3267 matches found
CVE-2025-40012
CVE-2025-40012 (Linux kernel, net/smc) : The issue occurs in smc_rx_splice() where DMB buffers are allocated with kzalloc() (not page-backed) and later passed to get_page(), which can trigger WARN_ON_ONCE() and break refcounting, risking use-after-free if the memory is released before splice_to_p...
CVE-2025-40012 net/smc: fix warning in smc_rx_splice() when calling get_page()
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix warning in smcrxsplice when calling getpage smcloregisterdmb allocates DMB buffers with kzalloc, which are later passed to getpage in smcrxsplice. Since kmalloc memory is not page-backed, this triggers WARNONONCE in...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the failure to free untracked internal buffers, which could lead to a memory leak...
JLSEC-2025-156 An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4
An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If gbytearraynewtake was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 232, causing unintended length truncation...
Segmentation fault and invalid memory read in `mnl::cb_run`
The function mnl::cbrun is marked as safe but exhibits unsound behavior when processing malformed Netlink message buffers. Passing a crafted byte slice to mnl::cbrun can trigger memory violations. The function does not sufficiently validate the input buffer structure before processing, leading to...
RUSTSEC-2025-0142 Segmentation fault and invalid memory read in `mnl::cb_run`
The function mnl::cbrun is marked as safe but exhibits unsound behavior when processing malformed Netlink message buffers. Passing a crafted byte slice to mnl::cbrun can trigger memory violations. The function does not sufficiently validate the input buffer structure before processing, leading to...
PT-2025-52920
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the ntfs3 module related to uninitialized buffers allocated by the getname function. This issue can lead to uninitialized errors after buffer...
CVE-2025-39975
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix wrong index reference in smb2compoundop In smb2compoundop, the loop that processes each command's response uses wrong indices when accessing response bufferes. This incorrect indexing leads to improper handling o...
CVE-2025-39975 smb: client: fix wrong index reference in smb2_compound_op()
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix wrong index reference in smb2compoundop In smb2compoundop, the loop that processes each command's response uses wrong indices when accessing response bufferes. This incorrect indexing leads to improper handling o...
[SECURITY] Fedora 42 Update: rust-protobuf-3.7.2-1.fc42
Rust implementation of Google protocol buffers...
[SECURITY] Fedora 43 Update: rust-protobuf-3.7.2-1.fc43
Rust implementation of Google protocol buffers...
kernel: skbuff: Fix a race between coalescing and releasing SKBs
In the Linux kernel, the following vulnerability has been resolved: skbuff: Fix a race between coalescing and releasing SKBs Commit 1effe8ca4e34 "skbuff: fix coalescing for pagepool fragment recycling" allowed coalescing to proceed with non page pool page and page pool page when @from is cloned,...
SUSE SLES15 Security Update : openssl-1_1-livepatches (SUSE-SU-2025:03523-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03523-1 advisory. - Add livepatch for CVE-2025-9230 bsc1250410. - Use strong externalization for ssl3setupreadbuffer and ssl3releasereadbuffer - Use strong...
CVE-2025-47351
Memory corruption while processing user buffers...
CVE-2025-47351
Memory corruption while processing user buffers...
CVE-2025-47351 Integer Overflow or Wraparound in DSP Service
Memory corruption while processing user buffers...
CVE-2025-47351 Integer Overflow or Wraparound in DSP Service
Memory corruption while processing user buffers...
CVE-2025-47351
CVE-2025-47351 affects Qualcomm components (Kernel) with memory corruption during user-buffer processing. The metric indicates local, low-privilege, low-complexity access that could lead to high impact (confidentiality, integrity, and availability). Exploitation status is not detailed in the conn...
