Kernel-Exploits

Kernel Exploits Repository for kernel exploits...

KernelCare : Live Kernel Patching

KernelCare is being used to maintain the remote host's operating system kernel without requiring reboots. %NASLMINLEVEL 80900 C Tenable Network Security, Inc. include"compat.inc"; if description scriptid286277; scriptversion"1.1"; scriptsetattributeattribute:"pluginmodificationdate",...

EUVD-2013-5547

Malware in sbrugna...

CVE-2025-53136 NT OS Kernel Information Disclosure Vulnerability

...

kernel: xfs: don't walk off the end of a directory data block

A vulnerability was found in the Linux kernel in the xfsdir2dataunused and xfsdir2dataentry functions where a lack of proper sanity checks while handling directory data blocks can lead to out-of-bounds memory access. This can result in undefined system behavior or crashes...

CVE-2023-52499 powerpc/47x: Fix 47x syscall return crash

In the Linux kernel, the following vulnerability has been resolved: powerpc/47x: Fix 47x syscall return crash Eddie reported that newer kernels were crashing during boot on his 476 FSP2 system: kernel tried to execute user page b7ee2000 - exploit attempt? uid: 0 BUG: Unable to handle kernel...

iPadOS tvOS iOS watchOS macOS DoS

The vulnerability of the kernel in iPadOS, tvOS, iOS, watchOS, and macOS is caused by an overflow in the stack buffer. Exploiting this vulnerability can allow a malicious actor to cause service failures or other adverse effects...

Oracle Linux 5 : kernel (ELSA-2018-4219)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4219 advisory. 2.6.18-419.0.0.0.11 - x8664/entry: Don't use IST entry for BP stack orabug 28452062 CVE-2018-8897 Tenable has extracted the preceding description block directly...

FreeRTOS Stream Buffer Overflow RCE

The vulnerability of the streambuffer.c component in the real-time operating system FreeRTOS is related to integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2020-4411

The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service vulnerability in its kernel module that could allow an attacker to cause a denial of service condition on the affected system. To exploit this vulnerability, a local...

KLA11788 Multiple vulnerabilities in Mpmtp installer

Absolutely unique vulnerability was found in mpmtp system installer. Vulnerability can be exploited different ways, but the easiest way is running installer with /dos switch which leading to a blue screen of death and the need to reinstall Windows due to a failure of the system kernel driver. Thi...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1508-1)

This update for the Linux Kernel 4.4.121-9273 fixes one issue. The following security issue was fixed : - CVE-2018-1000199: - CVE-2018-1000199: An address corruption flaw was discovered while modifying a h/w breakpoint via 'modifyuserhwbreakpoint' routine, an unprivileged user/process could use...

CVE-2018-0003 Junos OS: A crafted MPLS packet may lead to a kernel crash

A specially crafted MPLS packet received or processed by the system, on an interface configured with MPLS, will store information in the system memory. Subsequently, if this stored information is accessed, this may result in a kernel crash leading to a denial of service. Affected releases are...

Oracle Sun Data Modification

The vulnerability of the Oracle Sun operating system’s kernel is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to modify, add, or delete data using network packets...

Android Privilege Escalation

The vulnerability of the Android operating system’s file system kernel is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...

Mac OS X Kernel Memory Disclosure DoS

The vulnerability of the Mac OS X operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected information in the kernel’s memory or cause a service failure through a...

Mac OS X iOS Code Execution

The vulnerability of the kernel in Mac OS X and iOS lies in errors during the initialization of undefined data structures. Exploiting this vulnerability allows an attacker to execute arbitrary code by manipulating network connections remotely...

PT-2013-1285

Name of the Vulnerable Software and Affected Versions Linter Bastion affected versions not specified Description The issue allows an attacker to modify the configuration file of the Linter Bastion database management system kernel by making a specific RPC call, numbered 0x12 0x0040C73C. This can...

Using Kernel Exploits to Bypass Sandboxes for Fun and Profit

Researchers and attackers alike are quickly discovering you don’t need a fancy Java or Flash exploit to beat application sandboxes. Exploiting an unpatched kernel vulnerability in the underlying operating system, one that’s likely to stay unpatched for a long time, will do just fine. Twice this...

Cisco VPN Client Denial of Service Vulnerability

Cisco VPN Client contains a vulnerability that could allow an authenticated, local attacker to cause a denial of service DoS condition on a targeted system. The vulnerability is due to improper interaction between the VPN driver and the operating system kernel on a device running the vulnerable...