asminject

asminject.py asminject.py is a heavily-modified fork of David Buchanan's dlinject project. Injects arbitrary assembly or precompiled binary payloads directly into x86-64, x86, and ARM32 Linux processes by accessing /proc//mem instead of attaching via ptrace. Useful for tampering with trusted...

CVE-2012-0056

SUID /proc/pid/mem 쓰기를 통한 Linux 로컬 권한 상승 Mempodipper CVE-2012-0056에 대한 익스플로잇인 Mempodipper를 소개합니다. /proc/pid /mem은 프로세스의 가상 메모리 공간과 동일한 주소로 탐색하여 프로세스 메모리를 직접 읽고 쓸 수 있는 인터페이스입니다. 2.6.39에서는 /proc/pid /mem에 대한 무단 접근 방지 조치가 충분하다고 판단되어, 임의 프로세스 메모리에 대한 쓰기 지원을 막던 기존의 ifdef가 제거되었습니다. 올바른 권한이 있는 사람은 누구나...

CVE-2026-64371 proc: protect ptrace_may_access() with exec_update_lock (part 1)

In the Linux kernel, the following vulnerability has been resolved: proc: protect ptracemayaccess with execupdatelock part 1 Fix the easy cases where procfs currently calls ptracemayaccess without execupdatelock protection, where the fix is to simply add the extra lock or use mmaccess: -...

CVE-2026-46259

In the Linux kernel, the following vulnerability has been resolved: procfs: fix missing RCU protection when reading realparent in dotaskstat When reading /proc/pid/stat, dotaskstat accesses task-realparent without proper RCU protection, which leads to: cpu 0 cpu 1 ----- ----- dotaskstat var =...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001297)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001297 advisory. An issue was discovered in the procpidstack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the kernel...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004328)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004328 advisory. An information disclosure vulnerability exists in the /proc/pid/syscall functionality of Linux Kernel 5.1 Stable and 5.4.66. More specifically, this issue has been...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001229)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001229 advisory. A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty null write to this file can crash the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003953)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003953 advisory. An information disclosure vulnerability exists in the /proc/pid/syscall functionality of Linux Kernel 5.1 Stable and 5.4.66. More specifically, this issue has been...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002944)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002944 advisory. An issue was discovered in the procpidstack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the kernel...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002616)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002616 advisory. An issue was discovered in the procpidstack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the kernel...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002701)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002701 advisory. A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty null write to this file can crash the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001245)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001245 advisory. A flaw was found affecting the Linux kernel before version 4.17. By mmaping a FUSE-backed file onto a process's memory containing command line arguments or environme...

CVE-2022-50380

Affected software: Linux kernel. Vulnerable component: mm: /proc/pid/smaps_rollup (show_smaps_rollup). Root cause: a null-deref when there are no VMAs in the task, introduced by commit 258f669e7e88 that converted to a single value seq_file. Impact stated: availability impact is HIGH in CVSS metri...

PT-2025-38328

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null dereference issue was resolved in the Linux kernel related to the /proc/pid/smaps rollup functionality. The issue was introduced by commit 258f669e7e88, which converted the...

SUSE CVE-2018-17972

An issue was discovered in the procpidstack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the kernel stack of an arbitrary task, allowing a local attacker to exploit racy stack unwinding and leak kernel task stack contents...

GSD-2022-1007356 mm: /proc/pid/smaps_rollup: fix no vma's null-deref

mm: /proc/pid/smapsrollup: fix no vma's null-deref This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.221 by commit...

GSD-2022-1007189 mm: /proc/pid/smaps_rollup: fix no vma's null-deref

mm: /proc/pid/smapsrollup: fix no vma's null-deref This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.152 by commit...

PT-2022-35611 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.221 Description: The issue is related to a potential null-deref in /proc/pid/smaps rollup. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.19 and fixed in...

PT-2022-35226 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.76 Description: The issue is related to a potential null-deref in /proc/pid/smaps rollup. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.19 and fixed in...

PT-2022-35444 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.152 Description: The issue is related to a potential null-deref in /proc/pid/smaps rollup. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.19 and fixed i...