Lucene search
+L

9542 matches found

OSV
OSV
•added 2025/09/23 6:15 a.m.•14 views

AZL-67650 CVE-2025-39873 affecting package kernel for versions less than 6.6.112.1-1

In the Linux kernel, the following vulnerability has been resolved: can: xilinxcan: xcanwriteframe: fix use-after-free of transmitted SKB canputechoskb takes ownership of the SKB and it may be freed during or after the call. However, xilinxcan xcanwriteframe keeps using SKB after the call. Fix th...

7.8CVSS5.8AI score0.00158EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/23 6:15 a.m.•10 views

CVE-2025-39873

In the Linux kernel, the following vulnerability has been resolved: can: xilinxcan: xcanwriteframe: fix use-after-free of transmitted SKB canputechoskb takes ownership of the SKB and it may be freed during or after the call. However, xilinxcan xcanwriteframe keeps using SKB after the call. Fix th...

7.8CVSS0.00158EPSS
SaveExploits0References7
OSV
OSV
•added 2025/09/23 6:15 a.m.•17 views

AZL-74930 CVE-2025-39873 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: can: xilinxcan: xcanwriteframe: fix use-after-free of transmitted SKB canputechoskb takes ownership of the SKB and it may be freed during or after the call. However, xilinxcan xcanwriteframe keeps using SKB after the call. Fix th...

7.8CVSS5.8AI score0.00158EPSS
SaveExploits0References1
OSV
OSV
•added 2025/09/23 6:15 a.m.•13 views

UBUNTU-CVE-2025-39873

In the Linux kernel, the following vulnerability has been resolved: can: xilinxcan: xcanwriteframe: fix use-after-free of transmitted SKB canputechoskb takes ownership of the SKB and it may be freed during or after the call. However, xilinxcan xcanwriteframe keeps using SKB after the call. Fix th...

7.8CVSS6.6AI score0.00158EPSS
SaveExploits0References32
CVE
CVE
•added 2025/09/23 6:00 a.m.•63 views

CVE-2025-39873

CVE-2025-39873 (Linux kernel) : The vulnerability concerns the xilinx_can driver where xcan_write_frame() may use a previously freed skb. The root cause is that can_put_echo_skb() can take ownership of the SKB, which may be freed during or after the call, while xcan_write_frame() continues to tou...

7.8CVSS6.5AI score0.00158EPSS
SaveExploits0References7Affected Software1
SUSE CVE
SUSE CVE
•added 2025/09/22 11:41 p.m.•16 views

SUSE CVE-2023-33953

gRPC contains a vulnerability that allows hpack table accounting errors could lead to unwanted disconnects between clients and servers in exceptional cases/ Three vectors were found that allow the following DOS attacks: - Unbounded memory buffering in the HPACK parser - Unbounded CPU consumption ...

7.5CVSS7.9AI score0.00479EPSS
SaveExploits0References5
NVD
NVD
•added 2025/09/19 4:15 p.m.•16 views

CVE-2025-39864

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix use-after-free in cmpbss Following bssfree quirk introduced in commit 776b3580178f "cfg80211: track hidden SSID networks properly", adjust cfg80211updateknownbss to free the last beacon frame elements only if...

8.8CVSS0.00235EPSS
SaveExploits0References12
CVE
CVE
•added 2025/09/19 3:26 p.m.•78 views

CVE-2025-39864

CVE-2025-39864 affects the Linux kernel wifi subsystem (cfg80211) and specifically the cmp_bss() path after a use-after-free in bss_free(). The fix, applied via commits addressing the hidden_beacon_bss handling, ensures the last beacon frame elements are freed only when not shared by the hidden_b...

8.8CVSS6.2AI score0.00235EPSS
SaveExploits0References12Affected Software1
Vulnrichment
Vulnrichment
•added 2025/09/19 3:26 p.m.•16 views

CVE-2025-39864 wifi: cfg80211: fix use-after-free in cmp_bss()

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix use-after-free in cmpbss Following bssfree quirk introduced in commit 776b3580178f "cfg80211: track hidden SSID networks properly", adjust cfg80211updateknownbss to free the last beacon frame elements only if...

8.8CVSS6.7AI score0.00235EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2025/09/19 3:26 p.m.•24 views

CVE-2025-39864 wifi: cfg80211: fix use-after-free in cmp_bss()

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix use-after-free in cmpbss Following bssfree quirk introduced in commit 776b3580178f "cfg80211: track hidden SSID networks properly", adjust cfg80211updateknownbss to free the last beacon frame elements only if...

8.8CVSS0.00235EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2025/09/19 12:00 a.m.•16 views

PT-2025-39749

Name of the Vulnerable Software and Affected Versions GNU Binutils versions prior to 2.46 Description A flaw exists in GNU Binutils impacting the bfd elf parse eh frame function within the bfd/elf-eh-frame.c file of the Linker component. This can lead to a heap-based buffer overflow, with...

7.8CVSS5.4AI score0.00255EPSS
SaveExploits2References106
SUSE CVE
SUSE CVE
•added 2025/09/18 11:43 p.m.•14 views

SUSE CVE-2022-50399

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: prevent integer overflow in shcsssetblackframe The "height" and "width" values come from the user so the "height width" multiplication can overflow...

5.5CVSS6.8AI score0.00168EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2025/09/18 5:17 p.m.•9 views

CVE-2022-50399

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: prevent integer overflow in shcsssetblackframe The "height" and "width" values come from the user so the "height width" multiplication can overflow...

5.5CVSS6.1AI score0.00168EPSS
SaveExploits0References4
OSV
OSV
•added 2025/09/18 2:15 p.m.•4 views

DEBIAN-CVE-2022-50399

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: prevent integer overflow in shcsssetblackframe The "height" and "width" values come from the user so the "height width" multiplication can overflow...

5.5CVSS5.5AI score0.00168EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/18 2:15 p.m.•15 views

CVE-2022-50399

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: prevent integer overflow in shcsssetblackframe The "height" and "width" values come from the user so the "height width" multiplication can overflow...

7.8CVSS0.00168EPSS
SaveExploits0References4
OSV
OSV
•added 2025/09/18 2:15 p.m.•14 views

UBUNTU-CVE-2022-50399

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: prevent integer overflow in shcsssetblackframe The "height" and "width" values come from the user so the "height width" multiplication can overflow...

7.8CVSS6.2AI score0.00168EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2025/09/18 1:33 p.m.•18 views

CVE-2022-50399

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: prevent integer overflow in shcsssetblackframe The "height" and "width" values come from the user so the "height width" multiplication can overflow...

7.8CVSS5.5AI score0.00168EPSS
SaveExploits0
CVE
CVE
•added 2025/09/18 1:33 p.m.•60 views

CVE-2022-50399

CVE-2022-50399 affects the Linux kernel media/atomisp path (sh_css_set_black_frame) where user-controlled height and width could cause a height*width integer overflow. Connected advisories report patches and fixed versions across distros: Root (rootio-linux package on Debian 11), SUSE SLES15 SP4/...

7.8CVSS6.5AI score0.00168EPSS
SaveExploits0References4Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2025/09/18 12:00 a.m.•14 views

Apple macOS Audio APAC Frame Decoding Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the decoding of audio...

7.8CVSS7.1AI score0.0052EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/09/17 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2023-53321

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211hwsim: drop short frames While technically some control frames like ACK are shorter and end after Address 1, such frames shouldn't be forwarded...

7.1CVSS6.3AI score0.00152EPSS
SaveExploits0References3
Rows per page
Query Builder