7 matches found
CVE-2011-1237
CVE-2011-1237 这是2013年针对Windows 7上的CVE-2011-1237编写的一个旧版POC。该漏洞由Tarjei Mandt（@kernelpool）发现，并在其论文Kernel Attacks through User-Mode Callbacks中进行了阐述。 此POC中硬编码了多项内容，并调用了已失效的Null页面。该漏洞利用在我的演讲A Look into the Windows Kernel中有所描述。 Shellcode唯一的作用是触发断点。...
CVE-2026-68415
In the Linux kernel, the following vulnerability has been resolved: xfrm: clear mode callbacks after failed mode setup xfrmstategctask can run long after a failed IPTFS state setup. In the reproduced case, xfrminitstate cached x-modecbs, IPTFS setup returned -ENOMEM before publishing modedata, an...
UBUNTU-CVE-2026-68415
In the Linux kernel, the following vulnerability has been resolved: xfrm: clear mode callbacks after failed mode setup xfrmstategctask can run long after a failed IPTFS state setup. In the reproduced case, xfrminitstate cached x-modecbs, IPTFS setup returned -ENOMEM before publishing modedata, an...
CVE-2026-68415 xfrm: clear mode callbacks after failed mode setup
In the Linux kernel, the following vulnerability has been resolved: xfrm: clear mode callbacks after failed mode setup xfrmstategctask can run long after a failed IPTFS state setup. In the reproduced case, xfrminitstate cached x-modecbs, IPTFS setup returned -ENOMEM before publishing modedata, an...
CVE-2026-68415
The CVE-2026-68415 entry documents a Linux kernel xfrm (IPSec) flaw where xfrm_state_gc_task can dereference stale mode_cbs after a failed IPTFS state setup and subsequent module unload. The root cause is failing to clear x->mode_cbs before publishing mode_data, allowing deferred GC to access ...
EUVD-2026-55601
In the Linux kernel, the following vulnerability has been resolved: xfrm: clear mode callbacks after failed mode setup xfrmstategctask can run long after a failed IPTFS state setup. In the reproduced case, xfrminitstate cached x-modecbs, IPTFS setup returned -ENOMEM before publishing modedata, an...
EUVD-2026-42053
MSI Feature Manager contains a local privilege escalation vulnerability in the KernCoreLib64.sys kernel driver that allows any locally logged-on user to perform arbitrary physical memory read/write and unrestricted I/O port operations by accessing exposed IOCTL handlers without administrator...