[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2024-26745":3,"landing-articles":61},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":23,"technologies":32,"references":34,"score":39,"epss_score":40,"epss_percentile":41,"is_kev":20,"cisa_kev_date_added":42,"cisa_kev_due_date":42,"cisa_ssvc":43,"attack_mappings":53,"exploits":60},59538,"CVE-2024-26745","EUVD-2024-24007","In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc\u002Fpseries\u002Fiommu: IOMMU table is not initialized for kdump over SR-IOV\n\nWhen kdump kernel tries to copy dump data over SR-IOV, LPAR panics due\nto NULL pointer exception:\n\n  Kernel attempted to read user page (0) - exploit attempt? (uid: 0)\n  BUG: Kernel NULL pointer dereference on read at 0x00000000\n  Faulting instruction address: 0xc000000020847ad4\n  Oops: Kernel access of bad area, sig: 11 [#1]\n  LE PAGE_SIZE=64K MMU=Radix SMP NR_CPUS=2048 NUMA pSeries\n  Modules linked in: mlx5_core(+) vmx_crypto pseries_wdt papr_scm libnvdimm mlxfw tls psample sunrpc fuse overlay squashfs loop\n  CPU: 12 PID: 315 Comm: systemd-udevd Not tainted 6.4.0-Test102+ #12\n  Hardware name: IBM,9080-HEX POWER10 (raw) 0x800200 0xf000006 of:IBM,FW1060.00 (NH1060_008) hv:phyp pSeries\n  NIP:  c000000020847ad4 LR: c00000002083b2dc CTR: 00000000006cd18c\n  REGS: c000000029162ca0 TRAP: 0300   Not tainted  (6.4.0-Test102+)\n  MSR:  800000000280b033 \u003CSF,VEC,VSX,EE,FP,ME,IR,DR,RI,LE>  CR: 48288244  XER: 00000008\n  CFAR: c00000002083b2d8 DAR: 0000000000000000 DSISR: 40000000 IRQMASK: 1\n  ...\n  NIP _find_next_zero_bit+0x24\u002F0x110\n  LR  bitmap_find_next_zero_area_off+0x5c\u002F0xe0\n  Call Trace:\n    dev_printk_emit+0x38\u002F0x48 (unreliable)\n    iommu_area_alloc+0xc4\u002F0x180\n    iommu_range_alloc+0x1e8\u002F0x580\n    iommu_alloc+0x60\u002F0x130\n    iommu_alloc_coherent+0x158\u002F0x2b0\n    dma_iommu_alloc_coherent+0x3c\u002F0x50\n    dma_alloc_attrs+0x170\u002F0x1f0\n    mlx5_cmd_init+0xc0\u002F0x760 [mlx5_core]\n    mlx5_function_setup+0xf0\u002F0x510 [mlx5_core]\n    mlx5_init_one+0x84\u002F0x210 [mlx5_core]\n    probe_one+0x118\u002F0x2c0 [mlx5_core]\n    local_pci_probe+0x68\u002F0x110\n    pci_call_probe+0x68\u002F0x200\n    pci_device_probe+0xbc\u002F0x1a0\n    really_probe+0x104\u002F0x540\n    __driver_probe_device+0xb4\u002F0x230\n    driver_probe_device+0x54\u002F0x130\n    __driver_attach+0x158\u002F0x2b0\n    bus_for_each_dev+0xa8\u002F0x130\n    driver_attach+0x34\u002F0x50\n    bus_add_driver+0x16c\u002F0x300\n    driver_register+0xa4\u002F0x1b0\n    __pci_register_driver+0x68\u002F0x80\n    mlx5_init+0xb8\u002F0x100 [mlx5_core]\n    do_one_initcall+0x60\u002F0x300\n    do_init_module+0x7c\u002F0x2b0\n\nAt the time of LPAR dump, before kexec hands over control to kdump\nkernel, DDWs (Dynamic DMA Windows) are scanned and added to the FDT.\nFor the SR-IOV case, default DMA window \"ibm,dma-window\" is removed from\nthe FDT and DDW added, for the device.\n\nNow, kexec hands over control to the kdump kernel.\n\nWhen the kdump kernel initializes, PCI busses are scanned and IOMMU\ngroup\u002Ftables created, in pci_dma_bus_setup_pSeriesLP(). For the SR-IOV\ncase, there is no \"ibm,dma-window\". The original commit: b1fc44eaa9ba,\nfixes the path where memory is pre-mapped (direct mapped) to the DDW.\nWhen TCEs are direct mapped, there is no need to initialize IOMMU\ntables.\n\niommu_table_setparms_lpar() only considers \"ibm,dma-window\" property\nwhen initiallizing IOMMU table. In the scenario where TCEs are\ndynamically allocated for SR-IOV, newly created IOMMU table is not\ninitialized. Later, when the device driver tries to enter TCEs for the\nSR-IOV device, NULL pointer execption is thrown from iommu_area_alloc().\n\nThe fix is to initialize the IOMMU table with DDW property stored in the\nFDT. There are 2 points to remember:\n\n\t1. For the dedicated adapter, kdump kernel would encounter both\n\t   default and DDW in FDT. In this case, DDW property is used to\n\t   initialize the IOMMU table.\n\n\t2. A DDW could be direct or dynamic mapped. kdump kernel would\n\t   initialize IOMMU table and mark the existing DDW as\n\t   \"dynamic\". This works fine since, at the time of table\n\t   initialization, iommu_table_clear() makes some space in the\n\t   DDW, for some predefined number of TCEs which are needed for\n\t   kdump to succeed.","2024-04-04T09:15:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":17,"attackComplexity":18,"availabilityImpact":19,"privilegesRequired":19,"confidentialityImpact":17},"UNCHANGED","3.1",4.4,"LOCAL","MEDIUM","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H","NONE","LOW","HIGH",false,[22],"CWE-476",[24,25,26,27,28,29,30,31],"cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:5.18.18:*:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:6.8:rc6:*:*:*:*:*:*",[33],"Linux Linux Kernel",[35,36,37,38],"https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F09a3c1e46142199adcee372a420b024b4fc61051","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F5da6d306f315344af1ca2eff4bd9b10b130f0c28","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F7eb95e0af5c9c2e6fad50356eaf32d216d0e7bc3","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002Fd4d1e4b1513d975961de7bb4f75e450a92d65ebf",0.22,0.0022,0.12371,null,{"timestamp":44,"automatable":45,"tech_impact":46,"exploitation":47,"cisa_decision":48,"cisa_remediation_timeline":52},"2024-04-04T15:11:41.135555Z","no","partial","none",{"vector":49,"decision":50,"priority":51},"CISAv1\u002FE:N\u002FA:N\u002FT:P\u002FM:H\u002F2026-10-25T17:39:42.976461\u002F","track_star","medium","60D",[54],{"name":55,"source":56,"tactics":57,"technique_id":59},"Exploitation for Privilege Escalation","attack_vector",[58],"privilege-escalation","T1068",[],{"count":62,"next":63,"previous":42,"results":64},30,"http:\u002F\u002Fweb:8606\u002Fapi\u002Farticles\u002F?page=2&sorted_by=-published_at",[65,72,80,88,95,102,109,114,121,128],{"id":62,"title":66,"summary":67,"published_at":68,"type":69,"link":70,"image_url":71},"PHP2Shell: Two Critical RCE Flaws in PHP (CVSS 9.2)","Unauthenticated code execution demonstrated on WordPress, Drupal and Joomla, and reproduced in our lab. Patched versions and steps to take today.","2026-10-22T00:00:00Z","cve","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fphp2shell-2-critical-rce-flaws-php-cvss-9-2","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002Fc0615c4ee6-1792684469\u002Fphp2shell-2-critical-rce-flaws-php-cvss-9-2.png",{"id":73,"title":74,"summary":75,"published_at":76,"type":77,"link":78,"image_url":79},29,"Manage External Security Across All Your Entities","Centralize the management of entities, users and external security resources while maintaining strict data isolation with Patrowl.","2026-09-15T00:00:00Z","security tips","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fmulti-entity-external-security-how-structure-governance-group-level","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002F8b2c0cc5eb-1789551467\u002Fvisu_1_multi_tenancy_dark_1x.webp",{"id":81,"title":82,"summary":83,"published_at":84,"type":85,"link":86,"image_url":87},28,"Will AI Become the Next Hacker? Bruce Schneier Answers at DEF CON 34","Tax law, finance, legislation: Bruce Schneier shows how AI could hack human rule systems just as easily as it hacks software.","2026-09-14T00:00:00Z","hacks","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fbruce-schneier-def-con-34","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002F5c616d9db4-1789462598\u002Fai-hacker.en.png",{"id":89,"title":90,"summary":91,"published_at":92,"type":77,"link":93,"image_url":94},27,"Exposure Management: definition, stakes, and how it works","Vulnerabilities, misconfigurations, poorly managed identities: understand what Exposure Management is and why it matters in 2026.","2026-09-10T00:00:00Z","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fdefinition-exposure-management","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002F06170638a9-1789050834\u002Fexposure.management.definition.en.png",{"id":96,"title":97,"summary":98,"published_at":99,"type":85,"link":100,"image_url":101},26,"DGFiP Cyberattack 2026: Inside the Attacker","Two distinct attacks hit France","2026-08-17T00:00:00Z","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fdgfip-cyberattack-2026-inside-attacker-mind","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002Fdc38d33696-1787055371\u002Fdgfip-2026.png",{"id":103,"title":104,"summary":105,"published_at":106,"type":69,"link":107,"image_url":108},25,"CVE-2026-64638: XSS2Shell, a WordPress Login Vulnerability","Pre-auth XSS on wp-login.php, patched August 6. What is actually exploitable, and how to read it in your Patrowl report.","2026-08-10T00:00:00Z","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fxss2shell-critical-wordpress-login-vulnerability-2026","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002F904e61748b-1786369212\u002Fxss2shell.png",{"id":110,"title":111,"summary":111,"published_at":106,"type":69,"link":112,"image_url":113},24,"CVE-2026-64638 : XSS2Shell, faille du login WordPress","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fcve-2026-64638-xss2shell-faille-login-wordpress","",{"id":115,"title":116,"summary":117,"published_at":118,"type":69,"link":119,"image_url":120},23,"How Agentic AI Hunts Down CVEs Before Attackers Do","38 vulnerability sources monitored around the clock, pentester-validated proof of exploitability, an alert within hours. See how it works.","2026-08-05T00:00:00Z","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fproactive-threat-hunting-agentic-ai-cve","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002F804988ce7b-1785930160\u002Fproactive-threat-hunting-how-agentic-ai-tracks-cves.png",{"id":122,"title":123,"summary":124,"published_at":125,"type":85,"link":126,"image_url":127},22,"AI Agent Incident: OpenAI HuggingFace — Risks and Lessons","An autonomous AI agent escaped its sandbox via a JFrog Artifactory zero-day, compromised HuggingFace via privilege escalation and stolen credentials. Reconstructed timeline and security lessons.","2026-07-31T00:00:00Z","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fai-agent-incident-openai-huggingface-risks","[Image URL from Kirby]",{"id":129,"title":130,"summary":131,"published_at":132,"type":77,"link":133,"image_url":134},21,"SaaS Under Watch: What Your SDLC Doesn","Your pipeline is green. Your real exposure may have changed without you knowing it. The complete guide for software vendors.","2026-07-29T00:00:00Z","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fsecuring-saas-application-software-vendor","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002F20d6ec0cd0-1785331401\u002Fapplication-security.png"]