CVE-2021-28663

CVE-2021-28663 Базовый PoC для утечки по CVE-2021-28663 внутренняя часть уязвимости-бэкдора в ядре Android Это базовый PoC для CVE-2021-28663. Конструктивный недостаток в драйвере ядра Android Mali GPU. 1. Создайте GPUVA и выполните mmap для него, чтобы получить виртуальный адрес для физических...

CVE-2026-98216

In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix the PIOCRED credit-return mmap hfi1filemmap's PIOCRED case must hand user space the single credit-return page that holds this context's entry. That page is the second or third page of the per-node credit-return...

EUVD-2026-93143

In the Linux kernel, the following vulnerability has been resolved: selinux: preserve user SID across nested backing files SELinux saves the user file SID in a backing-file security blob so it remains available after mmap replaces vma-vmfile with a backing file. For nested backing files overlayfs...

EUVD-2026-93142

In the Linux kernel, the following vulnerability has been resolved: selinux: recheck intermediate backing files on mprotect mprotect can be used to bypass the SELinux checks that mmap performs against the intermediate layers of a stacked filesystem. mmap checks every backing layer as the request...

CVE-2026-98214

A vulnerability in the Linux kernel allows the mprotect() system call to bypass SELinux checks performed by mmap() against intermediate layers of a stacked filesystem . While mmap() validates every backing layer in the stack, mprotect() only references the lowest backing file, skipping intermedia...

cve-2018-17182

define GNUSOURCE include include include include include include include include include include include int vmaspamcontrolfd = -1; int threaddonefd = -1; int vmaspamdonefd = -1; void semincint fd uint64t val = 1; if writefd, &val, 8 != 8 err1, "seminc"; void semdecint fd uint64t val; if readfd,...

CVE-2016-5195

demo1 Cette démo est basée sur https://github.com/timwr/CVE-2016-5195 Sortie de make test : user@user:/$ cd /home/user/demo1 && make test /home/user/adb/android-ndk-r21d/ndk-build NDKPROJECTPATH=. APPBUILDSCRIPT=./Android.mk APPABI=x8664 APPPLATFORM=android-23 make1: Entering directory...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fixed the issue where the mmap write lock was not released. If the mmap write lock is acquired while draining a retry fault, the mmap write lock is not released because svmrangerestorepages calls mmapreadunlock before...

CVE-2016-5195-master

CVE-2016-5195 CVE-2016-5195 dirty cow/dirtycow/dirtyc0w proof of concept для Android Этот репозиторий демонстрирует уязвимость на уязвимых Android-устройствах, подключённых через ADB. Он не отключает SELinux см. https://github.com/timwr/CVE-2016-5195/issues/9 и не устанавливает superuser на...

CVE-2024-44947

CVE-2024-44947 Description : Dans le noyau Linux, la vulnérabilité suivante a été résolue : fuse : Initialiser le contenu des pages au-delà de la fin du fichier avant de les marquer comme à jour. fusenotifystore, contrairement à fusedoreadpage, n'active pas la mise à zéro des pages car elle peut...

dyen

dyen dyen загружает Mach-O dylib в память с помощью штатного Python из macOS и вызывает экспортируемую точку входа без dlopen для этого dylib. Цель — чтобы образ никогда не существовал отдельным файлом на целевой системе и никогда не регистрировался в dyld. автор: cenobyte [email protected]...

Dirty-COW-CVE-2016-5195-

Dirtyc0w Docker POC Предварительные требования: Установленный Vagrant Как использовать Сначала клонируйте проект git clone https://github.com/BrolyCode/Dirty-Cow.git Перейдите в папку cd Dirty-Cow Затем запустите окружение с помощью команды vagrant up После того как сервер будет построен, мы...

android-CVE-2016-5195

CVE-2016-5195 CVE-2016-5195 dirty cow/dirtycow/dirtyc0w — proof of concept для Android Этот репозиторий демонстрирует уязвимость на уязвимых Android-устройствах, подключённых через ADB. Он не отключает SELinux см. https://github.com/timwr/CVE-2016-5195/issues/9 и не устанавливает superuser на...

SUSE CVE-2026-97617

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Check resizedisabled before publishing the new subbuf order ringbuffersubbuforderset stores the new order and only then walks the CPUs, returning -EBUSY if any of them has resizing disabled. A user mapped buffer has...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses Pillow which is vulnerable to CVE-2026-54058, CVE-2026-59197, CVE-2026-59198, CVE-2026-59199, CVE-2026-59200, CVE-2026-59203, CVE-2026-59204, CVE-2026-59205

Summary IBM Maximo Application Suite - Visual Inspection component uses Pillow which is vulnerable to CVE-2026-54058, CVE-2026-59197, CVE-2026-59198, CVE-2026-59199, CVE-2026-59200, CVE-2026-59203, CVE-2026-59204, CVE-2026-59205, This bulletin contains information regarding the vulnerability and...

AZL-104823 CVE-2026-97931 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ALSA: us122l: Prevent write upgrades for read mappings The hwdep mmap callback rejects read-buffer mappings that are initially writable, but leaves VMMAYWRITE set on mappings created with PROTREAD. A process that can open the hwd...

CVE-2026-97931

In the Linux kernel, the following vulnerability has been resolved: ALSA: us122l: Prevent write upgrades for read mappings The hwdep mmap callback rejects read-buffer mappings that are initially writable, but leaves VMMAYWRITE set on mappings created with PROTREAD. A process that can open the hwd...

AZL-104387 CVE-2026-97929 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ALSA: usbusx2y: validate URB actuallength in interrupt callback iusx2yin04int processes the interrupt URB data without checking urb-actuallength. A short transfer from a malfunctioning device would cause the handler to process...

DEBIAN-CVE-2026-97929

In the Linux kernel, the following vulnerability has been resolved: ALSA: usbusx2y: validate URB actuallength in interrupt callback iusx2yin04int processes the interrupt URB data without checking urb-actuallength. A short transfer from a malfunctioning device would cause the handler to process...

DEBIAN-CVE-2026-97931

In the Linux kernel, the following vulnerability has been resolved: ALSA: us122l: Prevent write upgrades for read mappings The hwdep mmap callback rejects read-buffer mappings that are initially writable, but leaves VMMAYWRITE set on mappings created with PROTREAD. A process that can open the hwd...