Lucene search
+L

2200 matches found

RedHat Linux
RedHat Linux
•added 2025/07/01 10:46 p.m.•14 views

kernel: Bluetooth: Fix use after free in hci_send_acl

A vulnerability was found in the Linux kernel's Bluetooth subsystem in the hcidisconnphylinkcompleteevt function. Improper cleanup and reference handling can lead to a connection object, hcon, being freed and then later accessed during a subsequent function call. This issue can lead to a...

8.8CVSS6.8AI score0.00344EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/07/01 12:41 a.m.•23 views

kernel: Bluetooth: Fix use after free in hci_send_acl

A vulnerability was found in the Linux kernel's Bluetooth subsystem in the hcidisconnphylinkcompleteevt function. Improper cleanup and reference handling can lead to a connection object, hcon, being freed and then later accessed during a subsequent function call. This issue can lead to a...

8.8CVSS6.8AI score0.00344EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2025/07/01 12:00 a.m.•6 views

FreeBSD : xorg server -- Multiple vulnerabilities (b14cabf7-5663-11f0-943a-18c04d5ea3dc)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b14cabf7-5663-11f0-943a-18c04d5ea3dc advisory. The X.Org project reports: The X Rendering extension allows creating animated cursors providin...

7.8CVSS6.7AI score0.00429EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2025/06/26 11:21 p.m.•13 views

SUSE CVE-2025-52887

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. In version 0.21.0, when many http headers fields are passed in, the library does not limit the number of headers, and the memory associated with the headers will not be released when the connection is disconnected...

7.5CVSS6.8AI score0.0049EPSS
SaveExploits1References3
OSV
OSV
•added 2025/06/26 3:15 p.m.•13 views

UBUNTU-CVE-2025-52887

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. In version 0.21.0, when many http headers fields are passed in, the library does not limit the number of headers, and the memory associated with the headers will not be released when the connection is disconnected...

7.5CVSS5.6AI score0.0049EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2025/06/23 3:03 a.m.•14 views

xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Data Leak in XFIXES Extension's XFixesSetClientDisconnectMode

A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests...

6.1CVSS5.7AI score0.00429EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/06/23 1:31 a.m.•13 views

xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Data Leak in XFIXES Extension's XFixesSetClientDisconnectMode

A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests...

6.1CVSS5.7AI score0.00429EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/06/19 7:29 p.m.•16 views

CVE-2022-50220

In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix linkwatch use-after-free on disconnect usbnet uses the work usbnetdeferredkevent to perform tasks which may sleep. On disconnect, completion of the work was originally awaited in -ndostop. But in 2003, that was moved ...

4.2CVSS7.2AI score0.0024EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2025/06/19 3:38 a.m.•10 views

SUSE CVE-2022-50220

In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix linkwatch use-after-free on disconnect usbnet uses the work usbnetdeferredkevent to perform tasks which may sleep. On disconnect, completion of the work was originally awaited in -ndostop. But in 2003, that was moved ...

6.5CVSS6.4AI score0.0024EPSS
SaveExploits0References12
NVD
NVD
•added 2025/06/18 11:15 a.m.•22 views

CVE-2022-50220

In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix linkwatch use-after-free on disconnect usbnet uses the work usbnetdeferredkevent to perform tasks which may sleep. On disconnect, completion of the work was originally awaited in -ndostop. But in 2003, that was moved ...

7.8CVSS0.0024EPSS
SaveExploits0References9
OSV
OSV
•added 2025/06/18 11:15 a.m.•6 views

DEBIAN-CVE-2022-50220

In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix linkwatch use-after-free on disconnect usbnet uses the work usbnetdeferredkevent to perform tasks which may sleep. On disconnect, completion of the work was originally awaited in -ndostop. But in 2003, that was moved ...

7.8CVSS5.4AI score0.0024EPSS
SaveExploits0References1
OSV
OSV
•added 2025/06/18 11:15 a.m.•14 views

UBUNTU-CVE-2022-50220

In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix linkwatch use-after-free on disconnect usbnet uses the work usbnetdeferredkevent to perform tasks which may sleep. On disconnect, completion of the work was originally awaited in -ndostop. But in 2003, that was moved ...

7.8CVSS6.5AI score0.0024EPSS
SaveExploits0References11
CVE
CVE
•added 2025/06/18 11:03 a.m.•128 views

CVE-2022-50220

CVE-2022-50220 is a Linux kernel vulnerability in the usbnet subsystem where a use-after-free can occur on disconnect due to linkwatch handling after unregister_netdev. The issue stems from usbnet_deferred_kevent() being awaited in a path that may access freed netdev state, potentially enabling m...

7.8CVSS6.5AI score0.0024EPSS
SaveExploits0References9Affected Software1
OSV
OSV
•added 2025/06/18 11:03 a.m.•13 views

CVE-2022-50220 usbnet: Fix linkwatch use-after-free on disconnect

In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix linkwatch use-after-free on disconnect usbnet uses the work usbnetdeferredkevent to perform tasks which may sleep. On disconnect, completion of the work was originally awaited in -ndostop. But in 2003, that was moved ...

6AI score
SaveExploits0References12
CNNVD
CNNVD
•added 2025/06/18 12:00 a.m.•9 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from usbnet's use of a released linkwatch when disconnecting, which could lead to post-release reuse...

7.8CVSS6.3AI score0.0024EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2025/06/18 12:00 a.m.•13 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a vibrating work queue null pointer dereference that could lead to accessing a freed queue after a device is...

5.5CVSS5.7AI score0.00285EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/06/18 12:00 a.m.•20 views

PT-2025-25880 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A issue in the Linux kernel has been identified where the iforce close function waits at wait event interruptible with dev-mutex held, blocking input disconnect device from input...

7.8CVSS6.4AI score0.10202EPSS
SaveExploits18References584
SUSE CVE
SUSE CVE
•added 2025/06/17 11:38 p.m.•10 views

SUSE CVE-2025-49177

A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests...

5.5CVSS6.5AI score0.00429EPSS
SaveExploits0References8
attackerkb
attackerkb
•added 2025/06/17 3:15 p.m.•12 views

CVE-2025-49177

A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests...

6.1CVSS6.7AI score0.00429EPSS
SaveExploits0References8
NVD
NVD
•added 2025/06/17 3:15 p.m.•18 views

CVE-2025-49177

A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests...

6.1CVSS0.00429EPSS
SaveExploits0References7
Rows per page
Query Builder