88 matches found
mig
MIG: Mozilla InvestiGator MIG is Mozilla's platform for investigative surgery of remote endpoints. ⚠️ Deprecation Notice ⚠️ Mozilla is no longer maintaining the Mozilla InvestiGator MIG project. Mozilla is also no longer making use of this code internally. You are welcome to use this code as is...
Look-at-The-XNU-Through-A-Tube-CVE-2018-4242-Write-up-Translation-
Look at The XNU Through A Tube CVE-2018-4242 Write-up Zhuo Liang of Qihoo 360 Nirvan Team Contents 1 Introduction 1 1.1 CVE-2018-4242 . . . . . . . . . . . . . . . . . . . . . . . . . 1 2 The XNU Kernel 2 2.1 System Call . . . . . . . . . . . . . . . . . . . . . . . . . . 2 2.2 MIG...
PT-2026-90210
Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description In the ocfs2 module, a node receiving a DLM MIG LOCKRES message trusts several fields of the peer-supplied dlm migratable lockres without validation. Specifically, the num locks and...
SUSE CVE-2026-64474
In the Linux kernel, the following vulnerability has been resolved: vfio: prevent infinite loop in vfiomiggetnextstate on blocked arc vfiomiggetnextstate walks vfiofromfsmtable one step at a time, looping to skip optional states the device does not support until nextfsm is supported. A blocked...
UBUNTU-CVE-2026-64474
In the Linux kernel, the following vulnerability has been resolved: vfio: prevent infinite loop in vfiomiggetnextstate on blocked arc vfiomiggetnextstate walks vfiofromfsmtable one step at a time, looping to skip optional states the device does not support until nextfsm is supported. A blocked...
CVE-2026-64474
In the Linux kernel, the following vulnerability has been resolved: vfio: prevent infinite loop in vfiomiggetnextstate on blocked arc vfiomiggetnextstate walks vfiofromfsmtable one step at a time, looping to skip optional states the device does not support until nextfsm is supported. A blocked...
CVE-2026-24197
NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU MIG partition management, where an insecure default initialization of memory subsystem routing resources could lead to data corruption or a hang during partition reconfiguration. A successful exploit of this...
CVE-2026-24197
NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU MIG partition management, where an insecure default initialization of memory subsystem routing resources could lead to data corruption or a hang during partition reconfiguration. A successful exploit of this...
CVE-2026-24197
CVE-2026-24197 affects NVIDIA’s Linux GPU Display Driver, specifically the Multi-Instance GPU (MIG) partition management. The issue is an insecure default initialization of memory subsystem routing resources, which can cause data corruption or a hang during MIG partition reconfiguration. A succes...
CVE-2026-24197
NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU MIG partition management, where an insecure default initialization of memory subsystem routing resources could lead to data corruption or a hang during partition reconfiguration. A successful exploit of this...
CVE-2026-24197: Initialization of a Resource with an Insecure Default
NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU MIG partition management, where an insecure default initialization of memory subsystem routing resources could lead to data corruption or a hang during partition reconfiguration. A successful exploit of this...
NVIDIA Virtual GPU Manager Multiple Vulnerabilities (May 2026)
The NVIDIA Virtual GPU Manager software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, including the following: - A vulnerability exists where an attacker could leak held driver locks, potentially leading to denial of service...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: dfc, flagger, teleport-operator-fips, act, nri-rabbitmq-fips, virt-controller-fips, etcd-fips, crossplane-provider-aws-wafv2-fips, podman-fips, step-kms-plugin, crossplane-provider-aws-acm-fips, nerdctl, kapp, gatus, docker-cli, s5cmd-fips, nri-rabbitmq,...
GHSA-JRG3-GFJW-HM96 vulnerabilities
Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, dfc, aws-ebs-csi-driver-fips, cilium-envoy, kubevirt-cdi-apiserver, runc, kubernetes-csi-external-attacher, flagger, seaweedfs, vale, migrate, teleport-operator-fips, act, kwok, nri-rabbitmq-fips, rancher-fleet...
GHSA-GJVH-7JH8-7XHM vulnerabilities
Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, dfc, aws-ebs-csi-driver-fips, cilium-envoy, kubevirt-cdi-apiserver, runc, kubernetes-csi-external-attacher, flagger, seaweedfs, vale, migrate, teleport-operator-fips, act, kwok, nri-rabbitmq-fips, rancher-fleet...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, dfc, aws-ebs-csi-driver-fips, cilium-envoy, kubevirt-cdi-apiserver, runc, kubernetes-csi-external-attacher, flagger, seaweedfs, vale, migrate, teleport-operator-fips, act, kwok, nri-rabbitmq-fips, rancher-fleet...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, dfc, aws-ebs-csi-driver-fips, cilium-envoy, kubevirt-cdi-apiserver, runc, kubernetes-csi-external-attacher, flagger, seaweedfs, vale, migrate, teleport-operator-fips, act, kwok, nri-rabbitmq-fips, rancher-fleet...
CVE-2026-32280 vulnerabilities
Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, dfc, aws-ebs-csi-driver-fips, cilium-envoy, kubevirt-cdi-apiserver, runc, kubernetes-csi-external-attacher, flagger, seaweedfs, vale, migrate, teleport-operator-fips, act, kwok, nri-rabbitmq-fips, rancher-fleet...
📄 macOS Sierra 10.12 Build 16A323 Double-Free / Privilege Escalation
macOS Sierra version 10.12 Build 16.A323 local privilege escalation proof of concept exploit. A flaw in the MIG ownership model within the ioserviceaddnotificationool routine of IOKit allows a malicious user to leak Mach port send-right references. By repeatedly invoking notifications with...
