Lucene search
+L

5 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/12 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-81009

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/query: cap user size passed to copystructtouser iohandlequeryentry clamps hdr.size for the inbound copyfromuser but keeps the original user value as...

5.9AI score0.00206EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/11 8:19 p.m.•26 views

UBUNTU-CVE-2026-81009

In the Linux kernel, the following vulnerability has been resolved: iouring/query: cap user size passed to copystructtouser iohandlequeryentry clamps hdr.size for the inbound copyfromuser but keeps the original user value as usize. copystructtouser uses that usize and, when it is larger than the...

5.9AI score0.00206EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/11 7:43 p.m.•29 views

CVE-2026-81009

CVE-2026-81009 affects the Linux kernel in the io_uring/query subsystem. The function io_handle_query_entry() clamps hdr.size for the inbound copy_from_user() but retains the original user-supplied value as usize. When passed to copy_struct_to_user(), an oversized usize triggers clear_user() on t...

5.8AI score0.00206EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/09/11 7:43 p.m.•17 views

CVE-2026-81009

In the Linux kernel, the following vulnerability has been resolved: iouring/query: cap user size passed to copystructtouser iohandlequeryentry clamps hdr.size for the inbound copyfromuser but keeps the original user value as usize. copystructtouser uses that usize and, when it is larger than the...

5.9AI score0.00206EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/11 12:00 a.m.•2 views

CVE-2026-81009: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iouring/query: cap user size passed to copystructtouser iohandlequeryentry clamps hdr.size for the inbound copyfromuser but keeps the original user value as usize. copystructtouser uses that usize and, when it is larger than the...

5.8AI score0.00206EPSS
SaveExploits0References1
Rows per page
Query Builder