gdb-dashboard

GDB dashboard GDB dashboard is a standalone .gdbinit file written using the Python API that enables a modular interface showing relevant information about the program being debugged. Its main goal is to reduce the number of GDB commands needed to inspect the status of current program thus allowin...

CVE-2018-1000199

CVE-2018-1000199 Linuxのptraceコードはデバッグレジスタへのアクセスを仮想化しますが、その仮想化コードには誤ったエラーハンドリングがあります。つまり、例えばDR0に不正な値を書き込んだ場合、ptrace呼び出しは-EINVALを返すにもかかわらず、カーネルのブレークポイント追跡の内部状態が破損する可能性があります。...

voltron

Voltron Voltron is an extensible debugger UI toolkit written in Python. It aims to improve the user experience of various debuggers LLDB, GDB, VDB and WinDbg by enabling the attachment of utility views that can retrieve and display data from the debugger host. By running these views in other TTYs...

Platbox

Platbox UEFI 및 SMM 평가 도구 기능 Platbox는 플랫폼의 보안을 평가하는 데 도움을 주는 도구입니다: 보안 측면에서 중요한 플랫폼 레지스터를 덤프합니다 플래시 잠금 MMIO 및 리매핑 잠금 SMM 베이스 및 잠금 MSR 장치의 PCI 구성 공간에 대한 읽기/쓰기 액세스. 물리 메모리 및 가상 메모리 읽기/쓰기. 물리 메모리 할당 및 사용자 모드로 메모리 매핑을 허용합니다. MSR 읽기 및 쓰기. SPI 플래시 내용BIOS을 파일로 덤프합니다. 기본적인 SMI 퍼저. S3 부트스크립트SMM-Lockbox에서를...

hwbp4mw

この記事は、元々 VX-Underground Black Mass Halloween Edition 2022 向けに書かれたものです。 フッキングエンジン: マルチスレッドセーフ x86/x64 hwbp フッキングエンジン c PAGEGUARD/hwbp ブレークポイントライブラリ c++20 hwbp ライブラリ DLL の例 c++20 デバッグレジスタを利用した汎用的な x64 ユーザーランド回避技術: TamperingSyscalls2 c TamperingSyscalls2 c++20 利用可能な ETW/AMSI フックの例 rad9800/misc...

mora-hwbp

Mora-HWBP — AMSI / WLDP / ETW Telemetry Hooking via Hardware Breakpoints A security-research Proof-of-Concept POC demonstrating hardware-breakpoint CPU debug register based function hooking as an alternative to traditional in-memory code patching. Purpose & Scope This repository is published...

LoongBleed

LoongBleed 中文 LoongBleed はハードウェア脆弱性であり、概念的には ZenBleed CVE-2023-20593 に類似しています — LSX 128ビット SIMD と LASX 256ビット SIMD の両方を実装した Loongson LA464/LA664 プロセッサに影響を与えます。 LoongArch では、LSX の $vr レジスタ 128ビット は LASX の $xr レジスタ 256ビット の下半分とエイリアスしています。LSX 命令と基本的な浮動小数点演算は、下位 128 ビット またはその一部 のみを操作するように定義されており、対応する...

CVE-2026-98034

The Linux kernel contains a vulnerability where the BPF verifier fails to mark a register as precise when it is known to contain zero during a scalar store into an untrusted kptr field. Because check_map_kptr_access() does not mark the register as precise, a state checkpoint with an imprecise zer...

kernel: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists

A flaw was found in the drm/xe/rtp component of the Linux kernel. This vulnerability arises from the unconditional whitelisting of Output/Availability OA registers, which is a security violation. By default, these registers could be whitelisted after system events such as probe, graphics...

kernel: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists

A flaw was found in the drm/xe/rtp component of the Linux kernel. This vulnerability arises from the unconditional whitelisting of Output/Availability OA registers, which is a security violation. By default, these registers could be whitelisted after system events such as probe, graphics...

CVE-2026-90124: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: irqchip/renesas-rzg2l: Fix loss of interrupt rzg2lclearirqint and rzg2lcleartintint perform a read-modify-write on the ISCR/TSCR status registers to clear the bit for the interrupt just handled. Since these registers are...

CVE-2026-89866

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Resume device before setting EOS flag Setting the EOS flag talks to the firmware via sendfirmwarecommand, which accesses VPU registers. Both the STREAMOFF path wave5vpudecjobabort and the V4L2DECCMDSTOP...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: KVM: x86: Added SRCU protection for reading PDPTRs in getsregs2. Added read-side protection when reading PDPTR registers in getsregs2. Reading PDPTRs may trigger access to guest memory: kvmpdptrread - svmcachereg - loadpdptrs ...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: phy: lynx-28g: Serialize concurrent physetmodeext calls to shared registers The protocol converter configuration registers PCC8, PCCC, and PCCD implemented by the driver control protocol converters across multiple lanes each...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: initialize registers in nftdochain The registers were initialized to prevent a stack leak into the user space...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Revert to the previous state where “ACPICA: Avoid Info: Mapping Multiple BARs. Your Kernel Is Fine”. Undo the modifications made in the commit d410ee5109a1 “ACPICA: Avoid “Info: Mapping Multiple BARs. Your Kernel Is Fine”...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

A issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x8664 lacks consistency checks for CR0 and CR4...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Allocate sufficient space for GMU registers In commit 142639a52a01 “drm/msm/a6xx: fix crashstate capture for A650”, we changed a6xxgetgmuregisters to read 3 sets of registers. Unfortunately, we did not change the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Disabling Intel PT virtualization guest/host mode is enabled by default under CONFIGBROKEN. This means that KVM’s ptmode module parameter is set to BROKEN by default, thereby disabling support for virtualizing Intel PT...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Avoid NULL dereferencing in msmdispstateprint regs. If the allocation in msmdispstatedump regs fails, block-state can become NULL. The msmdispstateprint regs function includes code to handle this situation: c if reg...