yara-ttd

yara-ttd - 궁극의 패커 천적 Time Travel Debugging 트레이스에서 YARA 규칙 사용 1. 데모 2. 동기 3. 설치 4. 사용법 5. 향후 기능 데모 UPX로 패킹된 바이너리 calc.exe를 실행하는 간단한 바이너리로, UPX로 패킹되어 있습니다. yara-ttd 는 스레드 생성 중 모듈 메모리에서 calc.exe 문자열을 찾습니다. calc.exe를 실행하는 간단한 난독화된 셸코드 테스트한 바이너리는 셸코드를 복호화한 후 새 스레드에서 실행합니다. yara-ttd 는...

ttddbg

ttddbg - Time Travel Debugging IDA 플러그인 ⚠️ IDA 8 사용자 주의: 현재 IDA 8에서 ttddbg를 사용하려면 임시 해결 방법이 필요합니다.알려진 문제를 참조하세요. 이 플러그인은 WinDBG Preview로 생성된 Time Travel Debugging 트레이스의 로드를 지원하는 새 디버거를 IDA에 추가합니다. 이 플러그인은 x86 및 x64 트레이스를 모두 지원하며, 그에 따라 IDA 및 IDA64도 지원합니다. 설치 플러그인 설치는 릴리스 페이지의 설치 프로그램을 사용하여 수행할 수...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: um: time-travel: fix time corruption In the “basic” time-travel mode without =inf-cpu or =ext, we still encounter timer interrupts. These can occur at arbitrary times, for example, while inside the timerread function, which simpl...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: um: workaround for the issue where schedyield does not yield control in time-travel mode. schedyield executed by the user space may not actually cause scheduling in time-travel mode, as no time has passed. In the observed case, i...

CVE-2023-53587

The CVE-2023-53587 issue is in the Linux kernel ring-buffer handling where IRQ work can run after the ring buffer is destructed. The vulnerability description shows a use-after-free path in irq_work_run_list (KASAN report) when data is written to the buffer just before destruction, potentially le...

EUVD-2025-14110

Malicious code in bioql PyPI...

um: work around sched_yield not yielding in time-travel mode

...

Linux Distros Unpatched Vulnerability : CVE-2025-37880

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - um: work around schedyield not yielding in time-travel mode schedyield by a userspace may not actually cause scheduling in time-travel mode as no time has passe...

SUSE CVE-2025-37880

In the Linux kernel, the following vulnerability has been resolved: um: work around schedyield not yielding in time-travel mode schedyield by a userspace may not actually cause scheduling in time-travel mode as no time has passed. In the case seen it appears to be a badly implemented userspace...

CVE-2025-37880

In the Linux kernel, the following vulnerability has been resolved: um: work around schedyield not yielding in time-travel mode schedyield by a userspace may not actually cause scheduling in time-travel mode as no time has passed. In the case seen it appears to be a badly implemented userspace...

DEBIAN-CVE-2025-37880

In the Linux kernel, the following vulnerability has been resolved: um: work around schedyield not yielding in time-travel mode schedyield by a userspace may not actually cause scheduling in time-travel mode as no time has passed. In the case seen it appears to be a badly implemented userspace...

UBUNTU-CVE-2025-37880

In the Linux kernel, the following vulnerability has been resolved: um: work around schedyield not yielding in time-travel mode schedyield by a userspace may not actually cause scheduling in time-travel mode as no time has passed. In the case seen it appears to be a badly implemented userspace...

CVE-2025-37880

In the Linux kernel, the following vulnerability has been resolved: um: work around schedyield not yielding in time-travel mode schedyield by a userspace may not actually cause scheduling in time-travel mode as no time has passed. In the case seen it appears to be a badly implemented userspace...

CVE-2025-37880 um: work around sched_yield not yielding in time-travel mode

In the Linux kernel, the following vulnerability has been resolved: um: work around schedyield not yielding in time-travel mode schedyield by a userspace may not actually cause scheduling in time-travel mode as no time has passed. In the case seen it appears to be a badly implemented userspace...

CVE-2025-37880

CVE-2025-37880 affects the Linux kernel where sched_yield may not yield in time-travel mode due to a poorly implemented userspace spinlock in ASAN. The fix adds accounting of time to the process on every sched_yield to ensure proper scheduling. Impact can be extreme slowdown or deadlock depending...

CVE-2025-37880 um: work around sched_yield not yielding in time-travel mode

In the Linux kernel, the following vulnerability has been resolved: um: work around schedyield not yielding in time-travel mode schedyield by a userspace may not actually cause scheduling in time-travel mode as no time has passed. In the case seen it appears to be a badly implemented userspace...

CVE-2025-37880: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: um: work around schedyield not yielding in time-travel mode schedyield by a userspace may not actually cause scheduling in time-travel mode as no time has passed. In the case seen it appears to be a badly implemented userspace...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from schedyield not being properly scheduled in time travel mode, which could lead to a deadlock...

PT-2025-20532

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified where the sched yield syscall may not cause scheduling in time-travel mode, potentially leading to extreme slowdown or deadlock. This is d...

SUSE CVE-2023-52633

In the Linux kernel, the following vulnerability has been resolved: um: time-travel: fix time corruption In 'basic' time-travel mode without =inf-cpu or =ext, we still get timer interrupts. These can happen at arbitrary points in time, i.e. while in timerread, which pushes time forward just a...