Lucene search
+L

11361 matches found

osv_cve
osv_cve
•added 2026/05/06 11:27 a.m.•35 views

CVE-2026-43131 drm/amd/pm: Fix null pointer dereference issue

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix null pointer dereference issue If SMU is disabled, during RAS initialization, there will be null pointer dereference issue here...

5.6AI score0.00112EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/05/06 11:27 a.m.•53 views

CVE-2026-43131 drm/amd/pm: Fix null pointer dereference issue

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix null pointer dereference issue If SMU is disabled, during RAS initialization, there will be null pointer dereference issue here...

0.00112EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/05/06 11:27 a.m.•17 views

CVE-2026-43131

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix null pointer dereference issue If SMU is disabled, during RAS initialization, there will be null pointer dereference issue here...

5.6AI score0.00112EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2026/05/06 11:27 a.m.•58 views

CVE-2025-71272

The CVE-2025-71272 entry concerns a Linux kernel resource-leak in most_register_interface(). When initialization fails before device registration, memory for the interface could be leaked. The fix initializes the device early with device_initialize(), calls put_device() on all error paths, and sw...

5.5CVSS5.6AI score0.00162EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2026/05/06 11:27 a.m.•55 views

CVE-2025-71272 most: core: fix resource leak in most_register_interface error paths

In the Linux kernel, the following vulnerability has been resolved: most: core: fix resource leak in mostregisterinterface error paths The function mostregisterinterface did not correctly release resources if it failed early before registering the device. In these cases, it returned an error code...

0.00162EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2026/05/06 7:40 a.m.•34 views

CVE-2026-43085 netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinklog: initialize nfgenmsg in NLMSGDONE terminator When batching multiple NFLOG messages inst-qlen 1, nfulnlsend appends an NLMSGDONE terminator with sizeofstruct nfgenmsg payload via nlmsgput, but never...

5.9AI score0.00129EPSS
SaveExploits0References14
Cvelist
Cvelist
•added 2026/05/06 7:40 a.m.•58 views

CVE-2026-43085 netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinklog: initialize nfgenmsg in NLMSGDONE terminator When batching multiple NFLOG messages inst-qlen 1, nfulnlsend appends an NLMSGDONE terminator with sizeofstruct nfgenmsg payload via nlmsgput, but never...

0.00129EPSS
SaveExploits0References8
CVE
CVE
•added 2026/05/06 7:40 a.m.•135 views

CVE-2026-43085

CVE-2026-43085: In the Linux kernel, nfnetlink_log did not initialize the nfgenmsg payload when emitting NLMSG_DONE terminators while batching multiple NFLOG messages, leaking four bytes of stale heap data to userspace. The issue is fixed by using nfnl_msg_put() to build the NLMSG_DONE terminator...

5.5CVSS5.9AI score0.00129EPSS
SaveExploits0References11Affected Software1
attackerkb
attackerkb
•added 2026/05/06 7:40 a.m.•15 views

CVE-2026-43085

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinklog: initialize nfgenmsg in NLMSGDONE terminator When batching multiple NFLOG messages inst-qlen 1, nfulnlsend appends an NLMSGDONE terminator with sizeofstruct nfgenmsg payload via nlmsgput, but never...

6.2AI score0.00129EPSS
SaveExploits0References6Affected Software1
SUSE CVE
SUSE CVE
•added 2026/05/06 1:40 a.m.•17 views

SUSE CVE-2026-43049

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure Presently, if the force feedback initialisation fails when probing the Logitech G920 Driving Force Racing Wheel for Xbox One, an error number wi...

5.5CVSS6.3AI score0.00152EPSS
SaveExploits0References17
SUSE CVE
SUSE CVE
•added 2026/05/06 1:40 a.m.•26 views

SUSE CVE-2026-43055

In the Linux kernel, the following vulnerability has been resolved: scsi: target: file: Use kzallocflex for aiocmd The targetcorefile doesn't initialize the aiocmd-iocb for the kiwritestream. When a write command fdexecuterwaio is executed, we may get a bogus kiwritestream value, causing unintend...

5.5CVSS6.5AI score0.00358EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/06 12:00 a.m.•27 views

Linux Kernel Security Vulnerabilities

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the macsmc driver not initializing, potentially leading to null pointer dereferencing...

5.5CVSS5.7AI score0.00121EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/06 12:00 a.m.•22 views

Linux Kernel Security Vulnerabilities

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the hid-pl driver’s failure to handle initialization errors, potentially leading to null pointer...

5.5CVSS5.4AI score0.00128EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/06 12:00 a.m.•42 views

PT-2026-37500

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the macsmc multi-function device mfd where the mutex in struct apple smc is not initialized within the apple smc probe function. This lack of initialization can lead t...

5.5CVSS5.5AI score0.00121EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2026/05/06 12:00 a.m.•25 views

PT-2026-38239

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.10 Description An insufficient environment variable denylist in the exec environment policy allows operator-supplied overrides of high-risk interpreter startup variables. Specifically, the variables VIMINIT,...

8.8CVSS5.9AI score0.00392EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/06 12:00 a.m.•6 views

CVE-2026-43131: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix null pointer dereference issue If SMU is disabled, during RAS initialization, there will be null pointer dereference issue here...

5.5CVSS5.6AI score0.00112EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/05/06 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2025-71272

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - most: core: fix resource leak in mostregisterinterface error paths The function mostregisterinterface did not correctly release resources if it failed early...

5.5CVSS5.7AI score0.00162EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/05/05 7:24 p.m.•16 views

CVE-2026-34458

Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, an INI injection vulnerability allows any standard local user to bypass configuration restrictions EditAdminOnly and ConfigPassword and inject arbitrary directives into the global...

9.3CVSS6AI score0.00251EPSS
SaveExploits1References3Affected Software1
osv_clsa
osv_clsa
•added 2026/05/05 3:08 a.m.•22 views

CLSA-2026-1777950533 openssh: Fix of CVE-2026-3497

CVE-2026-3497: fix information disclosure / DoS in GSSAPI key exchange by initialising gssbuf, recvtok, msgtok to GSSCEMPTYBUFFER and replacing non-terminating sshpktdisconnect with sshpacketdisconnect in kexgssc.c / kexgsss.c...

8.2CVSS7.1AI score0.02268EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/05 12:00 a.m.•30 views

PT-2026-61079

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the AMD GPU driver, the GART Graphics Address Remapping Table table is not zero-initialized during allocation in the amdgpu bo create kernel function. Because the GART TLB Translation...

8.8CVSS6AI score0.00127EPSS
SaveExploits0
Rows per page
Query Builder