kemon

Kemon An Open Source Pre and Post Callback-based Framework for macOS Kernel Monitoring. Breaking News - 08/28/2019 macOS Catalina 10.15 Beta 7 Release Notes https://developer.apple.com/documentation/macosreleasenotes/macoscatalina1015beta7releasenotes Endpoint Security The kauth API has been...

AZL-102807 CVE-2026-93191 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: smack: fix incorrect task context in smackmsgqueuemsgrcv The smackmsgqueuemsgrcv function incorrectly checks the permissions of the 'current' task instead of the 'target' task. In the msgsnd syscall path, if a receiver is already...

CVE-2026-93191

In the Linux kernel, the following vulnerability has been resolved: smack: fix incorrect task context in smackmsgqueuemsgrcv The smackmsgqueuemsgrcv function incorrectly checks the permissions of the 'current' task instead of the 'target' task. In the msgsnd syscall path, if a receiver is already...

DEBIAN-CVE-2026-93191

In the Linux kernel, the following vulnerability has been resolved: smack: fix incorrect task context in smackmsgqueuemsgrcv The smackmsgqueuemsgrcv function incorrectly checks the permissions of the 'current' task instead of the 'target' task. In the msgsnd syscall path, if a receiver is already...

CVE-2026-93191 smack: fix incorrect task context in smack_msg_queue_msgrcv

In the Linux kernel, the following vulnerability has been resolved: smack: fix incorrect task context in smackmsgqueuemsgrcv The smackmsgqueuemsgrcv function incorrectly checks the permissions of the 'current' task instead of the 'target' task. In the msgsnd syscall path, if a receiver is already...

EUVD-2026-82299

In the Linux kernel, the following vulnerability has been resolved: smack: fix incorrect task context in smackmsgqueuemsgrcv The smackmsgqueuemsgrcv function incorrectly checks the permissions of the 'current' task instead of the 'target' task. In the msgsnd syscall path, if a receiver is already...

CVE-2026-93191

CVE-2026-93191 affects the Linux kernel's SMACK (Security Markup and Labeling Kernel) module. The root cause is in smack_msg_queue_msgrcv(), which incorrectly checks the permissions of the current task rather than the target task. When the pipelined_send() optimization in the msgsnd() syscall pat...

CVE-2026-93191: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smack: fix incorrect task context in smackmsgqueuemsgrcv The smackmsgqueuemsgrcv function incorrectly checks the permissions of the 'current' task instead of the 'target' task. In the msgsnd syscall path, if a receiver is already...

FreeBSD-SA-26:59.mac_do

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:59.macdo Security Advisory The FreeBSD Project Topic: Unauthorized credential switching Category: core Module: macdo Announced: 2026-08-25 Credits: Hazley...

CVE-2026-23310

In the Linux kernel, the following vulnerability has been resolved: bpf/bonding: reject vlan+srcmac xmithashpolicy change when XDP is loaded bondoptionmodeset already rejects mode changes that would make a loaded XDP program incompatible via bondxdpcheck. However, bondoptionxmithashpolicyset has ...

CVE-2026-23310

In the Linux kernel, the following vulnerability has been resolved: bpf/bonding: reject vlan+srcmac xmithashpolicy change when XDP is loaded bondoptionmodeset already rejects mode changes that would make a loaded XDP program incompatible via bondxdpcheck. However, bondoptionxmithashpolicyset has ...

An Open-Source Pre and Post Callback-Based Framework for macOS Kernel Monitoring: Kemon

If third-party vendors want to add new features to the macOS kernel, such as antivirus capabilities, ransomware blocking, data breach auditing, behavior monitoring and so on, they usually need the support of the system’s exported interfaces. At present, only two known official interfaces are...

CVE-2008-7300

The labeled networking implementation in Solaris Trusted Extensions in Sun Solaris 10 and OpenSolaris snv39 through snv67, when a labeled zone is in the installed state, allows remote authenticated users to bypass a Mandatory Access Control MAC policy and obtain access to the global zone...

Improper access control

The labeled networking implementation in Solaris Trusted Extensions in Sun Solaris 10 and OpenSolaris snv39 through snv67, when a labeled zone is in the installed state, allows remote authenticated users to bypass a Mandatory Access Control MAC policy and obtain access to the global zone...

CVE-2008-7300

CVE-2008-7300 describes a vulnerability in the labeled networking implementation of Solaris Trusted Extensions on Sun Solaris 10 and OpenSolaris (snv_39 through snv_67). When a labeled zone is in the installed state, remote authenticated users can bypass Mandatory Access Control (MAC) and gain ac...

CVE-2008-7300: Undefined Security Weakness

The labeled networking implementation in Solaris Trusted Extensions in Sun Solaris 10 and OpenSolaris snv39 through snv67, when a labeled zone is in the installed state, allows remote authenticated users to bypass a Mandatory Access Control MAC policy and obtain access to the global zone...

CVE-2009-3468

CVE-2009-3468 pertains to Solaris 10 CDE 1.6. The vulnerability set, related to a menu typo and the Style Manager, allows local users to execute arbitrary commands or bypass MAC when Trusted Extensions is enabled. Concrete remediation is available: patch 139620-01 for Solaris 10 (SunOS) SPARC, wi...

CVE-2009-3468: Undefined Security Weakness

Multiple unspecified vulnerabilities in Common Desktop Environment CDE in Sun Solaris 10, when Trusted Extensions is enabled, allow local users to execute arbitrary commands or bypass the Mandatory Access Control MAC policy via unknown vectors, related to a menu typo and the Style Manager...

Sun Solaris可信扩展标记网络安全绕过漏洞

BUGTRAQ ID: 30602 CNCAN ID：CNCAN-2008081102 Sun Solaris是一款商业性质的操作系统。 Sun Solaris存在安全绕过问题，远程攻击者可以利用漏洞获得对管理域的访问，可能导致特权提升。 如果一个Solaris可信扩展系统有一个标记域在"installed"状态，Solaris可信扩展标记网络存在安全问题允许从其他系统在相同标签远程未授权获得对受此漏洞影响息沟通的全局域访问。如果用户在全局域中有合法用户名和密码，这是强制访问控制MAC策略冲突。全局域域在可信扩展系统中属于管理域，只能管理员角色才能访问。 Sun Solaris 10x8...