2814 matches found
illusion-rs
Windows UEFI Blue Pill Type-1 Hypervisor in Rust Codename: Illusion Blog: https://memn0ps.github.io/hypervisors-for-memory-introspection-and-reverse-engineering/ A lightweight, memory-safe, and blazingly fast Rust-based type-1 research hypervisor with hooks for Intel VT-x, focused on studying the...
Silverseal
Silverseal Silverseal is a Linux post exploitation framework that demonstrates the ability of a UEFI bootkit to persistently and stealthily load a Rust-based kernel module rootkit on modern Linux systems. The project includes: silverseal-bootkit: A UEFI bootkit implemented in Rust that hooks the...
PT-2026-107841
The latest BIOS/UEFI firmware, v1.44, for my ThinkPad P1 Gen 6, was released on 2026-10-06, and I was seconds away from mindlessly clicking through the installer before I noticed this in the Readme file : Emphasis mine Important updates Corrected Security fix CVE numbers:...
PT-2026-107840
The latest BIOS/UEFI firmware, v1.44, for my ThinkPad P1 Gen 6, was released on 2026-10-06, and I was seconds away from mindlessly clicking through the installer before I noticed this in the Readme file : Emphasis mine Important updates Corrected Security fix CVE numbers:...
CVE-2026-25250
🕷️ CVE-2026-25250: Improper Trusted Bootloader Chain Validation A Microsoft-signed third-party bootloader that loads a secondary EFI binary with no signature or integrity verification, collapsing the Secure Boot chain of trust from within. 📑 Table of Contents Research Context Official References...
AlmaLinux 9.2 [TuxCare] Security Update: grub2-common / grub2-efi-aa64-modules / grub2-efi-x64 / etc (ALMALINUX9.2:CLSA-2024:1712672279)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1712672279 advisory. - An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to search for the configuration file tha...
CentOS Linux 8.4 [TuxCare] Security Update: microcode_ctl Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1770214396)
The CentOS Linux 8.4 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1770214396 advisory. - Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation...
Rocky Linux 9 [CIQ] Security Update: microcode_ctl Multiple Vulnerabilities (crlba-2025_2991)
The Rocky Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlba-20252991 advisory. The microcodectl packages provide microcode updates for Intel and AMD processors. Bug Fixes and Enhancements: Rocky Linux 9.5.z Update Intel CPU microcode ...
Rocky Linux 9 [CIQ] Security Update: microcode_ctl Multiple Vulnerabilities (crlsa-2025_7043)
The Rocky Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-20257043 advisory. microcodectl: Improper input validation in UEFI firmware CVE-2024-28047 microcodectl: Insufficient granularity of access control in UEFI firmware...
Rocky Linux 8 [CIQ] Security Update: microcode_ctl Multiple Vulnerabilities (crlea-2025_3114)
The Rocky Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlea-20253114 advisory. The microcodectl packages provide microcode updates for Intel and AMD processors. Bug Fixes and Enhancements: Rocky Linux 8 Update Intel CPU microcode to t...
AlmaLinux 9.2 [TuxCare] Security Update: microcode_ctl Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1757692837)
The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1757692837 advisory. - Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable informatio...
Rocky Linux 9.6 [TuxCare] Security Update: microcode_ctl Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1790091171)
The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790091171 advisory. - Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalati...
CentOS Linux 8.5 [TuxCare] Security Update: microcode_ctl Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1770214504)
The CentOS Linux 8.5 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1770214504 advisory. - Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation...
AlmaLinux 9.2 [TuxCare] Security Update: microcode_ctl Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1745052473)
The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1745052473 advisory. - Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation...
AlmaLinux 9.6 [TuxCare] Security Update: microcode_ctl Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1790091171)
The AlmaLinux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790091171 advisory. - Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation...
openSUSE 16 Security Update : openSUSE-signkey-cert (openSUSE-SU-2026:21952-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21952-1 advisory. Adds the UEFI signing key of Leap 16.0. This needs to be imported via the MOK dialog on boot. Tenable has extracted the preceding description block...
uefi_bootkit_softlanding
SOFTLANDING UEFI BOOTKIT — ARES-2026-0001 The first public documentation of the SoftLanding UEFI DXE bootkit — a multi-agent, cross-platform firmware implant that persists in SPI flash Ring -2, deploys kernel and userland agents, and survives OS reinstallation and BIOS updates. ⚡ QUICK CHECK — AR...
OESA-2026-4033 edk2 security update
EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot.CVE-2023-49721...