126 matches found
CVE-2022-0185-PipeVersion
Versión pipe de CVE-2022-0185 Usando pipe-primitive para explotar CVE-2022-0185, por lo que no se necesita fuga de kaslr ni bypass de smap smep ktpi : P: ¿Qué es pipe-primitive? R: https://github.com/veritas501/pipe-primitive...
CVE-2017-5123
CVE-2017-5123 Exploit para la vulnerabilidad del kernel CVE-2017-5123 Puedes compilarlo con: gcc -static -Wall -Wextra -Werror -o cve20175123 CVE-2017-5123.c Si deseas una explicación más detallada, he escrito un artículo explicando cómo funciona, puedes encontrarlo aquí Este exploit es más fiabl...
CVE-2022-25636-PipeVersion
CVE-2022-25636 pipe versión Usando pipe-primitive para explotar CVE-2022-25636, por lo que no se necesita fuga de KASLR ni omisión de SMAP, SMEP o KPTI : P: ¿Qué es pipe-primitive? R: https://github.com/veritas501/pipe-primitive...
macOS-Kernel-Exploit
macOS-Kernel-Exploit AVISO LEGAL Necesitas conocer el deslizamiento de KASLR para usar el exploit. Además, SMAP debe estar deshabilitado, lo que significa que no es explotable en Macs posteriores a 2015. Estas limitaciones hacen que el exploit sea prácticamente inutilizable para la explotación en...
Smap
alternativa a nmap impulsada por shodan.io Smap es un escáner de puertos pasivo construido con la API gratuita de shodan.io. Acepta los mismos argumentos de línea de comandos que Nmap y produce la misma salida, lo que lo convierte en un sustituto directo de Nmap. Características Escanea 200 hosts...
CVE-2026-52938
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL pointer dereference in bpfskstorageclone and diag paths bpfselemunlinknofail sets SDATAselem-smap to NULL before removing the selem from the storage hlist. A concurrent RCU reader in bpfskstorageclone can observe th...
UBUNTU-CVE-2026-52938
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL pointer dereference in bpfskstorageclone and diag paths bpfselemunlinknofail sets SDATAselem-smap to NULL before removing the selem from the storage hlist. A concurrent RCU reader in bpfskstorageclone can observe th...
CVE-2026-52938 bpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL pointer dereference in bpfskstorageclone and diag paths bpfselemunlinknofail sets SDATAselem-smap to NULL before removing the selem from the storage hlist. A concurrent RCU reader in bpfskstorageclone can observe th...
CVE-2026-52938
CVE-2026-52938 concerns a race in Linux kernel BPF storage: bpf_selem_unlink_nofail() clears smap before removal, allowing a concurrent reader in bpf_sk_storage_clone() to observe a NULL smap and dereference a NULL pointer, potentially crashing the kernel (DoS). Reports describe a null-ptr-deref ...
CVE-2026-52938
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL pointer dereference in bpfskstorageclone and diag paths bpfselemunlinknofail sets SDATAselem-smap to NULL before removing the selem from the storage hlist. A concurrent RCU reader in bpfskstorageclone can observe th...
CVE-2026-52938 bpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL pointer dereference in bpfskstorageclone and diag paths bpfselemunlinknofail sets SDATAselem-smap to NULL before removing the selem from the storage hlist. A concurrent RCU reader in bpfskstorageclone can observe th...
EUVD-2026-38708
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL pointer dereference in bpfskstorageclone and diag paths bpfselemunlinknofail sets SDATAselem-smap to NULL before removing the selem from the storage hlist. A concurrent RCU reader in bpfskstorageclone can observe th...
PT-2026-51731
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the BPF Berkeley Packet Filter subsystem. The function bpf selem unlink nofail sets the smap variable to NULL before removing the element from the...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: x86/entry: Clear X86FEATURESMAP when CONFIGX86SMAP=n Commit: 3c73b81a9164 “x86/entry, selftests: Further improve user entry sanity checks” added a warning if AC is set when in the kernel. Commit: 662a0221893a3d “x86/entry: Fix...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15, and Linux 6.1
An integer overflow flaw was discovered in the Linux kernel. This issue causes the kernel to allocate skbsharedinfo in the user space, which can be exploited in systems without SMAP protection, as skbsharedinfo contains references to function pointers...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004431)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004431 advisory. In the Linux kernel before 4.20.14, expanddownwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to exploit kernel NU...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004085)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004085 advisory. In the Linux kernel before 4.20.14, expanddownwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to exploit kernel NU...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990203)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990203 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disallow vsyscall page read for copyfromkernelnofault When trying to use...