ioctlance

IOCTLance Description Presented at CODE BLUE 2023, this project titled Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis introduces IOCTLance, a tool that enhances its capacity to detect various vulnerability types in Windows Driver Model WDM drivers. In a...

DriverBuddyReloaded

Driver Buddy Reloaded Table of Contents Driver Buddy Reloaded Table of Contents Installation Quick Usage Advanced Usage About Driver Buddy Reloaded Finding DispatchDeviceControl Labelling WDM and WDF Structures Finding and Decoding IOCTL Codes Flagging Functions Finding DeviceName Dumping Pooltag...

ioctlance

IOCTLance 설명 2023 CODE BLUE에서 발표된 이 프로젝트제목: Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis는 IOCTLance를 소개합니다. IOCTLance는 WDM 드라이버에서 다양한 취약점 유형을 탐지하는 능력을 향상시키는 도구입니다. 104개의 알려진 취약 WDM 드라이버와 328개의 알려지지 않은 드라이버를 포함한 종합적인 평가에서 IOCTLance는 26개의 개별 드라이버에서 117개의...

DriverBuddy

빠른 시작 DriverBuddy 설치 지침 1. DriverBuddy 폴더와 DriverBuddy.py 파일을 IDA 플러그인 폴더 C:\Program Files x86\IDA 6.8\plugins 또는 IDA를 설치한 위치에 복사하십시오. DriverBuddy 사용 지침 1. IDA를 시작하고 Windows 커널 드라이버를 엽니다. 2. Edit-Plugins로 이동하여 Driver Buddy를 선택하거나 ctrl-alt-d를 누릅니다. 3. DriverBuddy 분석 결과를 위해 Output 창을 확인합니다. 4. IOCT...

KernelFlirt

KernelFlirt OllyDbg/IDA Pro スタイルのインターフェースを備えた Windows カーネルレベルのデバッガ。VM 環境 VMware でのセキュリティ研究、リバースエンジニアリング、マルウェア解析向けに設計されています。 アーキテクチャ Host machine VM Windows 10, testsigning ┌──────────────────┐ TCP:31337 ┌──────────────────┐ IOCTL ┌──────────────────┐ │ KernelFlirt UI │◄───────────────►│ KfRelay.e...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages The syzbot fuzzer found that the interrupt-URB completion callback in the cdc-wdm driver was taking too long, and the driver's immediate resubmission of interru...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: usb: class: cdc-wdm: Issue with reordering in the read code path has been fixed. Quoting the bug report: Due to compiler optimization or CPU out-of-order execution, the desc-length update may be reordered before the memmove...

The vulnerability of the wdm_in_callback() function in the drivers/usb/class/cdc-wdm.c file of the Linux operating system’s USB device driver module allows a hacker to cause a service failure.

The vulnerability of the wdmincallback function in the drivers/usb/class/cdc-wdm.c file of the Linux operating system’s USB device driver framework is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause service failures...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099939)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099939 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: class: cdc-wdm: fix reordering issue in read code path Quoting the bug report: Due to compil...

Essity: Critical SQL Injection WDM API (████████)

A boolean-based and time-based blind SQL injection vulnerability was discovered in the searchText query parameter of the GET /api/WDMProduct endpoint. The vulnerability allowed an unauthenticated attacker to read or modify data in the backing Microsoft SQL Server database. The backend was found t...

SUSE CVE-2026-43427

In the Linux kernel, the following vulnerability has been resolved: usb: class: cdc-wdm: fix reordering issue in read code path Quoting the bug report: Due to compiler optimization or CPU out-of-order execution, the desc-length update can be reordered before the memmove. If this happens, wdmread...

CVE-2026-43427

In the Linux kernel, the following vulnerability has been resolved: usb: class: cdc-wdm: fix reordering issue in read code path Quoting the bug report: Due to compiler optimization or CPU out-of-order execution, the desc-length update can be reordered before the memmove. If this happens, wdmread...

UBUNTU-CVE-2026-43427

In the Linux kernel, the following vulnerability has been resolved: usb: class: cdc-wdm: fix reordering issue in read code path Quoting the bug report: Due to compiler optimization or CPU out-of-order execution, the desc-length update can be reordered before the memmove. If this happens, wdmread...

CVE-2026-43427

In the Linux kernel, the following vulnerability has been resolved: usb: class: cdc-wdm: fix reordering issue in read code path Quoting the bug report: Due to compiler optimization or CPU out-of-order execution, the desc-length update can be reordered before the memmove. If this happens, wdmread...

CVE-2026-43427 usb: class: cdc-wdm: fix reordering issue in read code path

In the Linux kernel, the following vulnerability has been resolved: usb: class: cdc-wdm: fix reordering issue in read code path Quoting the bug report: Due to compiler optimization or CPU out-of-order execution, the desc-length update can be reordered before the memmove. If this happens, wdmread...

CVE-2026-43427

In the Linux kernel, the following vulnerability has been resolved: usb: class: cdc-wdm: fix reordering issue in read code path Quoting the bug report: Due to compiler optimization or CPU out-of-order execution, the desc-length update can be reordered before the memmove. If this happens, wdmread...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the usb class CCDC-WDM driver’s ability to reorder the update of desc-length during code reading,...

CVE-2026-43427: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: class: cdc-wdm: fix reordering issue in read code path Quoting the bug report: Due to compiler optimization or CPU out-of-order execution, the desc-length update can be reordered before the memmove. If this happens, wdmread...

Linux Distros Unpatched Vulnerability : CVE-2026-43427

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: class: cdc-wdm: fix reordering issue in read code path Quoting the bug report: Due to compiler optimization or CPU out-of-order execution, the desc-length...

PT-2026-39088

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reordering issue exists in the read code path of the usb class cdc-wdm. Due to compiler optimization or CPU out-of-order execution, the desc-length update may occur before the memmove...