Lucene search
+L

682 matches found

CNNVD
CNNVD
•added 2025/02/26 12:00 a.m.•10 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from imainitcrypto not freeing imaalgoarray when the allocation of a SHA1 tfm fails, which could lead to a memory...

5.5CVSS6AI score0.00271EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/02/26 12:00 a.m.•2 views

PT-2025-8576

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential integer overflow issue has been identified in the Linux kernel, specifically in the ima appraise measurement function when ima-modsig is enabled. This occurs because the rc...

7.1CVSS0.00278EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/26 12:00 a.m.•3 views

CVE-2022-49627: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: ima: Fix potential memory leak in imainitcrypto On failure to allocate the SHA1 tfm, IMA fails to initialize and exits without freeing the imaalgoarray. Add the missing kfree for imaalgoarray to avoid the potential memory leak...

5.5CVSS5.6AI score0.00271EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/26 12:00 a.m.•7 views

CVE-2022-49643: Integer Overflow or Wraparound

In the Linux kernel, the following vulnerability has been resolved: ima: Fix a potential integer overflow in imaappraisemeasurement When the ima-modsig is enabled, the rc passed to evmverifyxattr may be negative, which may cause the integer overflow problem...

7.1CVSS5.9AI score0.00278EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2025/02/12 12:00 a.m.•11 views

Oracle Linux 9 : kernel (ELSA-2025-1262)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1262 advisory. - 5.14.0-503.23.25.OL9 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle...

7.8CVSS7.5AI score0.03395EPSS
SaveExploits1References2
Oracle linux
Oracle linux
•added 2025/02/11 12:00 a.m.•111 views

kernel security update

5.14.0-503.23.25.OL9 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

7.8CVSS7.7AI score0.03395EPSS
SaveExploits1
SUSE Linux
SUSE Linux
•added 2025/02/03 8:51 a.m.•30 views

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-41014: xfs: add bounds checking to xlogrecoverprocessdata bsc1228408. CVE-2024-41013: xfs: do not walk off the end of a directory data block bsc1228405...

8.4CVSS5.8AI score0.02701EPSS
SaveExploits6References3622
osv_suse
osv_suse
•added 2025/02/03 8:51 a.m.•34 views

SUSE-SU-2025:20028-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-41014: xfs: add bounds checking to xlogrecoverprocessdata bsc1228408. - CVE-2024-41013: xfs: do not walk off the end of a directory data block...

10CVSS5.8AI score0.02701EPSS
SaveExploits6References1801
BDU FSTEC
BDU FSTEC
•added 2025/02/03 12:00 a.m.•14 views

Linux kernel ima DoS

The vulnerability of the ima component in the Linux operating system’s kernel is related to a memory leak. Exploiting this vulnerability can allow an attacker to cause a system failure...

5.5CVSS5.9AI score0.00271EPSS
SaveExploits0References12Affected Software9
Oracle linux
Oracle linux
•added 2025/01/22 12:00 a.m.•180 views

kernel security update

5.14.0-503.22.15.OL9 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

9.8CVSS7.1AI score0.00559EPSS
SaveExploits0
osv_debian
osv_debian
•added 2024/12/24 7:15 p.m.•5 views

DEBIAN-CVE-2022-21505

In the linux kernel, if IMA appraisal is used with the "imaappraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents setting "imaappraise=log" from the boot param when Secure Boot is enabled, but this does not cover case...

6.7CVSS6.2AI score0.00198EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/12/24 7:15 p.m.•23 views

CVE-2022-21505

In the linux kernel, if IMA appraisal is used with the "imaappraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents setting "imaappraise=log" from the boot param when Secure Boot is enabled, but this does not cover case...

6.7CVSS6.7AI score
SaveExploits0References2
NVD
NVD
•added 2024/12/24 7:15 p.m.•28 views

CVE-2022-21505

In the linux kernel, if IMA appraisal is used with the "imaappraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents setting "imaappraise=log" from the boot param when Secure Boot is enabled, but this does not cover case...

6.7CVSS0.00198EPSS
SaveExploits0References3
Mend
Mend
•added 2024/12/24 6:48 p.m.•4 views

CVE-2022-21505

In the linux kernel, if IMA appraisal is used with the "imaappraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents setting "imaappraise=log" from the boot param when Secure Boot is enabled, but this does not cover case...

8.4CVSS0.00198EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2024/12/24 6:48 p.m.•17 views

CVE-2022-21505

In the linux kernel, if IMA appraisal is used with the "imaappraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents setting "imaappraise=log" from the boot param when Secure Boot is enabled, but this does not cover case...

6.7CVSS7.2AI score0.00198EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/12/24 6:48 p.m.•40 views

CVE-2022-21505

In the linux kernel, if IMA appraisal is used with the "imaappraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents setting "imaappraise=log" from the boot param when Secure Boot is enabled, but this does not cover case...

6.7CVSS0.00198EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/24 12:00 a.m.•4 views

CVE-2022-21505: Origin Validation Error

In the linux kernel, if IMA appraisal is used with the "imaappraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents setting "imaappraise=log" from the boot param when Secure Boot is enabled, but this does not cover case...

6.7CVSS5.8AI score0.00198EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2024/12/03 12:16 a.m.•12 views

SUSE CVE-2024-53106

In the Linux kernel, the following vulnerability has been resolved: ima: fix buffer overrun in imaeventdigestinitcommon Function imaeventdigestinit calls imaeventdigestinitcommon with HASHALGOLAST which is then used to access the array hashdigestsize leading to buffer overrun. Have a conditional...

5.5CVSS7.8AI score0.00241EPSS
SaveExploits0References13
osv_debian
osv_debian
•added 2024/12/02 2:15 p.m.•8 views

DEBIAN-CVE-2024-53106

In the Linux kernel, the following vulnerability has been resolved: ima: fix buffer overrun in imaeventdigestinitcommon Function imaeventdigestinit calls imaeventdigestinitcommon with HASHALGOLAST which is then used to access the array hashdigestsize leading to buffer overrun. Have a conditional...

7.8CVSS6.2AI score0.00241EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/02 12:00 a.m.•12 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from a buffer overflow due to the use of HASHALGOLAST in the imaeventdigestinitcommon function in the ima...

7.8CVSS7.3AI score0.00241EPSS
SaveExploits0References5
Rows per page
Query Builder