def1nit3lyN0tAJa1lbr3akTool iOS 16.0iOS 16.6.1용 탈옥 도구입니다. 그냥 재미로 만들었습니다. 이 도구는 kfd, kfund, Dopamine과 탈옥 커뮤니티 없이는 불가능했을 것입니다. 빌드 방법 iOS 15.7용으로 빌드하는 경우 basebin/의 모든 하위 디렉터리에서 TRUSTCACHEVERSION=1 make를 실행하고, iOS 16.5용으로 빌드하는 경우 TRUSTCACHEVERSION=2 make를 실행하세요. Xcode로 프로젝트를 컴파일하세요. 먼저 부트스트랩을 다운로드해야 ...

kfd

简要免责声明：我无意添加对其他设备和 iOS 版本的偏移量。 kfd kfd，即 kernel file descriptor（内核文件描述符）的缩写，是一个在 Apple 设备上读写内核内存的项目。它利用各种可利用的漏洞来获取悬空 PTE（页表项），这被称为 PUAF 原语，即 physical use-after-free（物理释放后使用）的缩写。然后，它会在这些物理页内重新分配某些内核对象，并通过悬空 PTE 从用户空间直接操纵它们，以实现 KRKW 原语，即 kernel read/write（内核读写）的缩写。漏洞利用代码完全包含在一个库 libkfd 中，但该项目还包含针对...

CVE-2024-26817-amdkfd

-- CVE-2024-26817 다음 파일 drivers/gpu/drm/amd/amdkfd/kfdchardev.c에서 AMD KFD의 보안 취약점을 발견했습니다. ioctl 식별자는 AMDKFDIOCGETPROCESSAPERTURESNEW입니다. kfdioctlgetprocessaperturesnew 함수에서 사용자가 제공한 args-numofnodes 데이터가 곱해진 후 kzalloc에 직접 전달되며, 일부 플랫폼에서 정수 오버플로우integer overflow를 유발할 수 있습니다. 이로 인해 작은 크기가 할당되고, 같은...

CVE-2026-80703

A flaw was found in the Linux kernel's drm/amdkfd component. A local user with access to /dev/kfd could exploit a missing authorization check to terminate another process's active Graphics Processing Unit GPU debug session. This could lead to a denial of service for other users attempting to debu...

SUSE CVE-2026-80703

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix missing authorization check in KFDIOCDBGTRAPDISABLE Prevent unauthorized termination of active GPU debug sessions. Previously, users with /dev/kfd access could terminate another process's debug session without...

CVE-2026-80703

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix missing authorization check in KFDIOCDBGTRAPDISABLE Prevent unauthorized termination of active GPU debug sessions. Previously, users with /dev/kfd access could terminate another process's debug session without...

UBUNTU-CVE-2026-80703

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix missing authorization check in KFDIOCDBGTRAPDISABLE Prevent unauthorized termination of active GPU debug sessions. Previously, users with /dev/kfd access could terminate another process's debug session without...

CVE-2026-80703

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix missing authorization check in KFDIOCDBGTRAPDISABLE Prevent unauthorized termination of active GPU debug sessions. Previously, users with /dev/kfd access could terminate another process's debug session without...

kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2

A flaw was found in the Linux kernel's AMD KFD Kernel Fusion Driver component. A local user could exploit a boundary error in the debug address watch v2 functionality by providing a specially crafted watchid. This could lead to a buffer overflow, potentially allowing memory access outside of...

kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11

A flaw was found in the Linux kernel's AMD KFD Kernel Fusion Driver component. This buffer overflow vulnerability occurs due to incorrect memory buffer handling during CRIU Checkpoint/Restore in User-space operations on SDMA System Direct Memory Access queues. A local attacker can exploit this fl...

kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2

A flaw was found in the Linux kernel's AMD KFD Kernel Fusion Driver component. A local user could exploit a boundary error in the debug address watch v2 functionality by providing a specially crafted watchid. This could lead to a buffer overflow, potentially allowing memory access outside of...

kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11

A flaw was found in the Linux kernel's AMD KFD Kernel Fusion Driver component. This buffer overflow vulnerability occurs due to incorrect memory buffer handling during CRIU Checkpoint/Restore in User-space operations on SDMA System Direct Memory Access queues. A local attacker can exploit this fl...

SUSE CVE-2026-74446

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: hold eventmutex while checkpointing CRIU events kfdcriucheckpointevents counts the entries in p-eventidr via kfdgetnumevents, allocates an array sized to that count, and then walks the same IDR to fill it. Neither the...

UBUNTU-CVE-2026-74448

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix QID bit leak in pqmcreatequeue When MES is enabled and amdgpuamdkfdallockernelmem fails during the first queue creation for a process, pqmcreatequeue returns early via 'return retval' without going through the...

EUVD-2026-59348

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix listdel corruption in kfdcriuresumesvm The cleanup tail of kfdcriuresumesvm walks svms-criusvmmetadatalist and kfrees each struct criusvmmetadata without removing it from the list. The list head is left pointing a...

CVE-2026-72449

CVE-2026-72449 : A Linux kernel flaw in drm/amdkfd causing list_del corruption during kfd_criu_resume_svm cleanup, leaving freed objects on the criu_svm_metadata_list. An unprivileged render-group user could trigger a use-after-free/double-free path via /dev/kfd. The fix adds list_del() before kf...

PT-2026-72637

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix list del corruption in kfd criu resume svm The cleanup tail of kfd criu resume svm walks svms-criu svm metadata list and kfrees each struct criu svm metadata without removing it from the list. The list head is lef...

CVE-2026-68447 drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size CRIU checkpoint copies the MQD control stack using cphqdcntlstacksize from hardware without bounding it to the allocated BO region. If the HW field is larger than...

CVE-2026-68258

A flaw was found in the drm/amdkfd component of the Linux kernel. This vulnerability allows a local attacker to provide out-of-bounds values in the private data during a kfd CRIU restore operation. This improper input validation could lead to a memory safety issue, potentially resulting in a deni...

CVE-2026-68258

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size We weren't checking whether the values provided in the private data in kfd CRIU restore were within bounds. For queue type, add a KFDQUEUETYPEMAX and ensure the...