The vulnerability of the tb_xdp_properties_request() function in the drivers/thunderbolt/xdomain.c module of the general support driver for USB4 and Thunderbolt in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tbxdppropertiesrequest function in the drivers/thunderbolt/xdomain.c module of the general support driver for USB4 and Thunderbolt in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could...

The vulnerability of the ethosu_gem_cmdstream_copy_and_validate() function in the drivers/accel/ethosu/ethosu_gem.c driver for Linux kernel acceleration devices allows a hacker to cause a system failure.

The vulnerability of the ethosugemcmdstreamcopyandvalidate function in the drivers/accel/ethosu/ethosugem.c driver for Linux computing devices involves improper release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the phonet_deviceDestroy() function in the net/phonet/pn_dev.c module, a implementation of kernel networking functions in the Linux operating system, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the phonetdevicedestroy function in the net/phonet/pndev.c module, which is part of the Linux kernel’s networking functions, involves the dereferencing of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the `udp_read_skb()` function in the `net/ipv4/udp.c` module of the Linux operating system’s kernel-based IPv4 protocol implementation allows a attacker to cause a service failure.

The vulnerability of the udpreadskb function in the net/ipv4/udp.c module of the Linux kernel’s IPv4 protocol implementation is related to the lack of resource initialization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the get_manuf_info() function in the drivers/usb/serial/io_ti.c file of the Linux operating system’s USB device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the getmanufinfo function in the drivers/usb/serial/ioti.c file of the Linux device driver for USB devices is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the `ivpu_ms_get_info_ioctl()` function in the `drivers/accel/ivpu/ivpu_ms.c` kernel module of the Linux operating system allows a attacker to gain access to protected information or cause a service failure.

The vulnerability of the ivpumsgetinfoioctl function in the drivers/accel/ivpu/ivpums.c kernel module of the Linux operating system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability may allow an attacker to access protected information...

The vulnerability of the `register_shm_helper()` function in the `drivers/tee/tee_shm.c` driver for the trusted execution environment of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the registershmhelper function in the drivers/tee/teeshm.c file of the Linux kernel’s trusted execution environment driver relates to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the fw_log_print_buffer() function in the drivers/accel/ivpu/ivpu_fw_log.c file of the Linux kernel’s acceleration device driver allows a hacker to access protected information or cause a service failure.

The vulnerability of the fwlogprintbuffer function in the drivers/accel/ivpu/ivpufwlog.c file of the Linux kernel’s acceleration device driver module is related to the occurrence of operations outside the buffer’s memory boundaries. Exploiting this vulnerability can allow an attacker to access...

Linux Distros Unpatched Vulnerability : CVE-2026-80752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: psxpad-spi - set driver data before use psxpadspisuspend retrieves the controller state with spigetdrvdata, but probe never stores it, so suspend...

The vulnerability of the aa_sock_msg_perm() function in the security/apparmor/lsm.c module of the AppArmor security component for the Linux operating system allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the aasockmsgperm function in the security/apparmor/lsm.c module of the AppArmor security component of the Linux operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrit...

The vulnerability of the replace_nexthop_single() function in the net/ipv4/nexthop.c module of the Linux operating system’s IPv4 kernel implementation allows a attacker to cause a service failure.

The vulnerability of the replacenexthopsingle function in the net/ipv4/nexthop.c module of the Linux operating system’s IPv4 protocol implementation is related to the swapping of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the inet_frag_queue_flush() function in the net/ipv4/inet_fragment.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the inetfragqueueflush function in the net/ipv4/inetfragment.c module of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...

CVE-2021-3493

CVE-2021-3493 Escalada de privilegios local en Ubuntu OverlayFS Descripción "Problema específico de Ubuntu en el sistema de archivos overlayfs del kernel de Linux, donde no se validaba correctamente la aplicación de capacidades del sistema de archivos con respecto a los espacios de nombres de...

DirtyPipe-Exploit

CSE 5380: Trabajo de Seguridad de la Información CVE-2022-0847 Dirty Pipe Por Karan Vasudevamurthy UTA ID: 1002164438 ¿Qué es CVE? Common Vulnerabilities and Exposures CVE es una lista de vulnerabilidades y exposiciones de seguridad de la información divulgadas públicamente. La corporación MITRE...

CVE-2018-18955

CVE-2018-18955 Exploit local de root en Linux. Wrapper para el exploit de Jann Horn para CVE-2018-18955, bifurcado de kernel-exploits. En el kernel de Linux 4.15.x a 4.19.x antes de 4.19.2, mapwrite en kernel/usernamespace.c permite escalada de privilegios porque maneja incorrectamente espacios d...

blackboxprotobuf

Blackbox Protobuf Blackbox Protobuf now has an official package on PyPi under the namebbpb. The blackboxprotobuf package is an older fork Description Blackbox Protobuf is a set of tools for working with encoded Protocol Buffers protobuf without the matching protobuf definition. Protobuf is a bina...

insject

Insject insject es una herramienta para inspeccionar contenedores. Te permite ejecutar un comando arbitrario en un contenedor o en cualquier combinación de espacios de nombres namespaces de Linux. Soporta tres casos de uso principales: Modo LDPRELOAD usando libsetns.so LDPRELOAD=./libsetns.so...

libslub

libslub libslub es una librería de Python para examinar las estructuras de gestión de SLUB y las asignaciones de objetos la implementación del heap del kernel de Linux. Está diseñada actualmente para su uso con GDB, pero podría adaptarse fácilmente para funcionar con otros depuradores. Ayuda a...

rustproofing-linux

Blindando Linux con Rust Portando errores del kernel de Linux a Rust Este repositorio de código fuente es una colección de ejemplos que acompañan la publicación del blog en https://research.nccgroup.com/?p=18577. NO UTILICES estos ejemplos para nada más que seguir la publicación del blog. Contien...

thetick

The Tick Un sencillo backdoor para Linux embebido. The Tick Compilación Instalación Uso Medios Compilación The Tick solo depende de libcurl, así que asegúrate de tener el paquete de desarrollo correspondiente. Por ejemplo, en distribuciones basadas en Debian harías lo siguiente: root@kitploit: su...