[Fixed] Linux: landlock can be disabled thanks to missing cred_transfer hook; and Smack looks dodgy too About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2024-7-24 20:49:41 | 阅读: 0 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Linux: LSM can prevent POSIX lock removal in fcntl/close race cleanup path About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2024-7-3 00:20:12 | 阅读: 0 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Linux: DRM: refcount incremented too late in drm_file_update_pid() About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2024-6-28 02:28:6 | 阅读: 0 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] PowerVR: two security issues identified during patch review About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2024-6-26 05:56:15 | 阅读: 0 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] PowerVR: DevmemIntChangeSparse2() UAF on PMRGetUID() call About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2024-6-11 00:6:16 | 阅读: 0 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Qualcomm KGSL: reclaimed / in-reclaim objects can still be mapped into VBOs About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2024-4-30 00:11:35 | 阅读: 0 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Telegram for Android: Use-after-free in Connection::onReceivedData About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2024-4-24 19:16:5 | 阅读: 0 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] PowerVR: wrapping addition in _DevmemXReservationPageAddress() causes MMU operation at wrong address About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2024-4-17 21:46:29 | 阅读: 2 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] PowerVR: integer overflows in DevmemXIntMapPages() and DevmemXIntUnmapPages(), exploitable as dangling GPU page table entries About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2024-4-17 03:56:48 | 阅读: 0 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] PowerVR: PMR physical memory is freed before GPU TLB invalidation About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2024-4-11 00:5:13 | 阅读: 0 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] PowerVR: DevmemXIntMapPages() allows mapping sDevZeroPage/sDummyPage without holding reference About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2024-3-21 23:28:0 | 阅读: 1 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] PowerVR: Driver doesn't sanitize ZS-Buffer / MSAA scratch firmware addresses About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2024-3-16 06:2:32 | 阅读: 1 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] PowerVR: out-of-bounds write of firmware addresses in PVRSRVRGXKickTA3DKM() About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2024-3-16 01:19:27 | 阅读: 1 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] PowerVR: Wrong order of operations in DevmemIntChangeSparse2() leads to temporarily dangling page table entry About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2024-3-15 02:31:8 | 阅读: 2 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] PowerVR: missing tracking of multiple sparse mappings in DevmemIntChangeSparse2() leads to dangling page table entry About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2024-3-13 00:21:32 | 阅读: 0 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] PowerVR: uninitialized memory disclosure (and crash due to OOB reads) in hwperf_host_%d stream About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2024-2-24 05:54:40 | 阅读: 3 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] Linux >=6.5: read-after-type-change of folio in cachestat() leads to kernel pointer leak About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2024-2-20 03:3:36 | 阅读: 3 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] PowerVR: use-after-free in _UnrefAndMaybeDestroy() About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2024-2-14 00:13:45 | 阅读: 3 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] PowerVR: writability check in PMRMMapPMR() does not clear VM_MAYWRITE About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2024-2-13 04:25:4 | 阅读: 2 | 收藏 | project-zero issues - bugs.chromium.org monorail

[Fixed] PowerVR: DevmemIntUnexportCtx destroys export before unlinking it, leading to UAF About Monorail User Guide Release Notes Feedback on Monorail Terms Privacy ... 2024-2-9 06:30:52 | 阅读: 2 | 收藏 | project-zero issues - bugs.chromium.org monorail