tarnish

tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...

tiny_tracer

tinytracer A Pin Tool for tracing: API calls, including input and output of selected functions defined local functions, and functions from statically linked libraries selected instructions: RDTSC, CPUID, INT inline system calls, including parameters of selected syscalls transition between section...

CVE-2026-120634

CGI::Carp versions before 5.00 for Perl leak warnings across requests in persistent environments via the warningsToBrowser buffer. Warnings are held in a package-level buffer until warningsToBrowser writes them into the page as HTML comments, and the buffer is never cleared between requests. Unde...

AuraBorealisApp

AuraBorealis: Do You Know What's In Your Python Packages? About AuraBorealis is a web application for visualizing anomalous and potentially malicious code in Python package registries. It uses security audit data produced by scanning the Python Package Index PyPI via Aura, a static analysis...

HiddenSteps

Core crates — implementation status This is the honest, current-state complement to docs/design/02-system-architecture.md's target module map. It says what's actually built, what's verified against a real backend vs. a mock, and what's still genuinely missing — not what's planned that's...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.11. It arises because audio is processed by the HPD handler and starts before video recovery; as a result, vc4hdmiwriteinfoframe executes even when Packet RAM is disabled, potentially leading to system warnings or anomalies...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.10. It arises because ringbuffermapgetreader misinterprets a NULL returned by rbgetreaderpage as an error, causing the mmap reader to issue false warnings when it encounters a writer still in the process of committing events...

CVE-2026-99067

A flaw was found in the Linux kernel's Btrfs file system. When path resolution encounters an error while reporting scrub warnings, the kernel fails to release an acquired reference to the file system root structure. A local user could trigger this condition during file system scrubbing to cause a...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 3.8. It arises because updateipv6checksum unconditionally reads an uninitialized transmission header offset when processing non-first IPv6 fragments; this may trigger warnings when CONFIGDEBUGNET is enabled...

CVE-2026-98925

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix self-redirect copiedseq double-counting When a BPF streamverdict program redirects an skb back to the same socket self-redirect with BPFFINGRESS, skpsockverdictapply calls tcpeatskb which advances tcpsk-copiedse...

CLSA-2026-1769610819 kernel: Fix of 42 CVEs

Bluetooth: hcisysfs: Fix attempting to call deviceadd multiple times CVE-2022-50419 - firewire: net: fix use after free in fwnetfinishincomingpacket CVE-2023-53432 - wifi: brcmfmac: fix use-after-free bug in brcmfnetdevstartxmit CVE-2022-50408 - wifi: brcmfmac: slab-out-of-bounds read in...

CLSA-2025-1757961506 kernel: Fix of 28 CVEs

posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 - xfrm: state: fix out-of-bounds read during lookup CVE-2024-57982 - nfsd: fix race between laundromat and freestateid CVE-2024-50106 - nfsd: split scstatus out of sctype CVE-2024-50106 - nfsd: avoid race...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix pass-by-value structs causing MSAN warnings vidtvtsnullwriteinto and vidtvtspcrwriteinto take their argument structs by value, resulting in MSAN reports of uninit-value warnings. Although only vidtvtsnullwritein...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities arise from a race condition that occurs during the removal and migration of the page table in KVM arm64 stage 2. During this race, stage2applyrange releases a lock, which mistakenly removes the concurrent PGT,...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.9 contains a security vulnerability. This vulnerability stems from KVM arm64 failing to properly apply fine-grained UNDEF exceptions. As a result, the configuration of FGT traps is limited to FEATFGT only. This could lead to false warnings being triggered when running...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.16 contains security vulnerabilities. These vulnerabilities stem from improper handling of subpartitionscpus conflicts in the remotepartitionenable function. By replacing the error check with WARNONONCE, remote partitions can still be enabled on CPUs that are already...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Use kfreesensitive to fix Coccinelle warnings Replace memzeroexplicit and kfree with kfreesensitive to fix the warnings reported by Coccinelle: WARNING opportunity for kfreesensitive/kvfreesensitive line 1506 WARNING...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: crypto: marvell/octeontx – prevents integer overflows The value of “codelength” comes from the firmware file. If your firmware is untrusted, there’s likely very little you can do to protect yourself. Nevertheless, we still try...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Disable IRQs before initfn for non-boot CPUs. Disable IRQs before initfn for non-boot CPUs during hotplug operations, in order to silence such warnings and also to avoid potential errors due to unexpected interrupts...

Astra Linux – vulnerability in linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Return the firmware result upon destroying QP/RQ Previously, when a QP/RQ was destroyed, the result returned by the firmware destruction function was ignored, and higher layers were not informed of the failure. This...