physmem2profit

Physmem2profit Physmem2profit può essere utilizzato per creare un minidump del processo LSASS di un host target analizzando la memoria fisica da remoto. L'intento di questa ricerca è proporre un approccio alternativo al furto di credenziali e creare un framework modulare che possa essere esteso p...

EUVD-2026-67961

IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boot registry parameter injection vulnerability that allows attackers with physical access to execute arbitrary Linux loader parameters by writing to an unencrypted and unsigned configuration area read by the signed bootloader...

EUVD-2026-67962

IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass vulnerability in the GRUB boot stage that allows physically present attackers to gain unauthorized root access by placing an unsigned empty file named igel.conf on a partition. Attackers can exploit...

Silhouette

Silhouette Di Gabriel Landau e Mark Mager presso Elastic Security. Da Hide Your Valuables — Mitigating Physical Credential Dumping Attacks presentato allo Shmoocon 2023. Diapositive qui. Tenere i segreti di LSA fuori dalla memoria fisica Silhouette è un POC che mitiga l'uso della memoria fisica p...

Lenovo-CVE-2025-8061

CVE-2025-8061 è una vulnerabilità di escalation dei privilegi nel driver LnvMSRIO.sys di Lenovo. Il driver espone gestori IOCTL che consentono a qualsiasi processo in modalità utente inclusi utenti non privilegiati di: Leggere/scrivere Registri Specifici del Modello MSR arbitrari Leggere/scrivere...

CVE-2026-82018

IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass vulnerability in the GRUB boot stage that allows physically present attackers to gain unauthorized root access by placing an unsigned empty file named igel.conf on a partition. Attackers can exploit...

CVE-2026-82017

IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boot registry parameter injection vulnerability that allows attackers with physical access to execute arbitrary Linux loader parameters by writing to an unencrypted and unsigned configuration area read by the signed bootloader...

CVE-2026-82018

IGEL OS 12 (before 12.9.0 / 12.8.3 LTS ) and IGEL OS 11 (before 11.11.150 ) contain a secure boot bypass in the GRUB boot stage . A physically present attacker can place an unsigned empty file named igel.conf on a partition, exploiting GRUB's fail-open signature verification behavior to reach an ...

CVE-2026-82017 IGEL OS 12 / 11 Boot Registry Parameter Injection via Unsigned Configuration Area

IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boot registry parameter injection vulnerability that allows attackers with physical access to execute arbitrary Linux loader parameters by writing to an unencrypted and unsigned configuration area read by the signed bootloader...

CVE-2026-82017

IGEL OS 12 (before 12.7.6 ) and 11 (before 11.11.150 ) are affected by a boot registry parameter injection vulnerability. The root cause is an unencrypted and unsigned configuration area that is read by the signed bootloader. An attacker with physical access can write malicious Linux kernel comma...

SUSE CVE-2026-80682

In the Linux kernel, the following vulnerability has been resolved: riscv/mm: use physical alignment for vmemmapstartpfn RISC-V computes vmemmapstartpfn by rounding physrambase down to VMEMMAPADDRALIGN. That alignment must therefore be expressed in the physical-address domain. Commit 476849b0fba4...

CVE-2026-80682

In the Linux kernel, the following vulnerability has been resolved: riscv/mm: use physical alignment for vmemmapstartpfn RISC-V computes vmemmapstartpfn by rounding physrambase down to VMEMMAPADDRALIGN. That alignment must therefore be expressed in the physical-address domain. Commit 476849b0fba4...

EUVD-2026-67558

In the Linux kernel, the following vulnerability has been resolved: riscv/mm: use physical alignment for vmemmapstartpfn RISC-V computes vmemmapstartpfn by rounding physrambase down to VMEMMAPADDRALIGN. That alignment must therefore be expressed in the physical-address domain. Commit 476849b0fba4...

CVE-2026-80682 riscv/mm: use physical alignment for vmemmap_start_pfn

In the Linux kernel, the following vulnerability has been resolved: riscv/mm: use physical alignment for vmemmapstartpfn RISC-V computes vmemmapstartpfn by rounding physrambase down to VMEMMAPADDRALIGN. That alignment must therefore be expressed in the physical-address domain. Commit 476849b0fba4...

CVE-2026-80682

CVE-2026-80682 is a unit mismatch bug in the Linux kernel 's RISC-V memory management subsystem (riscv/mm). When computing vmemmap_start_pfn, the kernel fed MAX_FOLIO_VMEMMAP_ALIGN (measured in bytes of struct page storage) directly into VMEMMAP_ADDR_ALIGN, which operates in the physical-address ...

CVE-2026-80682

In the Linux kernel, the following vulnerability has been resolved: riscv/mm: use physical alignment for vmemmapstartpfn RISC-V computes vmemmapstartpfn by rounding physrambase down to VMEMMAPADDRALIGN. That alignment must therefore be expressed in the physical-address domain. Commit 476849b0fba4...

PT-2026-83365

Name of the Vulnerable Software and Affected Versions IGEL OS 12 versions prior to 12.7.6 IGEL OS 11 versions prior to 11.11.150 Description An issue exists where attackers with physical access can execute arbitrary Linux loader parameters. This is possible by writing to an unencrypted and unsign...

PT-2026-83366

Name of the Vulnerable Software and Affected Versions IGEL OS 12 versions prior to 12.9.0 IGEL OS 12 version 12.8.3 LTS IGEL OS 11 versions prior to 11.11.150 Description A secure boot bypass exists in the GRUB boot stage. A physically present attacker can gain unauthorized root access by placing...

CVE-2026-81717

opensslencrypt pip package openssl-encrypt before 1.4.9 contains two weaknesses in the portable USB drive feature, whose threat model treats the removable drive as untrusted attacker with physical write access. USBDriveCreator.verifyintegrityfile only validates files listed in the manifest, so...

CVE-2026-81681

opensslencrypt pip package openssl-encrypt versions = 1.4.8 advertise a portable USB workspace as an 'Encrypted USB Workspace' with AES-256-GCM encryption and write a marker declaring the workspace encrypted, but the workspace directory is actually stored in cleartext and the derived encryption k...