SilentMoonwalk

SilentMoonwalk 완전 동적 콜 스택 스푸퍼의 PoC 구현 TL;DR SilentMoonwalk는 완전 동적 콜 스택 스푸퍼의 PoC 구현으로, ROP를 사용하여 언와인딩을 제어 흐름과 비동기화함으로써 콜 스택에서 원래 호출자를 제거하는 기법을 구현합니다. Authors 이 PoC는 스택 스푸핑 주제에 대한 공동 연구의 결과물입니다. 연구의 저자는 다음과 같습니다: KlezVirus Waldo-IRC Trickster0 이 작업은 초기 PoC 단계와 PoC 뒤에 있는 연구에 모두 기여한 Waldo-IRC와...

libunwind_CVE-2015-3239_AfterPatch

-- mode: Outline - - 이것은 unwind 라이브러리의 버전 1.0입니다. 이 라이브러리는 여러 아키텍처/운영체제 조합을 지원합니다: Linux/x86-64: 잘 작동합니다. Linux/x86: 잘 작동합니다. Linux/ARM: 잘 작동합니다. Linux/IA-64: 완전히 테스트되고 지원됩니다. Linux/PARISC: 잘 작동하지만 C 라이브러리에서 unwind 정보가 누락됨. HP-UX/IA-64: 대부분 작동하지만 몇 가지 심각한 제한 사항이 있는 것으로 알려져 있습니다. Linux/AArch64: 새로...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: RISCV: Stacktrace: Disabling KASAN checks for non-current tasks. When unwinding the stack of a task other than the current one, KASAN will report “BUG: KASAN: out-of-bounds access in walkstackframe+0x41c/0x460”. This same issue...

Astra Linux – Vulnerability in SQLite3

In SQLite 3.30.1, selectExpander in select.c continues with the WITH stack unwinding process even after a parsing error occurs...

UBUNTU-CVE-2026-89600

In the Linux kernel, the following vulnerability has been resolved: fanotify: fix use-after-free of file range info fsnotifyprecontent builds its filerange on the triggering task's stack. fanotifyallocpermevent saves a pointer to range.pos in the heap-allocated permission event so...

PT-2026-90316

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the fanotify component. The fsnotify pre content function creates a file range on the triggering task's stack, and fanotify alloc perm event saves a...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002944)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002944 advisory. An issue was discovered in the procpidstack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the kernel...

SUSE CVE-2025-40358

In the Linux kernel, the following vulnerability has been resolved: riscv: stacktrace: Disable KASAN checks for non-current tasks Unwinding the stack of a task other than current, KASAN would report "BUG: KASAN: out-of-bounds in walkstackframe+0x41c/0x460" There is a same issue on x86 and has bee...

EUVD-2025-203735

In the Linux kernel, the following vulnerability has been resolved: riscv: stacktrace: Disable KASAN checks for non-current tasks Unwinding the stack of a task other than current, KASAN would report "BUG: KASAN: out-of-bounds in walkstackframe+0x41c/0x460" There is a same issue on x86 and has bee...

CVE-2025-40358

In the Linux kernel, the following vulnerability has been resolved: riscv: stacktrace: Disable KASAN checks for non-current tasks Unwinding the stack of a task other than current, KASAN would report "BUG: KASAN: out-of-bounds in walkstackframe+0x41c/0x460" There is a same issue on x86 and has bee...

CVE-2025-40358

In the Linux kernel, the following vulnerability has been resolved: riscv: stacktrace: Disable KASAN checks for non-current tasks Unwinding the stack of a task other than current, KASAN would report "BUG: KASAN: out-of-bounds in walkstackframe+0x41c/0x460" There is a same issue on x86 and has bee...

UBUNTU-CVE-2025-40358

In the Linux kernel, the following vulnerability has been resolved: riscv: stacktrace: Disable KASAN checks for non-current tasks Unwinding the stack of a task other than current, KASAN would report "BUG: KASAN: out-of-bounds in walkstackframe+0x41c/0x460" There is a same issue on x86 and has bee...

CVE-2025-40358 riscv: stacktrace: Disable KASAN checks for non-current tasks

In the Linux kernel, the following vulnerability has been resolved: riscv: stacktrace: Disable KASAN checks for non-current tasks Unwinding the stack of a task other than current, KASAN would report "BUG: KASAN: out-of-bounds in walkstackframe+0x41c/0x460" There is a same issue on x86 and has bee...

CVE-2025-40358 riscv: stacktrace: Disable KASAN checks for non-current tasks

In the Linux kernel, the following vulnerability has been resolved: riscv: stacktrace: Disable KASAN checks for non-current tasks Unwinding the stack of a task other than current, KASAN would report "BUG: KASAN: out-of-bounds in walkstackframe+0x41c/0x460" There is a same issue on x86 and has bee...

CVE-2025-40358

Technical details about CVE-2025-40358 are not provided in the connected documents. The initial description contains a summary but no public details. Monitor for updates.

PT-2025-51574

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel related to stack unwinding and Kernel Address Sanitizer KASAN checks. When unwinding the stack of a task other than the current task, KASAN may...

EUVD-2011-1779

Malware in sbrugna...

EUVD-2019-10772

Malware in sbrugna...

EUVD-2025-13129

Malicious code in bioql PyPI...

CVE-2023-53135

In the Linux kernel, the following vulnerability has been resolved: riscv: Use READONCENOCHECK in imprecise unwinding stack mode When CONFIGFRAMEPOINTER is unset, the stack unwinding function walkstackframe randomly reads the stack and then, when KASAN is enabled, it can lead to the following...