2904 matches found
CVE-2021-29155
This is the Proof Of Concept code for CVE-2021-29155. The range tracking system for pointer arithmetic in the speculative domain was insufficient. It was possible to extract kernel data via a sidechannel. This is a proof of concept you can read up to 0x5fff bytes out of bounds from the last eleme...
sgxray
SGXRay: Automating Vulnerability Detection for SGX Apps Intel SGX protects isolated application logic and sensitive data inside an enclave with hardware-based memory encryption. To use such hardware-based security mechanism requires a strict programming model on memory usage, with complex APIs in...
sgxray
SGXRay: Automatización de Detección de Vulnerabilidades para Aplicaciones SGX Intel SGX protege la lógica de aplicación aislada y los datos sensibles dentro de un enclave mediante cifrado de memoria basado en hardware. Para usar este mecanismo de seguridad basado en hardware, se requiere un model...
authproof-sdk
AuthProof SDK AuthProof es un protocolo de delegación criptográfica para IA agentiva. La mayoría de los protocolos en este espacio se aplican contra una política definida por el operador, otorgándole autoridad para expandir o reinterpretar la intención original del usuario después del hecho...
morty
Morty Web content sanitizer proxy as a service Morty rewrites web pages to exclude malicious HTML tags and attributes. It also replaces external resource references to prevent third party information leaks. The main goal of morty is to provide a result proxy for searx, but it can be used as a...
CVE-2017-16995
Descripción de la vulnerabilidad Ubuntu es un sistema operativo GNU/Linux de código abierto orientado principalmente a aplicaciones de escritorio, basado en Debian GNU/Linux. Recientemente, un hacker de sombrero blanco reveló que la última versión de Ubuntu Ubuntu 16.04 contiene una vulnerabilida...
CVE-2017-16995
CVE-2017-16995 CVE ID: CVE-2017-16995 Publish date: 2017-12-27T17:08:17.670 Base score CVSS 3.0/3.1: 7.8 Description: The checkaluop function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service memory corruption or possibly have unspecified oth...
CVE-2026-7878-eBPF-Verifier-Type-Confusion-Kernel-Memory-Read-Write
6. CVE-2026-7878 – eBPF 검증기 타입 혼동 → 커널 메모리 읽기/쓰기 개요 eBPF 검증기의 범위bounds 추적에서 발생하는 미묘한 정수 오버플로로 인해 공격자가 커널 메모리의 경계를 벗어난out-of-bounds 영역에 접근하는 eBPF 프로그램을 제작할 수 있습니다. 심각도: 치명적 커널 권한 상승 사용자 모드 eBPF 검증기 시뮬레이터C 및 익스플로잇 root@kitploit: // ebpfverifiersim.c - Simulated vulnerable verifier with type...
CVE-2026-89706
A flaw was found in the Linux kernel's nfsd component. When an asynchronous async copy writeback operation fails, the server's write verifier is not properly reset. This can lead to a client incorrectly assuming that data has been made durable, resulting in the silent loss of data that was intend...
AZL-100868 CVE-2026-89706 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: nfsd: Reset write verifier when async COPY writeback fails Async COPY captures nn-writeverf at request time and reports it to the client via CBOFFLOAD after the worker kthread completes. When the post-copy vfsfsyncrange or...
CVE-2026-89706
In the Linux kernel, the following vulnerability has been resolved: nfsd: Reset write verifier when async COPY writeback fails Async COPY captures nn-writeverf at request time and reports it to the client via CBOFFLOAD after the worker kthread completes. When the post-copy vfsfsyncrange or...
CVE-2026-89706 nfsd: Reset write verifier when async COPY writeback fails
In the Linux kernel, the following vulnerability has been resolved: nfsd: Reset write verifier when async COPY writeback fails Async COPY captures nn-writeverf at request time and reports it to the client via CBOFFLOAD after the worker kthread completes. When the post-copy vfsfsyncrange or...
EUVD-2026-76618
In the Linux kernel, the following vulnerability has been resolved: nfsd: Reset write verifier when async COPY writeback fails Async COPY captures nn-writeverf at request time and reports it to the client via CBOFFLOAD after the worker kthread completes. When the post-copy vfsfsyncrange or...
CVE-2026-89706 nfsd: Reset write verifier when async COPY writeback fails
In the Linux kernel, the following vulnerability has been resolved: nfsd: Reset write verifier when async COPY writeback fails Async COPY captures nn-writeverf at request time and reports it to the client via CBOFFLOAD after the worker kthread completes. When the post-copy vfsfsyncrange or...
CVE-2026-89706
In the Linux kernel, the following vulnerability has been resolved: nfsd: Reset write verifier when async COPY writeback fails Async COPY captures nn-writeverf at request time and reports it to the client via CBOFFLOAD after the worker kthread completes. When the post-copy vfsfsyncrange or...
CVE-2026-89706
A vulnerability in the Linux kernel's nfsd (NFS server) component causes silent data loss during asynchronous COPY operations. When post-copy writeback fails (via vfs_fsync_range() or filemap_check_wb_err()), the server correctly reports NFS_UNSTABLE but fails to rotate the write verifier. The cl...
CVE-2017-16995
CVE-2017-16995 Registro de mi exploración de la vulnerabilidad CVE-2017-16995 y análisis relacionados Espero poder encontrar uno por mí mismo, jaja Resumen Esta vulnerabilidad es una LPE causada por un error en el juicio de ramas del verificador durante la ejecución virtual de bpf En esencia, es...
PT-2026-90422
In the Linux kernel, the following vulnerability has been resolved: nfsd: Reset write verifier when async COPY writeback fails Async COPY captures nn-writeverf at request time and reports it to the client via CB OFFLOAD after the worker kthread completes. When the post-copy vfs fsync range or...
CVE-2026-31413-BPF-Container-Escape
CVE-2026-31413: Un Byte en el Verificador BPF para Escape de Contenedor Encontré un bug de solidez en el verificador BPF de Linux: un + 1 en una llamada pushstack que hace que el verificador omita una instrucción ALU en una ruta bifurcada. Para BPFOR, esto significa que el verificador rastrea dst...