throttlestop-exploit-rw

물리 메모리 매퍼 취약한 드라이버 악용과 결합된 가상-물리 주소 변환을 통해 물리 메모리 접근을 시연하는 연구 도구입니다. 개요 이 프로젝트는 주소 변환을 위한 superfetch 기술과 IOCTL 기반 물리 메모리 접근을 결합하여 저수준 Windows 메모리 관리를 탐구합니다. 커널 모드/사용자 모드 상호 작용 및 메모리 서브시스템 내부를 이해하기 위해 제작되었습니다. CVE-2025-7771 – ThrottleStop.sys 물리 메모리 읽기/쓰기 취약점 요약 CVE ID: CVE-2025-7771 구성 요소:...

Important: Red Hat Security Advisory: libpcap security update

An update for libpcap is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access

A flaw was found in libpcap. The Berkeley Packet Filter BPF interpreter in libpcap does not properly validate register indexes in BPF instructions. A local attacker could craft a malicious filter program to trigger an out-of-bounds read and write vulnerability. This could allow the attacker to re...

CVE-2026-90404

A flaw was found in the Linux kernel. The crosecdebugfs component registers a panic notifier but does not unregister it when the component is removed. This oversight allows a subsequent system panic to attempt to call into the removed instance, leading to access of previously released memory. Suc...

CVE-2017-16995

취약점 설명 Ubuntu는 데스크톱 애플리케이션 중심의 오픈소스 GNU/Linux 운영체제로, Debian GNU/Linux를 기반으로 합니다. 최근 화이트햇 해커가 Ubuntu 최신 버전Ubuntu 16.04에 로컬 권한 상승 취약점이 존재한다고 공개했으며, 취약점 번호는 CVE-2017-16995입니다. 이 취약점은 eBPF bpf2를 호출하는 Linux 커널 시스템에 존재합니다. 사용자가 악성 BPF 프로그램을 제공하면 eBPF 검증기verifier 모듈에서 계산 오류가 발생하여 임의 메모리 읽기/쓰기 문제가 발생하며, ...

kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()

A flaw was found in the Linux kernel's netfilter connection tracking subsystem. The TCP option processing mechanism improperly assumes memory alignment when reading packet headers. A remote attacker could exploit this vulnerability by sending crafted TCP packets with misaligned SACK options throu...

kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp()

A flaw was found in the Linux kernel's tunnels module. This vulnerability occurs when the iptunnelpmtudcheckicmp function is called without the skb transport header being properly set. An attacker could exploit this condition to trigger an out-of-bound memory access, which may lead to system...

ThrottleStopPoC

ThrottleStopPoC CVE-2025-7771 : ThrottleStop ドライバを介した任意の物理メモリおよび I/O ポートの読み書き ThrottleStop は、CPU スロットリングを監視および修正するために使用される小規模な正規アプリケーションです。これらのタスクを容易にするドライバを備えており、入力検証はほとんど存在しません。 脆弱な IOCTL IOCTL| 脆弱性 ---|--- 0x80006498| 任意のメモリ読み取り 0x8000649C| 任意のメモリ書き込み 0x80006430| 任意のポート読み取り 0x80006434|...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: bpf: Fixed an invalid prog-stats access when updateeffectiveprogs fails. The issue occurs due to a fault-injected code sequence in updateeffectiveprogs. The problem can be described as follows: c cgroupbpfdetach...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mmc: jz4740: Apply DMA engine limits to maximum segment size Follow the approach used in other DMA-enabled MMC host drivers see host/mmci.c, and limit the maximum segment size based on the capabilities of the DMA engine. This is...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: igb: A potential invalid memory access issue has been fixed in igbinitmodule. The pciregisterdriver function may fail. When this occurs, the dcanotifier needs to be unregistered. Otherwise, the dcanotifier can be called when igb...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the handling of offloads in ipgre.c, there is a possibility of a page fault due to an invalid memory access. This could lead to the disclosure of local information without the need for additional execution privileges. User interaction is not required for exploitation. Product: Android Versions...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ASoC: stm32: spdifrx: fixed the issue of releasing the DMA channel in stm32spdifrxRemove. In case of an error when requesting the ctrlchan DMA channel, the pointer to ctrlchan is not null. Therefore, releasing the DMA channel lea...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Prevent the use of a lock before it is initialized. If a failure occurs during the probe of hfi1 before the sdmamaplock is initialized, the call to hfi1freedevdata will attempt to use a lock that has not been...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: qdsp6: topology: check widget type before accessing data Check the widget type before accessing private data, as this could be a virtual widget that is not associated with a DSP graph, container, or module. Accessing...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fixed a crash in the cmaneteventworkhandler function. The struct rdmacmid structure has a member “struct workstruct network”, which is reused to queue cmaneteventworkhandler functions onto the cmawq queue. The crash1 ca...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: i40e: Fixed potential invalid access when the MAC list is empty. listfirstentry never returns NULL—if the list is empty, it still returns a pointer to an invalid object, leading to potential invalid memory access when dereferenci...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Initialize freeqp completion before using it. In irdmacreateqp, if ibcopytoudata fails, it will call irdmadestroyqp to clean up. This process will attempt to wait for the completion of freeqp, but freeqp has not yet...