Lucene search
K

516 matches found

OSV
OSV
added 2026/04/24 3:16 p.m.2 views

DEBIAN-CVE-2026-31619

In the Linux kernel, the following vulnerability has been resolved: ALSA: fireworks: bound device-supplied status before string array lookup The status field in an EFW response is a 32-bit value supplied by the firewire device. efrstatusnames has 17 entries so a status value outside that range go...

5.5CVSS5.2AI score0.00125EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/24 2:42 p.m.4 views

EUVD-2026-25512

In the Linux kernel, the following vulnerability has been resolved: ALSA: fireworks: bound device-supplied status before string array lookup The status field in an EFW response is a 32-bit value supplied by the firewire device. efrstatusnames has 17 entries so a status value outside that range go...

5.3AI score0.00125EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2026/04/24 2:42 p.m.3 views

CVE-2026-31619

In the Linux kernel, the following vulnerability has been resolved: ALSA: fireworks: bound device-supplied status before string array lookup The status field in an EFW response is a 32-bit value supplied by the firewire device. efrstatusnames has 17 entries so a status value outside that range go...

5.5CVSS5.2AI score0.00125EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/04/24 12:0 a.m.6 views

PT-2026-34971

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA fireworks component where the system fails to properly validate the status field in an EFW response. This field is a 32-bit value supplied by the firewire...

9.8CVSS5.1AI score0.00457EPSS
Exploits0References142
Tenable Nessus
Tenable Nessus
added 2026/04/21 12:0 a.m.0 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013058)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013058 advisory. In the Linux kernel, the following vulnerability has been resolved: firewire: nosy: ensure userlength is taken into account when fetching packet contents Ensure that...

7.1CVSS6.5AI score0.00296EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/17 12:0 a.m.1 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007236)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007236 advisory. In the Linux kernel, the following vulnerability has been resolved: firewire: nosy: ensure userlength is taken into account when fetching packet contents Ensure that...

7.1CVSS6.4AI score0.00296EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/08 12:0 a.m.2 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006720)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006720 advisory. In the Linux kernel, the following vulnerability has been resolved: firewire: nosy: ensure userlength is taken into account when fetching packet contents Ensure that...

7.1CVSS6.8AI score0.00296EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/03/17 12:0 a.m.4 views

EulerOS 2.0 SP11 : kernel (EulerOS-SA-2026-1582)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the...

7.8CVSS6.3AI score0.00544EPSS
Exploits5References241
Tenable Nessus
Tenable Nessus
added 2026/03/16 12:0 a.m.7 views

EulerOS 2.0 SP11 : kernel (EulerOS-SA-2026-1610)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the...

7.8CVSS7.5AI score0.00544EPSS
Exploits5References241
Tenable Nessus
Tenable Nessus
added 2026/02/17 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-23153

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix race condition against transaction list The list of transaction is...

4.7CVSS5.7AI score0.00074EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2026/02/16 12:26 a.m.5 views

SUSE CVE-2026-23153

In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix race condition against transaction list The list of transaction is enumerated without acquiring card lock when processing AR response event. This causes a race condition bug when processing AT request completi...

4.7CVSS5.2AI score0.00074EPSS
Exploits0References3
NVD
NVD
added 2026/02/14 4:15 p.m.6 views

CVE-2026-23153

In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix race condition against transaction list The list of transaction is enumerated without acquiring card lock when processing AR response event. This causes a race condition bug when processing AT request completi...

4.7CVSS0.00074EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2026/02/14 4:15 p.m.3 views

CVE-2026-23153

In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix race condition against transaction list The list of transaction is enumerated without acquiring card lock when processing AR response event. This causes a race condition bug when processing AT request completi...

4.7CVSS5.7AI score0.00074EPSS
Exploits0References4
OSV
OSV
added 2026/02/14 4:15 p.m.0 views

UBUNTU-CVE-2026-23153

In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix race condition against transaction list The list of transaction is enumerated without acquiring card lock when processing AR response event. This causes a race condition bug when processing AT request completi...

4.7CVSS5.7AI score0.00074EPSS
Exploits0References5
CVE
CVE
added 2026/02/14 4:1 p.m.23 views

CVE-2026-23153

CVE-2026-23153 concerns the Linux kernel regarding a race condition in the FireWire core when enumerating the transaction list without a lock during AR response processing, potentially impacting AT request completion handling. The issue is resolved by moving the timer start for split-transaction ...

4.7CVSS5.2AI score0.00074EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/02/14 4:1 p.m.5 views

CVE-2026-23153

In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix race condition against transaction list The list of transaction is enumerated without acquiring card lock when processing AR response event. This causes a race condition bug when processing AT request completi...

5.2AI score0.00074EPSS
Exploits0References3Affected Software1
EUVD
EUVD
added 2026/02/14 4:1 p.m.4 views

EUVD-2026-5884

In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix race condition against transaction list The list of transaction is enumerated without acquiring card lock when processing AR response event. This causes a race condition bug when processing AT request completi...

5.2AI score0.00074EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/02/14 4:1 p.m.25 views

CVE-2026-23153 firewire: core: fix race condition against transaction list

In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix race condition against transaction list The list of transaction is enumerated without acquiring card lock when processing AR response event. This causes a race condition bug when processing AT request completi...

0.00074EPSS
Exploits0References2
OSV
OSV
added 2026/02/14 4:1 p.m.5 views

CVE-2026-23153 firewire: core: fix race condition against transaction list

In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix race condition against transaction list The list of transaction is enumerated without acquiring card lock when processing AR response event. This causes a race condition bug when processing AT request completi...

4.7CVSS5.2AI score0.00074EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2026/02/14 4:1 p.m.4 views

CVE-2026-23153

In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix race condition against transaction list The list of transaction is enumerated without acquiring card lock when processing AR response event. This causes a race condition bug when processing AT request completi...

4.7CVSS5.2AI score0.00074EPSS
Exploits0
Rows per page
Query Builder