V4Bel

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 26.5.2 iPadOS versions prior to 26.5.2 macOS Tahoe versions prior to 26.5.2 **Description** Insufficient input sanitization in Apple platforms allows a locally running app to reach sensitive kernel code paths. This improper input validation can lead to memory corruption, enabling an attacker to cause unexpected system termination or write to kernel memory. Such exploitation may lead to privilege escalation or full device compromise. Real-world incidents indicate that this issue is being chained with WebKit exploits to escalate from browser-based code execution to full system control. **Recommendations** Update iOS to version 26.5.2. Update iPadOS to version 26.5.2. Update macOS Tahoe to version 26.5.2.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 26.5.2 iPadOS versions prior to 26.5.2 macOS Tahoe versions prior to 26.5.2 **Description** A kernel vulnerability exists where an application may be able to leak sensitive kernel state. This issue is caused by insufficient input sanitization. **Recommendations** Update iOS to version 26.5.2. Update iPadOS to version 26.5.2. Update macOS Tahoe to version 26.5.2.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 7.1.3 Linux kernel versions prior to 6.18.38 Linux kernel versions prior to 6.12.95 Linux kernel versions prior to 6.6.144 Linux kernel versions prior to 6.1.177 Linux kernel versions prior to 5.15.211 Linux kernel versions prior to 5.10.260 **Description** A use-after-free issue exists in the x86 shadow MMU of the Kernel-based Virtual Machine (KVM) hypervisor. The flaw occurs when the `rmap remove()` function fails to remove recorded entries because it does not compare the role of a page when a modified Page Directory Entry (PDE) points to a non-leaf page. Specifically, if a large 2MB page creates a `kvm mmu page` with `direct=1` and a new 4KB page requires `direct=0`, the `kvm mmu get child sp()` function reuses the page without verifying the role. Subsequently, `kvm mmu page get gfn()` computes the Guest Frame Number (GFN) incorrectly, leaving a surviving rmap entry after the shadow page is freed. This allows an attacker with root privileges in a guest VM to dereference a pointer in freed memory, potentially leading to a host kernel panic (denial of service) or guest-to-host escape with arbitrary code execution on the host. The issue affects both Intel and AMD x86 architectures and is particularly critical for multi-tenant public cloud environments using nested virtualization. **Recommendations** Update the Linux kernel to versions 7.1.3, 6.18.38, 6.12.95, 6.6.144, 6.1.177, 5.15.211, or 5.10.260. As a mitigation measure, disable nested virtualization by setting `kvm intel.nested=0` and `kvm amd.nested=0` in the kernel boot arguments.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 13031fb6b835 **Description** A critical guest-to-host escape flaw, dubbed ITScape, exists in the Kernel-based Virtual Machine (KVM) for ARM64, specifically within the vGIC-ITS (Interrupt Translation Service) emulation component. The issue is caused by a race condition in the `vgic its invalidate cache()` function, where multiple concurrent operations incorrectly drop the translation cache's reference to an entry more than once. This leads to a double-use-after-free condition, allowing an attacker in a guest operating system to execute arbitrary code with root privileges directly within the host kernel. This vulnerability specifically threatens multi-tenant ARM64 cloud environments where guest-host isolation is critical. The flaw is limited to ARM64 architectures and does not affect x86 systems. **Recommendations** Update the Linux kernel to version 13031fb6b835 or later to resolve the race condition in the `vgic its invalidate cache()` function.

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** A local privilege escalation issue exists in the Linux kernel networking stack, specifically within the XFRM ESP-in-TCP subsystem. The flaw originates in the `skb try coalesce()` function and the `skb segment()` function, where the kernel fails to correctly preserve the `SKBFL SHARED FRAG` flag when moving paged fragments between socket buffers or constructing GSO segments. This failure breaks the invariant relied upon by in-place writers; specifically, the `esp input()` function may incorrectly skip the `skb cow data()` check. Consequently, a low-privileged local attacker can perform unsafe in-place cryptographic processing (such as AES-GCM decryption) directly over page-cache-backed memory. This allows the attacker to write arbitrary bytes into the page cache of read-only files, such as `/usr/bin/su` or `/etc/passwd`, enabling the overwriting of privileged binaries to gain root privileges. This issue is a deterministic logic error and does not require a race condition. **Recommendations** - Update the Linux kernel to the latest patched version provided by the distribution. - As a temporary mitigation, disable the `esp4`, `esp6`, and `rxrpc` modules by running `sudo modprobe -r esp4 esp6 rxrpc` and blacklisting them. - Restrict unnecessary local shell access. - Harden containerized workloads. - Increase monitoring for abnormal privilege escalation activity.

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** A flaw in the RxRPC networking subsystem occurs when a socket buffer carrying a page-cache reference reaches the authentication verification path. The kernel performs in-place decryption directly on the referenced page without isolating the buffer. This happens because the DATA-packet handler in `rxrpc input call event()` and the RESPONSE handler in `rxrpc verify response()` only copy the socket buffer to a linear one when `skb cloned()` is true, failing to account for buffers that are not cloned but contain externally-owned paged fragments. A low-privileged local attacker can exploit this to corrupt page-cache contents of readable files, such as `/etc/passwd`, potentially obtaining root privileges. This issue may also lead to a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Spring AI versions 1.0.0 through 1.0.5 Spring AI versions 1.1.0 through 1.1.4 **Description** Various `FilterExpressionConverter` implementations fail to properly escape keys and values when translating filter expression objects into specific vector store query languages. This improper escaping allows for query injection, which can enable attackers to alter vector store queries, potentially leading to data exposure and tampering. **Recommendations** Update versions 1.0.0 through 1.0.5 to 1.0.6. Update versions 1.1.0 through 1.1.4 to 1.1.5.

Name of the Vulnerable Software and Affected Versions: Spring Cloud versions 3.1.X through 3.1.12, 4.1.X through 4.1.8, 4.2.X through 4.2.2, 4.3.X through 4.3.1, and 5.0.X through 5.0.1. Description: A flaw exists in Spring Cloud Config when substituting the profile parameter from a request to the Spring Cloud Config Server configured to use the native file system as a backend. This allows an attacker to access files outside of the configured search directories. The issue is due to improper path restriction. Recommendations: Update Spring Cloud to version 3.1.13, 4.1.9, 4.2.3, 4.3.2, or 5.0.2.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 6.6.8 **Description** An issue in the Linux kernel is related to a use-after-free condition due to a race condition in the atalk recvmsg function. This issue affects the atalk ioctl function in the net/appletalk/ddp.c module, which is part of the Appletalk protocol implementation. The exploitation of this issue may allow an attacker to impact the confidentiality, integrity, and availability of protected information. **Recommendations** For versions prior to 6.6.8, update to version 6.6.8 or later to resolve the issue. As a temporary workaround, consider disabling the `atalk ioctl()` function until a patch is available. Restrict access to the `net/appletalk/ddp.c` module to minimize the risk of exploitation. Avoid using the `atalk recvmsg` function in the affected API endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 6.6.8 **Description** The issue is related to a use-after-free condition in the do vcc ioctl function in the net/atm/ioctl.c module of the Linux kernel, caused by a vcc recvmsg race condition. This could potentially allow an attacker to impact the confidentiality, integrity, and availability of protected information. **Recommendations** For versions prior to 6.6.8, update to version 6.6.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the `do vcc ioctl()` function in the net/atm/ioctl.c module until a patch is available.