kfd

빠른 고지: 저는 다른 기기 및 iOS 버전에 대한 오프셋을 추가할 의도가 없습니다. kfd kfd는 커널 파일 디스크립터kernel file descriptor의 약자로, Apple 기기에서 커널 메모리를 읽고 쓰기 위한 프로젝트입니다. 이 프로젝트는 댕글링 PTE를 얻기 위해 악용될 수 있는 다양한 취약점을 활용하며, 이를 PUAF 프리미티브physical use-after-free의 약자라고 부릅니다. 그런 다음 해당 물리 페이지 내부에 특정 커널 객체를 재할당하고, 댕글링 PTE를 통해 사용자 공간에서 직접 조작하여...

Kernel_VADInjector

드라이버 DLL 인젝터 드라이버 DLL 인젝터 설명 Driver DLL Injector는 사용자가 선호하는 매퍼를 사용하여 원하는 드라이버를 로드할 수 있게 해주는 강력한 도구입니다. KDmapper와 같은 서명되지 않은 드라이버 로더의 기능을 활용하여, 이 인젝터는 Windows 10 2004 x64 프로세스를 대상으로 빌드 및 테스트되었습니다. 드라이버 부분: 드라이버는 사용자 모드 프로세스와 통신하기 위해 xKdEnumerateDebuggingDevices로 알려진 패치 가드에 안전한 함수를 후킹합니다. 이 방법은 널리...

CVE-2026-68376-Ubuntu-7.0.0-30-Poc

CVE-2026-68376-Ubuntu-7.0.0-30-Poc 개요 이 프로젝트는 Ubuntu 커널 버전 7.0.0-30을 대상으로 하는 CVE-2026-68376에 대한 개념 증명Proof-of-Concept, PoC 익스플로잇을 포함하고 있습니다. 이 익스플로잇은 SCTPStream Control Transmission Protocol 구현의 취약점을 악용하여 페이지 테이블 엔트리Page Table Entry, PTE 조작을 통해 권한 상승을 달성합니다. 면책 조항 이 도구는 교육 및 연구 목적으로만 사용됩니다. 소유하고...

PT-2026-102529

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM x86 MMU where the kvm gfn is write tracked function only checks the supplied memslot. Because page tracking is per-address-space and shadow pages are shared...

PT-2026-97906

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the show pte function during lockless page-table walks on arm64 architecture. Because the function can run with interrupts enabled, a concurrent teardown may free a...

PT-2026-97884

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the madvise cold or pageout pte range function where the pmd trans huge lock mechanism incorrectly handles device-private Page Middle Directories PMDs. When a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fixed the flushtlbrange function when it is used to erase normal PMD entries PMD entries that point to page tables, along with the PTE entries in the pointed-to page table. In the arm64 version of flushtlbrange, there is ...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: LoongArch: The hugepteoffset function currently returns a pointer to a PMD slot, even when the underlying entry points to an invalid invalidptetable indicating no mapping. Functions like smapshugetlbrange retrieve this invalid...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Added architecture-specific hugepteclear function. When executing mm selftests and running vmtest.sh, the following error occurs: BUG: Incorrect page state in process uffd-unit-tests. Pfn: 00000; Page: refcount:0;...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

A vulnerability has been discovered in the Linux kernel. It has been identified as a problem. The function “followpagepte” in the file “mm/gup.c” of the component BPF is affected by this vulnerability. This manipulation leads to a race condition. The attack can be launched remotely. It is...

PT-2026-90488

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the btrfs module where folios are not properly write-protected during data writeback. This occurs because a change in the extent write cache pages function replaced th...

CVE-2026-80686

A flaw was found in the Linux kernel's memory management component. Specifically, the migratedevice functionality may attempt to access memory page table entries PTEs that are not present. This incorrect handling can lead to system instability, potentially causing a system crash Denial of Service...

SUSE CVE-2026-80686

In the Linux kernel, the following vulnerability has been resolved: mm: migratedevice: fix ptepfn/ptedirty called on non-present PTE ptepfn and ptedirty have undefined behaviour when called on a non-present PTE. In migratevmacollectpmd, these functions may be invoked on non-present entries e.g.,...

CVE-2026-80686

In the Linux kernel, the following vulnerability has been resolved: mm: migratedevice: fix ptepfn/ptedirty called on non-present PTE ptepfn and ptedirty have undefined behaviour when called on a non-present PTE. In migratevmacollectpmd, these functions may be invoked on non-present entries e.g.,...

AZL-98147 CVE-2026-80686 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: mm: migratedevice: fix ptepfn/ptedirty called on non-present PTE ptepfn and ptedirty have undefined behaviour when called on a non-present PTE. In migratevmacollectpmd, these functions may be invoked on non-present entries e.g.,...

UBUNTU-CVE-2026-80686

In the Linux kernel, the following vulnerability has been resolved: mm: migratedevice: fix ptepfn/ptedirty called on non-present PTE ptepfn and ptedirty have undefined behaviour when called on a non-present PTE. In migratevmacollectpmd, these functions may be invoked on non-present entries e.g.,...

CVE-2026-80686

In the Linux kernel, the following vulnerability has been resolved: mm: migratedevice: fix ptepfn/ptedirty called on non-present PTE ptepfn and ptedirty have undefined behaviour when called on a non-present PTE. In migratevmacollectpmd, these functions may be invoked on non-present entries e.g.,...

EUVD-2026-67562

In the Linux kernel, the following vulnerability has been resolved: mm: migratedevice: fix ptepfn/ptedirty called on non-present PTE ptepfn and ptedirty have undefined behaviour when called on a non-present PTE. In migratevmacollectpmd, these functions may be invoked on non-present entries e.g.,...

CVE-2026-80686

In the Linux kernel, the following vulnerability has been resolved: mm: migratedevice: fix ptepfn/ptedirty called on non-present PTE ptepfn and ptedirty have undefined behaviour when called on a non-present PTE. In migratevmacollectpmd, these functions may be invoked on non-present entries e.g.,...

CVE-2026-80686 mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE

In the Linux kernel, the following vulnerability has been resolved: mm: migratedevice: fix ptepfn/ptedirty called on non-present PTE ptepfn and ptedirty have undefined behaviour when called on a non-present PTE. In migratevmacollectpmd, these functions may be invoked on non-present entries e.g.,...