CVE-2018-1932X

CVE-2018-1932X（Rust 漏洞利用 PoC）针对 GIGABYTE APP Center v1.05.21 及更早版本 仅仅因为你的目标内存不安全，并不代表你的漏洞利用也必须不安全！ 使用的漏洞： CVE-2018-19320 - ring0 memcpy-like 功能 CVE-2018-19323 - 读写机器特定寄存器 MSRs。 测试环境： 20H1：Windows 10 Kernel Version 19041 MP 1 procs Free x64 参考资源 Vergilius 项目：内核结构 技嘉补丁公告 KPCR 详情 环境要求 仅支持 x64...

CVE-2025-63602

CVE-2025-63602 Divulgación de CVE-2025-63602, incluyendo un PoC para el uso de un controlador inseguro en Awesome Miner 11.2.4 que conduce a lectura/escritura arbitraria del kernel a MSRs, resultando en ejecución de código del kernel...

CVE-2018-19323

CVE-2018-19323: Framework de Explotación de GIGABYTE GDrv Resumen Este repositorio contiene un framework de explotación completo y avanzado para CVE-2018-19323 , una vulnerabilidad crítica en el controlador gdrv.sys de GIGABYTE. Esta vulnerabilidad permite a usuarios no privilegiados leer y...

Lenovo-CVE-2025-8061

CVE-2025-8061 es una vulnerabilidad de escalada de privilegios en el controlador LnvMSRIO.sys de Lenovo. El controlador expone manejadores de IOCTL que permiten a cualquier proceso en modo usuario incluyendo usuarios sin privilegios realizar lo siguiente: Leer/escribir arbitrariamente Registros...

stop-zenbleed-win

在 Windows 上阻止 Zenbleed（CVE-2023-20593） 新发现的 Zenbleed 漏洞（CVE-2023-20593）影响所有 AMD Zen2 处理器。 不幸的是，AMD 要到 2023 年 11 月或 12 月才会为其许多处理器提供微码更新。 在此期间如何保持安全？ 幸运的是，存在一种软件规避方案。 虽然在 Linux 上应用软件规避方案只需一行命令，但在 Windows 上情况更为复杂。 要应用软件规避方案，需要在 MSR CPU 寄存器中设置一个特定的位（chicken bit DECFG9）。 正如 Travis Ormandy 指出的，以下命令可用于在...

CVE-2025-66678

CVE-2025-66678 En Hardware Read & Write Utility v1.25.11.26, el controlador expuso lectura y escritura arbitrarias de MSR, así como lectura y escritura de memoria física a través de MmMapIoSpace, ambas habilitan la ejecución de código en el kernel. Detalle del PoC El PoC intercambiará el token...

imMapper

imMapper A Demonstration on how to abuse the Vulnerable Driver AmdTools64. The Driver has the ability to only Read/Write Kernel Space Memory, as well as to Read/Write the MSR. This requires Admin Privileges. The driver is distributed trough the tool RGBFusion-2. Exclamation-mark This Demonstratio...

CVE-2026-80115

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation and denial-of-service vulnerability in DirectIo64.sys that allows local attackers to read arbitrary Model-Specific Registers or write zero to a...

CVE-2026-80115

PassMark PerformanceTest (before 11.1 build 1012), BurnInTest (before 11.1 build 1000), and OSForensics (before 11.1 build 1016) contain a privilege escalation and denial-of-service vulnerability in the DirectIo64.sys kernel driver. The root cause is exposed IOCTLs with insufficient blocklist enf...

CVE-2026-80115 PassMark PerformanceTest, BurnInTest, and OSForensics Kernel Crash via DirectIo64.sys MSR Write IOCTL

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation and denial-of-service vulnerability in DirectIo64.sys that allows local attackers to read arbitrary Model-Specific Registers or write zero to a...

EUVD-2026-71686

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation and denial-of-service vulnerability in DirectIo64.sys that allows local attackers to read arbitrary Model-Specific Registers or write zero to a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: KVM: VMX: Fixed a crash caused by uninitialized currentvmcs. KVM enables “Enlightened VMCS” and “Enlightened MSR Bitmap” when running as a nested hypervisor on top of Hyper-V. When the MSR bitmap is updated, the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Loads the TSC multiplier of L1 based on L1’s state, not L2’s state. When emulating a nested VM-Exit, the TSC multiplier of L1 is loaded if L1’s desired ratio does not match the current ratio. This does not occur if L1’...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: x86/resctrl: Clear stagedconfig before and after it is used. As a temporary storage, stagedconfig in rdtdomain should be cleared before and after it is used. The stale value in stagedconfig could cause an MSR access error. Here i...

CVE-2026-74516

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active Always update x2APIC MSR intercepts for L1 when AVIC is deactivated, even if L2 is active and KVM is using a separate MSR bitmap to run L2. If AVIC is...

AZL-96150 CVE-2026-74516 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active Always update x2APIC MSR intercepts for L1 when AVIC is deactivated, even if L2 is active and KVM is using a separate MSR bitmap to run L2. If AVIC is...

UBUNTU-CVE-2026-74516

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active Always update x2APIC MSR intercepts for L1 when AVIC is deactivated, even if L2 is active and KVM is using a separate MSR bitmap to run L2. If AVIC is...

CVE-2026-74516

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active Always update x2APIC MSR intercepts for L1 when AVIC is deactivated, even if L2 is active and KVM is using a separate MSR bitmap to run L2. If AVIC is...

CVE-2026-74516

The CVE-2026-74516 issue affects the Linux kernel (KVM/SMV) where, if AVIC is inhibited while L2 is active, the host may run L1 with AVIC disabled and with x2APIC MSR intercepts also disabled. This allows L1 to access the host APIC state, trigger arbitrary interrupts, modify task priority, and co...

CVE-2026-74516

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active Always update x2APIC MSR intercepts for L1 when AVIC is deactivated, even if L2 is active and KVM is using a separate MSR bitmap to run L2. If AVIC is...