Lucene search
+L

103 matches found

ATTACKERKB
ATTACKERKB
added 2025/07/28 11:22 a.m.8 views

CVE-2025-38493

In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Fix crash in timerlatdumpstack We have observed kernel panics when using timerlat with stack saving, with the following dmesg output: memcpy: detected buffer overflow: 88 byte write of buffer size 0 WARNING: CPU:...

5.5CVSS6AI score0.00154EPSS
SaveExploits0References5Affected Software1
RedHat Linux
RedHat Linux
added 2025/05/28 3:30 a.m.12 views

kernel: RDMA/mlx5: Fix fortify source warning while accessing Eth segment

A flaw was found in the Linux kernel's mlx5 InfiniBand driver. Certain scenarios could lead to a use-after-free issue, potentially allowing an attacker to escalate their privileges or affect system integrity or stability...

7.8CVSS6.8AI score0.00265EPSS
SaveExploits0References5
OSV
OSV
added 2025/05/08 7:15 a.m.2 views

DEBIAN-CVE-2025-37816

In the Linux kernel, the following vulnerability has been resolved: mei: vsc: Fix fortify-panic caused by invalid countedby use gcc 15 honors the countedbylen attribute on vsctppacket.buf and the vsc-tp.c code is using this in a wrong way. len does not contain the available size in the buffer, it...

5.5CVSS6AI score0.00192EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/01 3:15 p.m.6 views

UBUNTU-CVE-2022-49766

In the Linux kernel, the following vulnerability has been resolved: netlink: Bounds-check struct nlmsgerr creation In preparation for FORTIFYSOURCE doing bounds-check on memcpy, switch from nlmsgput to nlmsgput, and explain the bounds check for dealing with the memcpy across a composite flexible...

5.5CVSS5.7AI score0.00159EPSS
SaveExploits0References5
OSV
OSV
added 2025/03/27 5:15 p.m.1 views

DEBIAN-CVE-2022-49743

In the Linux kernel, the following vulnerability has been resolved: ovl: Use "buf" flexible array for memcpy destination The "buf" flexible array needs to be the memcpy destination to avoid false positive run-time warning from the recent FORTIFYSOURCE hardening: memcpy: detected field-spanning...

5.5CVSS5.3AI score0.00436EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/27 5:15 p.m.18 views

UBUNTU-CVE-2022-49743

In the Linux kernel, the following vulnerability has been resolved: ovl: Use "buf" flexible array for memcpy destination The "buf" flexible array needs to be the memcpy destination to avoid false positive run-time warning from the recent FORTIFYSOURCE hardening: memcpy: detected field-spanning...

7.5CVSS5.7AI score0.00436EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2025/03/27 4:42 p.m.5 views

CVE-2022-49743

In the Linux kernel, the following vulnerability has been resolved: ovl: Use "buf" flexible array for memcpy destination The "buf" flexible array needs to be the memcpy destination to avoid false positive run-time warning from the recent FORTIFYSOURCE hardening: memcpy: detected field-spanning...

5.5CVSS5.2AI score0.00436EPSS
SaveExploits0References5Affected Software1
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.4 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ipvs: fixed an undefined behavior due to uninitialized stack access in ipvsprotocolinit Under certain kernel configurations when building with Clang/LLVM, the compiler does not generate a return or jump as the terminator...

5.5CVSS6.2AI score0.00229EPSS
SaveExploits0References3
OSV
OSV
added 2025/01/11 1:15 p.m.16 views

UBUNTU-CVE-2024-53680

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix UB due to uninitialized stack access in ipvsprotocolinit Under certain kernel configurations when building with Clang/LLVM, the compiler does not generate a return or jump as the terminator instruction for...

5.5CVSS6.4AI score0.00229EPSS
SaveExploits0References38
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.14 views

PT-2026-2889

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the handling of ERSPAN traffic in GRE tunnels. Specifically, the options len field within the ip tunnel info structure is not properly...

9.8CVSS7AI score0.00677EPSS
SaveExploits8References210
SUSE CVE
SUSE CVE
added 2024/10/22 2:23 p.m.16 views

SUSE CVE-2022-48967

In the Linux kernel, the following vulnerability has been resolved: NFC: nci: Bounds check struct nfctarget arrays While running under CONFIGFORTIFYSOURCE=y, syzkaller reported: memcpy: detected field-spanning write size 129 of single field "target-sensfres" at net/nfc/nci/ntf.c:260 size 18 This...

7.3CVSS6.5AI score0.00343EPSS
SaveExploits0References14
OSV
OSV
added 2024/10/21 8:15 p.m.3 views

DEBIAN-CVE-2022-48967

In the Linux kernel, the following vulnerability has been resolved: NFC: nci: Bounds check struct nfctarget arrays While running under CONFIGFORTIFYSOURCE=y, syzkaller reported: memcpy: detected field-spanning write size 129 of single field "target-sensfres" at net/nfc/nci/ntf.c:260 size 18 This...

7.1CVSS5.5AI score0.00343EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2024/06/30 2:00 p.m.17 views

RDMA/mlx5: Fix fortify source warning while accessing Eth segment

...

7.8CVSS7.5AI score0.00265EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2024/06/22 4:09 a.m.8 views

SUSE CVE-2022-48744

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid field-overflowing memcpy In preparation for FORTIFYSOURCE performing compile-time and run-time field bounds checking for memcpy, memmove, and memset, avoid intentionally writing across neighboring fields. Use...

5.5CVSS6.5AI score0.00607EPSS
SaveExploits0References8
OSV
OSV
added 2024/06/20 12:15 p.m.12 views

AZL-67887 CVE-2022-48744 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid field-overflowing memcpy In preparation for FORTIFYSOURCE performing compile-time and run-time field bounds checking for memcpy, memmove, and memset, avoid intentionally writing across neighboring fields. Use...

7.8CVSS6.5AI score0.00607EPSS
SaveExploits0References1
OSV
OSV
added 2024/06/20 12:15 p.m.8 views

DEBIAN-CVE-2022-48744

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid field-overflowing memcpy In preparation for FORTIFYSOURCE performing compile-time and run-time field bounds checking for memcpy, memmove, and memset, avoid intentionally writing across neighboring fields. Use...

7.8CVSS6.2AI score0.00607EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2024/05/25 3:33 a.m.9 views

SUSE CVE-2021-47458

In the Linux kernel, the following vulnerability has been resolved: ocfs2: mount fails with buffer overflow in strlen Starting with kernel 5.11 built with CONFIGFORTIFYSOURCE mouting an ocfs2 filesystem with either o2cb or pcmk cluster stack fails with the trace below. Problem seems to be that...

5.5CVSS6.7AI score0.00247EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
added 2024/05/23 3:05 a.m.6 views

SUSE CVE-2021-47288

In the Linux kernel, the following vulnerability has been resolved: media: ngene: Fix out-of-bounds bug in ngenecommandconfigfreebuf Fix an 11-year old bug in ngenecommandconfigfreebuf while addressing the following warnings caught with -Warray-bounds: arch/alpha/include/asm/string.h:22:16:...

4.4CVSS6.7AI score0.00234EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
added 2024/05/22 7:15 a.m.14 views

CVE-2021-47458

In the Linux kernel, the following vulnerability has been resolved: ocfs2: mount fails with buffer overflow in strlen Starting with kernel 5.11 built with CONFIGFORTIFYSOURCE mouting an ocfs2 filesystem with either o2cb or pcmk cluster stack fails with the trace below. Problem seems to be that...

7.8CVSS6.3AI score0.00247EPSS
SaveExploits0References10
OSV
OSV
added 2024/05/21 3:15 p.m.15 views

UBUNTU-CVE-2021-47288

In the Linux kernel, the following vulnerability has been resolved: media: ngene: Fix out-of-bounds bug in ngenecommandconfigfreebuf Fix an 11-year old bug in ngenecommandconfigfreebuf while addressing the following warnings caught with -Warray-bounds: arch/alpha/include/asm/string.h:22:16:...

7.1CVSS5.9AI score0.00234EPSS
SaveExploits0References11
Rows per page
Query Builder