uofw

uOFW Este proyecto tiene como objetivo aplicar ingeniería inversa al kernel básico y al hardware de la PSP para crear una documentación técnica actualizada del sistema, así como proporcionar un firmware original libre y de código abierto. Para obtener más información sobre uOFW incluidos ejemplos...

Trinity

Trinity Trinity es el tercer jailbreak público para la PS Vita™ , que es compatible con los firmware más recientes 3.69 y 3.70. La cadena de explotación consta de tres etapas: el exploit del kernel MIPS, el escape del emulador de PSP y el exploit del kernel ARM. Write-up Una explicación técnica d...

Presentations

Presentations Presentation| Slides| Video ---|---|--- BlueHat IL 2020 - Trinity: PSP Emulator Escape| 2020-BlueHatIL-Trinity.pdf| https://www.youtube.com/watch?v=J0OQsDTyAL8 Hardwear.io USA 2022 - bd-jb: Blu-ray Disc Java Sandbox Escape| 2022-hardwear-io-bd-jb.pdf|...

The vulnerability of the psp_assoc_device_get_locked() function in the net/psp/psp_nl.c module, which is part of the Linux kernel’s networking functions, allows a hacker to trigger a service failure.

The vulnerability of the pspassocdevicegetlocked function in the net/psp/pspnl.c module, which is part of the Linux kernel’s networking functions, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause service...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: crypto: ccp – Fixed null pointer dereference in sevplatformshutdownlocked. The SEV platform device can be shut down with a null pspmaster, for example, by using DEBUGTESTDRIVERREMOVE. This issue was identified using KASAN:...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fixed the calltrace warning in psphwfini. The call trace occurs when the amdgpu is removed after a mode1 reset. During a mode1 reset, from suspend to resume, there is no need to reinitialize the ta firmware buffer,...

The vulnerability of the plug-in/common/file-psp.c component of the GIMP graphic editor allows a hacker to trigger a service failure.

The vulnerability of the plug-in/common/file-psp.c component of the GIMP graphic editor is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created PSP image...

CVE-2026-70861

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft component: Common Objects. The supported version that is affected is 9.1. Easily exploitable vulnerability allows high privileged attacker with network access via T3, IIOP to compromise PeopleSoft...

CVE-2026-68379

A flaw was found in the Linux kernel's TCP implementation. A reference leak in TIMEWAIT sockets can occur upon a PSP Policy Security Policy failure in both IPv4 and IPv6 receive paths. This vulnerability can lead to a memory leak of tcptwbucket structures, potentially resulting in a Denial of...

Linux Distros Unpatched Vulnerability : CVE-2026-68379

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: fix TIMEWAIT socket reference leak on PSP policy failure Release the TIMEWAIT socket reference and jump to discardit upon PSP policy failure in both IPv4 a...

CVE-2026-68379

In the Linux kernel, the following vulnerability has been resolved: tcp: fix TIMEWAIT socket reference leak on PSP policy failure Release the TIMEWAIT socket reference and jump to discardit upon PSP policy failure in both IPv4 and IPv6 receive paths. This prevents a memory leak of tcptwbucket...

UBUNTU-CVE-2026-68379

In the Linux kernel, the following vulnerability has been resolved: tcp: fix TIMEWAIT socket reference leak on PSP policy failure Release the TIMEWAIT socket reference and jump to discardit upon PSP policy failure in both IPv4 and IPv6 receive paths. This prevents a memory leak of tcptwbucket...

CVE-2026-68379 tcp: fix TIME_WAIT socket reference leak on PSP policy failure

In the Linux kernel, the following vulnerability has been resolved: tcp: fix TIMEWAIT socket reference leak on PSP policy failure Release the TIMEWAIT socket reference and jump to discardit upon PSP policy failure in both IPv4 and IPv6 receive paths. This prevents a memory leak of tcptwbucket...

CVE-2026-68379 tcp: fix TIME_WAIT socket reference leak on PSP policy failure

In the Linux kernel, the following vulnerability has been resolved: tcp: fix TIMEWAIT socket reference leak on PSP policy failure Release the TIMEWAIT socket reference and jump to discardit upon PSP policy failure in both IPv4 and IPv6 receive paths. This prevents a memory leak of tcptwbucket...

CVE-2026-68379

The CVE-2026-68379 item covers a Linux kernel TCP TIME_WAIT reference leak when PSP policy fails, in both IPv4 and IPv6 receive paths. This can cause memory leakage of tcp_tw_bucket structures and potential DoS via resource exhaustion. The documented fix releases the TIME_WAIT socket reference an...

USN-8568-1: Linux kernel (OEM) vulnerabilities

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. CVE-2025-54518 Several security issues...

OESA-2026-2881 gimp security update

Security Fixes: An issue in gimplayerinvalidateboundary of GNOME GIMP 2.10.30 allows attackers to trigger an unhandled exception via a crafted XCF file, causing a Denial of Service DoS.CVE-2022-32990 GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability...

SUSE CVE-2026-58381

A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the readlayerblock function when processing a specially crafted PSP file. This could allow an attacker to cause memory corruption, potentially leading to denial of service or arbitrary code execution...

Linux Distros Unpatched Vulnerability : CVE-2026-58379

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GIMP's Paint Shop Pro PSP file format parser. This heap buffer overflow vulnerability allows a remote attacker to cause arbitrary code...

CVE-2026-58379

A flaw was found in GIMP's Paint Shop Pro PSP file format parser. This heap buffer overflow vulnerability allows a remote attacker to cause arbitrary code execution or a denial of service DoS by tricking a user into opening a specially crafted PSP image file. The vulnerability occurs because the...