Lucene search
+L

297 matches found

Positive Technologies
Positive Technologies
added 2025/09/10 12:00 a.m.19 views

PT-2025-44119

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to vringh handling. The issue involves an incorrect check of return values from the copy from iter and copy to iter functions, potentially leadi...

4.6CVSS5.8AI score0.00154EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/09/05 12:00 a.m.18 views

PT-2025-46599

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue was identified in the Linux kernel related to inaccurate exception reporting within the copy from user and copy to user functions for UltraSPARC III architectures. A bug in...

5.2CVSS7.3AI score0.00153EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/09/05 12:00 a.m.10 views

PT-2025-46601

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue was identified in the Linux kernel related to inaccurate exception reporting within the copy from user and copy to user functions for UltraSPARC architectures. The problem stemm...

4.9CVSS7AI score0.00214EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/08/12 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2023-0459

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Copyfromuser on 64-bit versions of the Linux kernel does not implement the uaccessbeginnospec allowing a user to bypass the accessok check and pass a kernel...

6.5CVSS6.2AI score0.00635EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/08 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2018-12633

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel through 4.17.2. vbgmiscdeviceioctl in drivers/virt/vboxguest/vboxguestlinux.c reads the same user data twice with...

6.3CVSS6.7AI score0.00266EPSS
SaveExploits1References2
Microsoft CVE
Microsoft CVE
added 2025/08/07 7:00 a.m.18 views

atm: Revert atm_account_tx() if copy_from_iter_full() fails.

...

5.5CVSS6.8AI score0.00175EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/07/28 12:00 a.m.14 views

The vulnerability of the CopyFromExternalStageToSnowflakeOperator() function in the Apache Airflow data integration with cloud platform providers Snowflake allows a hacker to execute arbitrary code.

The vulnerability of the CopyFromExternalStageToSnowflakeOperator function in the Apache Airflow integration with cloud data platforms involves improper elimination of special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS5.9AI score0.00616EPSS
SaveExploits0References3Affected Software1
Microsoft CVE
Microsoft CVE
added 2025/07/11 7:00 a.m.9 views

x86/mce: use is_copy_from_user() to determine copy-from-user context

...

5.5CVSS6.8AI score0.00247EPSS
SaveExploits0
OSV
OSV
added 2025/07/04 2:15 p.m.12 views

AZL-64761 CVE-2025-38190 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: atm: Revert atmaccounttx if copyfromiterfull fails. In vccsendmsg, we account skb-truesize to sk-skwmemalloc by atmaccounttx. It is expected to be reverted by atmpopraw later called by vcc-dev-ops-sendvcc, skb. However, vccsendms...

5.5CVSS5.6AI score0.00175EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/04 2:15 p.m.13 views

UBUNTU-CVE-2025-38190

In the Linux kernel, the following vulnerability has been resolved: atm: Revert atmaccounttx if copyfromiterfull fails. In vccsendmsg, we account skb-truesize to sk-skwmemalloc by atmaccounttx. It is expected to be reverted by atmpopraw later called by vcc-dev-ops-sendvcc, skb. However, vccsendms...

5.5CVSS5.8AI score0.00175EPSS
SaveExploits0References28
SUSE CVE
SUSE CVE
added 2025/06/19 3:42 a.m.10 views

SUSE CVE-2022-50074

In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in aasimplewritetobuffer When copyfromuser failed, the memory is freed by kvfree. however the management struct and data blob are allocated independently, so only kvfreedata cause a memleak issue here. Use...

5.5CVSS6.3AI score0.00189EPSS
SaveExploits0References9
OSV
OSV
added 2025/06/18 11:15 a.m.3 views

DEBIAN-CVE-2022-50074

In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in aasimplewritetobuffer When copyfromuser failed, the memory is freed by kvfree. however the management struct and data blob are allocated independently, so only kvfreedata cause a memleak issue here. Use...

5.5CVSS5.3AI score0.00189EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/18 11:15 a.m.8 views

UBUNTU-CVE-2022-50074

In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in aasimplewritetobuffer When copyfromuser failed, the memory is freed by kvfree. however the management struct and data blob are allocated independently, so only kvfreedata cause a memleak issue here. Use...

5.5CVSS6AI score0.00189EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/06/18 12:00 a.m.55 views

PT-2025-26000 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the apparmor module. The issue occurs when the copy from user function fails, causing a memory leak due to...

7.8CVSS5.7AI score0.10458EPSS
SaveExploits16References579
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.14 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ALSA: Timer – Do not take registermutex with copyfrom/touser. The infamous mmaplock taken during copyfrom/touser can often be problematic when it is called within another mutex, as this may lead to deadlocks. In the case of ALSA...

5.5CVSS5.8AI score0.00147EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.3 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: x86/mce: Used iscopyfromuser to determine the copy-from-user context. Patch series “mm/hwpoison: Fix regressions in memory failure handling”, v4. 1. What is being attempted? This patchset addresses two critical regressions...

5.5CVSS6.4AI score0.00247EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/06/16 12:00 a.m.11 views

PT-2025-27965

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A issue in the Linux kernel has been resolved, related to the Asynchronous Transfer Mode ATM protocol. The problem occurs when the copy from iter full function fails in vcc sendmsg,...

5.5CVSS6AI score0.00175EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 9:38 a.m.15 views

CVE-2024-24565

CrateDB is a distributed SQL database that makes it simple to store and analyze massive amounts of data in real-time. There is a COPY FROM function in the CrateDB database that is used to import file data into database tables. This function has a flaw, and authenticated attackers can use the COPY...

6.5CVSS7AI score0.03084EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:17 p.m.11 views

CVE-2020-0235

In crusspsharedioctl we first copy 4 bytes from userdata into "size" variable, and then use that variable as the size parameter for "copyfromuser", ending up overwriting memory following "crussphdr". "crussphdr" is a static variable, of type "struct crusspioctlheader".Product: AndroidVersions:...

9.8CVSS8.3AI score0.00443EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/05/03 2:50 a.m.9 views

SUSE CVE-2023-53090

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix an illegal memory access In the kfdwaitonevents function, the kfdeventwaiter structure is allocated by alloceventwaiters, but the event field of the waiter structure is not initialized; When copyfromuser fails in...

5.5CVSS6.2AI score0.00204EPSS
SaveExploits0References10
Rows per page
Query Builder