478 matches found
insmod_block
insmodblock Linux: - - - - - - - nu11secur1ty द्वारा: https://github.com/nu11secur1ty/linux-nu11secur1ty Linux: - - - - - - - nu11secur1ty द्वारा: https://gitlab.com/nu11secur1ty/linux-nu11secur1ty txt Linux Kernel security modules by nu11secur1ty GNU GENERAL PUBLIC LICENSE Version 3, 29 June...
snuffleupagus
Snuffleupagus php7 और php8 के लिए सुरक्षा मॉड्यूल - बग क्लासेस को खत्म करना और बाकी के लिए वर्चुअल-पैचिंग! मुख्य विशेषताएँ • डाउनलोड • उदाहरण • दस्तावेज़ीकरण • लाइसेंस • धन्यवाद Snuffleupagus एक PHP 7+ और 8+ मॉड्यूल है जिसे वेबसाइटों के विरुद्ध हमलों की लागत को नाटकीय रूप से बढ़ाने के लिए डिज़ाइन...
snuffleupagus
Snuffleupagus وحدة أمان لـ PHP7 و PHP8 - قتل فئات الثغرات وتصحيح الباقي افتراضياً!...
CrowArmor
CrowArmor : برنامج تشغيل لينكس ما هو CrowArmor؟ CrowArmor هو برنامج تشغيل لنظام لينكس يهدف إلى أمن النظام، نستخدم واجهات LSM لتحسين أمن النواة، مع توفير الدعم لـ MalDec-EDR، توثيق الكود وكيفية المتابعة مع التثبيت التوثيق عملية التطوير الممارسة القياسية هي توفير أحدث إصدار إنتاجي مستقر للعملاء في...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: fscrypt: destroy keyring after securitysbdelete The function fscryptDestroykeyring must be called after all potentially-encrypted inodes have been evicted; otherwise, it cannot safely destroy the keyring. Since inodes that are...
EUVD-2026-59360
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix refcount leak when updating the skctx Currently updateskctx transfers the plabel reference, unfortunately it is also unconditionally put in the caller. Ideally we would make the caller conditionally put the referenc...
EUVD-2026-59359
In the Linux kernel, the following vulnerability has been resolved: apparmor: check label build before nonewprivs test aachangeprofile builds a replacement label with fnlabelbuildinscope before the nonewprivs subset check. The build helper can fail and return NULL or an ERRPTR, but the result was...
PT-2026-72648
In the Linux kernel, the following vulnerability has been resolved: apparmor: check label build before no new privs test aa change profile builds a replacement label with fn label build in scope before the no new privs subset check. The build helper can fail and return NULL or an ERR PTR, but the...
CVE-2026-68179 misc: nsm: only unlock nsm_dev on post-lock error paths
In the Linux kernel, the following vulnerability has been resolved: misc: nsm: only unlock nsmdev on post-lock error paths nsmdevioctl jumps to the common out label even when the initial copyfromuser fails before nsm-lock has been taken. The error path then blindly unlocks a mutex that was never...
EUVD-2026-55280
In the Linux kernel, the following vulnerability has been resolved: misc: nsm: only unlock nsmdev on post-lock error paths nsmdevioctl jumps to the common out label even when the initial copyfromuser fails before nsm-lock has been taken. The error path then blindly unlocks a mutex that was never...
kernel: selinux: fix overlayfs mmap() and mprotect() access checks
A flaw was found in the Linux kernel's SELinux security module when handling overlayfs. The existing security model for overlayfs does not properly enforce access controls for mmap and mprotect operations. This oversight could allow a local attacker to bypass intended security policies, potential...
kernel: selinux: fix overlayfs mmap() and mprotect() access checks
A flaw was found in the Linux kernel's SELinux security module when handling overlayfs. The existing security model for overlayfs does not properly enforce access controls for mmap and mprotect operations. This oversight could allow a local attacker to bypass intended security policies, potential...
kernel: selinux: fix overlayfs mmap() and mprotect() access checks
A flaw was found in the Linux kernel's SELinux security module when handling overlayfs. The existing security model for overlayfs does not properly enforce access controls for mmap and mprotect operations. This oversight could allow a local attacker to bypass intended security policies, potential...
kernel: selinux: fix overlayfs mmap() and mprotect() access checks
A flaw was found in the Linux kernel's SELinux security module when handling overlayfs. The existing security model for overlayfs does not properly enforce access controls for mmap and mprotect operations. This oversight could allow a local attacker to bypass intended security policies, potential...
CVE-2026-64393
In the Linux kernel, the following vulnerability has been resolved: ksmbd: run set info with opener credentials SMB2 SETINFO handlers call path-based VFS helpers after checking the access mask granted to the SMB handle. Those helpers perform their owner, inode permission and LSM checks using the...
CVE-2026-64307 crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG)
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctlSNPCONFIG Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and ze...
bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized
...
CVE-2026-63865
A flaw was found in the Linux kernel. The Berkeley Packet Filter BPF Linux Security Modules LSM feature incorrectly registered certain hooks, tasktoinode and inetconnestablished, as available for sleepable programs. These hooks are invoked in critical system contexts where program sleeping is not...
SUSE CVE-2026-64192
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject BPFMAPTYPEINODESTORAGE creation if BPF LSM is uninitialized When CONFIGBPFLSM=y is set, BPF inode storage maps BPFMAPTYPEINODESTORAGE are compiled into the kernel. However, if the BPF LSM is not explicitly enabled at...