kernel: nvme-pci: fix mempool alloc size

A flaw was addressed in the Linux kernel’s nvme-pci driver related to how the driver calculated the worst-case number of PRP Physical Region Page lists required for a given I/O request. The implementation previously rounded the allocation to one list instead of correctly converting the maximum si...

s6_pcie_microblaze

PCI Express DIYハッキングツールキット 一般情報 内容 SP605ボード構成 ソフトウェア構成 例 Python APIの使用 実践的なDMA攻撃 Option ROM攻撃 トラブルシューティング ソースコードからのプロジェクト構築 一般情報 このリポジトリには、PCI-EバスとDMA攻撃に関連するツールと概念実証のセットが含まれています。Spartan-6 FPGAを搭載したXilinx SP605 Evaluation Kit向けに、ソフトウェアで制御可能なPCI-E Gen...

cloudsploit

Aqua의 CloudSploit - 클라우드 보안 스캔 빠른 시작 일반 $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker build . -t cloudsploit:0.0.1 $ docker run cloudsploit:0.0...

cloudsploit

CloudSploit by Aqua - Cloud Security Scans Quick Start Generic $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker build . -t cloudsploit:0.0.1 $...

auditpolCIS

auditpolCIS Windows SIEM構成のCISベンチマークテスト これは、Windows監査ポリシー設定をCISベンチマーク推奨設定と照らし合わせてテストするアプリケーションです。いくつかのポイント： テスト対象システムはWindows Server 2019で、使用したベンチマークもWindows Server 2019です。 スクリプトはSSHで接続します。SSHはWindows Server 2019に含まれていますが、有効にする必要があります。WinRM（または他の）接続タイプを希望する場合は、お知らせいただくかPRを送ってください。...

pcileech

PCILeech Summary: PCILeech uses PCIe hardware devices to read and write target system memory. This is achieved by using DMA over PCIe. No drivers are needed on the target system. PCILeech also works without hardware together with a wide range of software memory acqusition methods supported by the...

lightbulb-framework

LightBulb LightBulb is an open source python framework for auditing web application firewalls and filters. Synopsis The framework consists of two main algorithms: GOFA : An active learning algorithm that infers symbolic representations of automata in the standard membership/equivalence query mode...

ghidra-firmware-utils

Ghidra Firmware Utilities PC ファームウェアのリバースエンジニアリングを支援する Ghidra 用の各種モジュールです。 これは coreboot プロジェクトの GSoC 2019 プロジェクトとして採択されました。 機能 PCI option ROM ローダー PCI option ROM 用の FS ローダーを実装（複数イメージを含むハイブリッド ROM を処理。例: レガシー x86 + UEFI） PCI option ROM から UEFI 実行ファイルをロード（圧縮イメージを含む） レガシー x86 option ROM...

ROS-20260930-73-0115

The vulnerability of the pci/endpoint/pci-ep-cfs.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260930-73-0081

The vulnerability in the pci/ctxfi/ctamixer.c component of the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-97505

A flaw was found in the Linux kernel. Missing authorization checks in the PCI sysfs interface can allow a local user to cause a denial of service DoS. The kernel fails to verify administrative capabilities when resizing a device Base Address Register BAR, relying only on basic file access...

CVE-2026-93821

A flaw was found in the Linux kernel's Altera PCI Express PCIe controller driver. A local user could exploit a race condition during root bus removal by triggering concurrent device rescan or hotplug operations through the sysfs interface. This lack of proper synchronization can lead to a...

VAPT-Report-on-SMB-Exploitation-in-Windows-10-Finance-Endpoint

Windows 10 ファイナンスエンドポイントにおける SMB 悪用に関する VAPT レポート 本レポートは、金融指向のインフラストラクチャ内の Windows 10 マシンにおける、PCI DSS 準拠、SMB サービス列挙、および CVE-2017-0144 EternalBlue の悪用に焦点を当てた、構造化された VAPT エンゲージメントの概要を示しています。 🔐 はじめに...

ROS-20260928-73-0122

The vulnerability of the drivers/pci/controller/cadence components in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE CVE-2026-93820

In the Linux kernel, the following vulnerability has been resolved: PCI: rockchip: Protect root bus removal with rescan lock Hold the pcirescanremovelock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may le...

SUSE CVE-2026-93821

In the Linux kernel, the following vulnerability has been resolved: PCI: altera: Protect root bus removal with rescan lock Hold the pcirescanremovelock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may lead...

SUSE CVE-2026-93822

In the Linux kernel, the following vulnerability has been resolved: PCI: iproc: Protect root bus removal with rescan lock Hold the pcirescanremovelock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may lead ...

DEBIAN-CVE-2026-98142

In the Linux kernel, the following vulnerability has been resolved: drm/cirrus-qemu: Validate BAR0 size during probe The cirrus-qemu driver relies on CIRRUSVRAMSIZE 4 MB to validate framebuffer sizes. However, during PCI probe, the driver mapped BAR0 without verifying that its size matches...

UBUNTU-CVE-2026-97946

In the Linux kernel, the following vulnerability has been resolved: x86/amdnode: Fix PCI device reference counting in amdsmninit The local "root" pointer is a temporary variable used during the device search. Therefore, refcount related to the search iterators should be cleaned up after the searc...

CVE-2026-98142

The Linux kernel contains a vulnerability in the cirrus-qemu driver where it fails to verify that the PCI BAR0 resource size matches the expected CIRRUS_VRAM_SIZE (4 MB) during the probe process. If a device with a BAR0 smaller than 4 MB is bound, the driver may allow the creation of framebuffers...