Lucene search
+L

10892 matches found

RedHat Linux
RedHat Linux
•added 2026/09/09 1:05 a.m.•13 views

kernel: can:bcm: arbitrary kernel code execution leading to escalate privileges

A flaw was found in the Linux kernel in net/can/bcm.c in can: bcm, where an unprivileged local user can exploit this vulnerability to execute arbitrary code within the kernel, which leads to a local privilege escalation LPE. This allows the attacker to gain root privileges and take full control o...

7.8CVSS6.5AI score0.00146EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/09/09 12:00 a.m.•10 views

RHEL 8 : kernel (RHSA-2026:65711)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65711 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Bluetooth: hcievent: fix...

9.8CVSS7.6AI score0.00528EPSS
SaveExploits0References18
RedHat Linux
RedHat Linux
•added 2026/09/08 11:26 a.m.•15 views

kernel: can: bcm: add locking for bcm_op runtime updates

A flaw was found in the Linux kernel's Controller Area Network CAN broadcast manager BCM. Improper locking during runtime updates of internal counters in the bcmcantx function allows a local attacker to trigger a slab-out-of-bounds read access. This vulnerability can lead to information disclosur...

7.3CVSS6.5AI score0.00242EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/08 9:06 a.m.•9 views

kernel: can: bcm: add locking for bcm_op runtime updates

A flaw was found in the Linux kernel's Controller Area Network CAN broadcast manager BCM. Improper locking during runtime updates of internal counters in the bcmcantx function allows a local attacker to trigger a slab-out-of-bounds read access. This vulnerability can lead to information disclosur...

7.3CVSS6.5AI score0.00242EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2026/09/08 12:00 a.m.•6 views

The vulnerability in the net/can/bcm.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the net/can/bcm.c component in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS7.2AI score0.00176EPSS
SaveExploits0References19Affected Software6
SUSE CVE
SUSE CVE
•added 2026/09/07 4:23 p.m.•13 views

SUSE CVE-2026-72119

In the Linux kernel, the following vulnerability has been resolved: can: bcm: extend bcmtxlock usage for data and timer updates Stage new CAN frame content for an existing tx op into a kmalloc'd buffer and validate it there, mirroring the approach already used in bcmrxsetup. Only copy the validat...

7.8CVSS5.9AI score0.00176EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/07 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2026-80889

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: isotp: fix timer drain order, wakeup handling and txgen ordering This patch is a follow-up to commit cf070fe33bfb can: isotp: serialize TX state transition...

5.9AI score0.0022EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/09/05 12:25 a.m.•13 views

SUSE CVE-2026-80889

In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix timer drain order, wakeup handling and txgen ordering This patch is a follow-up to commit cf070fe33bfb "can: isotp: serialize TX state transitions under so-rxlock" which addresses following sashiko-bot findings: -...

5.9AI score0.0022EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/04 6:17 p.m.•6 views

CVE-2026-80889

In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix timer drain order, wakeup handling and txgen ordering This patch is a follow-up to commit cf070fe33bfb "can: isotp: serialize TX state transitions under so-rxlock" which addresses following sashiko-bot findings: -...

0.0022EPSS
SaveExploits0References8
OSV
OSV
•added 2026/09/04 6:17 p.m.•7 views

AZL-99479 CVE-2026-80889 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix timer drain order, wakeup handling and txgen ordering This patch is a follow-up to commit cf070fe33bfb "can: isotp: serialize TX state transitions under so-rxlock" which addresses following sashiko-bot findings: -...

5.9AI score0.0022EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/04 5:11 p.m.•30 views

CVE-2026-80889 can: isotp: fix timer drain order, wakeup handling and tx_gen ordering

In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix timer drain order, wakeup handling and txgen ordering This patch is a follow-up to commit cf070fe33bfb "can: isotp: serialize TX state transitions under so-rxlock" which addresses following sashiko-bot findings: -...

0.0022EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/04 5:11 p.m.•13 views

EUVD-2026-71639

In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix timer drain order, wakeup handling and txgen ordering This patch is a follow-up to commit cf070fe33bfb "can: isotp: serialize TX state transitions under so-rxlock" which addresses following sashiko-bot findings: -...

5.4AI score0.0022EPSS
SaveExploits0References8
Debian CVE
Debian CVE
•added 2026/09/04 5:11 p.m.•17 views

CVE-2026-80889

In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix timer drain order, wakeup handling and txgen ordering This patch is a follow-up to commit cf070fe33bfb "can: isotp: serialize TX state transitions under so-rxlock" which addresses following sashiko-bot findings: -...

5.9AI score0.0022EPSS
SaveExploits0
OSV
OSV
•added 2026/09/04 5:11 p.m.•14 views

CVE-2026-80889 can: isotp: fix timer drain order, wakeup handling and tx_gen ordering

In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix timer drain order, wakeup handling and txgen ordering This patch is a follow-up to commit cf070fe33bfb "can: isotp: serialize TX state transitions under so-rxlock" which addresses following sashiko-bot findings: -...

5.7AI score
SaveExploits0References11
CVE
CVE
•added 2026/09/04 5:11 p.m.•25 views

CVE-2026-80889

CVE-2026-80889 affects the Linux kernel CAN ISOTP (ISO-Transport Protocol) module. This patch is a follow-up to commit cf070fe33bfb ("can: isotp: serialize TX state transitions under so->rx_lock") and resolves multiple race and ordering issues identified by sashiko-bot, including: a stale call...

5.4AI score0.0022EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/09/04 12:00 a.m.•15 views

PT-2026-86180

In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix timer drain order, wakeup handling and tx gen ordering This patch is a follow-up to commit cf070fe33bfb "can: isotp: serialize TX state transitions under so-rx lock" which addresses following sashiko-bot findings:...

5.4AI score0.0022EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
•added 2026/09/04 12:00 a.m.•7 views

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: gstreamer1-plugins-good (UTSA-2026-106460)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106460 advisory. GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...

7.8CVSS7.9AI score0.00238EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/09/03 12:00 a.m.•14 views

MiracleLinux 8 : kernel-4.18.0-553.156.1.el8_10 (AXSA:2026-1750:72)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1750:72 advisory. kernel: mm/slub: avoid accessing metadata when pointer is invalid in objecterr CVE-2025-39902 kernel: drm/amdkfd: Fix out-of-bounds write in...

8.8CVSS6.9AI score0.00193EPSS
SaveExploits0References11
BDU FSTEC
BDU FSTEC
•added 2026/09/03 12:00 a.m.•6 views

The vulnerability of the ucan_probe() function in the drivers/net/can/usb/ucan.c module of the Linux network device driver stack allows a attacker to cause a service failure.

The vulnerability of the ucanprobe function in the drivers/net/can/usb/ucan.c module of the Linux network device driver framework is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause service failures...

5.5CVSS4.3AI score0.00162EPSS
SaveExploits0References10Affected Software3
SUSE CVE
SUSE CVE
•added 2026/08/31 1:30 p.m.•10 views

SUSE CVE-2026-72120

In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing rcu list annotations and operations sashiko-bot remarked the missing use of listaddrcu in bcmrx|txsetup to have a proper initialized bcmop structure when bcmprocshow traverses the bcmop's under rcureadlock. ...

7.8CVSS5.9AI score0.00176EPSS
SaveExploits0References3
Rows per page
Query Builder