Lucene search
+L

277 matches found

Positive Technologies
Positive Technologies
added 2024/01/29 12:0 a.m.10 views

PT-2024-26795

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns preventing nullptr exceptions on ISR in the Linux kernel. Specifically, it involves checking for a valid interrupt handler when phydev-irq is set unconditionally, or...

7.5CVSS5.5AI score0.00211EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/12/09 12:0 a.m.9 views

PT-2024-14634

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises from the rkisp1 isp stop and rkisp1 csi disable functions in the Linux kernel, where the driver masks interrupts and then proceeds with the stop procedure, assuming the...

4.7CVSS6.1AI score0.00173EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.14 views

The vulnerability of the IRQ Handler component in the Xen hypervisor allows a hacker to disclose protected information.

The vulnerability of the IRQ Handler component in the Xen hypervisor is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that should be protected...

5.1CVSS5.7AI score0.0025EPSS
SaveExploits0References5Affected Software10
Positive Technologies
Positive Technologies
added 2022/11/14 12:0 a.m.8 views

PT-2022-21899 · Insyde · Insydeh2O Uefi Firmware

Name of the Vulnerable Software and Affected Versions: InsydeH2O UEFI firmware kernel versions prior to 5.2: 05.27.25 InsydeH2O UEFI firmware kernel versions prior to 5.3: 05.36.25 InsydeH2O UEFI firmware kernel versions prior to 5.4: 05.44.25 Description: DMA transactions targeted at input buffe...

6.4CVSS6.4AI score0.00152EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/09/28 12:0 a.m.12 views

Insyde InsydeH2O 输入验证错误漏洞

Insyde InsydeH2O is a C-language source from Insyde Corporation of Taiwan, which implements the new technology "EFI/UEFI" specification designed to replace the traditional BIOS Basic Input/Output System. A security vulnerability exists in the Insyde InsydeH2O kernel versions 5.0 to 5.5, which ste...

8.2CVSS7.8AI score0.0032EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2022/05/10 8:0 p.m.6 views

CVE-2021-39298

A potential vulnerability in AMD System Management Mode SMM interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware...

8.8CVSS7.7AI score0.00445EPSS
SaveExploits0References5
OSV
OSV
added 2022/02/16 5:15 p.m.3 views

CVE-2021-39298

A potential vulnerability in AMD System Management Mode SMM interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware...

8.8CVSS6.2AI score0.00445EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/02/02 12:0 a.m.10 views

Insyde InsydeH2O 缓冲区错误漏洞

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System. The vulnerability can be exploited to read or write or manipulate data to SMRAM, resulting in an escalation...

8.2CVSS5.6AI score0.00281EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2021/05/21 12:0 a.m.10 views

PT-2024-11216 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.19.177-gdba4159c14ef-dirty 45 Description: The vulnerability is related to the use of 'request firmware nowait' instead of 'request firmware' in the 'rp2 probe' function. This can cause a NULL pointer...

7.8CVSS6.9AI score0.08555EPSS
SaveExploits6References1085
Positive Technologies
Positive Technologies
added 2021/04/26 12:0 a.m.15 views

PT-2021-8254 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a deadlock in the Linux kernel, specifically in the cdnsp thread irq handler function. The root cause is the use of spin lock and spin unlock instructions inste...

5.5CVSS6.5AI score0.00147EPSS
SaveExploits0References12
CNVD
CNVD
added 2020/05/11 12:0 a.m.8 views

Linux kernel denial of service vulnerability (CNVD-2020-28264)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the drivers/spi/spi-dw.c file in Linux kernel versions prior to 5.4.17. An attacker can exploit this vulnerability to cause a denial...

5.5CVSS6.1AI score0.00652EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2019/06/27 12:0 a.m.7 views

The vulnerability of the Linux operating system’s interrupt handler snd_cs5535audio_interrupt allows a hacker to trigger a service failure.

The vulnerability of the interrupt handler sndcs5535audiointerrupt in the Linux kernel’s sound/pci/cs5535audio/snd-cs5535audio.ko module arises due to the swapping of the null pointer. Exploiting this vulnerability could allow an attacker to cause a system failure by connecting a CS5535 Audio...

5.1CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/06/27 12:0 a.m.19 views

The vulnerability of the Linux operating system’s interrupt handler `snd_korg1212_interrupt` allows a hacker to cause a service failure.

The vulnerability of the interrupt handler sndkorg1212interrupt in the Linux kernel’s sound/pci/korg1212/snd-korg1212.ko module is related to the swapping of the zero pointer. Exploiting this vulnerability could allow an attacker to cause a system failure when a Korg 1212 device is connected. Thi...

6.2CVSS5.5AI score
SaveExploits0Affected Software1
OSV
OSV
added 2018/01/10 10:29 p.m.12 views

CVE-2018-0004

A sustained sequence of different types of normal transit traffic can trigger a high CPU consumption denial of service condition in the Junos OS register and schedule software interrupt handler subsystem when a specific command is issued to the device. This affects one or more threads and...

6.5CVSS5.8AI score0.01246EPSS
SaveExploits0References2
CNVD
CNVD
added 2017/06/29 12:0 a.m.9 views

Linux kernel sound/isa/msnd/msnd_pinnacle.c/snd_msnd_interrupt function local denial of service vulnerability

Linux Kernel is an open source operating system. A security vulnerability in the Linux Kernel sound/isa/msnd/msndpinnacle.c/sndmsndinterrupt function allows a local attacker to exploit the vulnerability by submitting a submit special request to crash the system...

7.8CVSS6.4AI score0.00378EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/06/28 12:0 a.m.7 views

Linux kernel 'sound/oss/msnd_pinnacle.c/intr' denial of service vulnerability

Linux Kernel is an open source operating system. A security vulnerability exists in the Linux Kernel sound/oss/msndpinnacle.c/intr function, which can be exploited by a local attacker to submit a special request and crash the system...

7.8CVSS6.4AI score0.00362EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2013/11/28 12:0 a.m.36 views

CVE-2013-5065 Microsoft NDProxy.sys Privilege Escalation

NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013. Recent assessments: wchen-r7 at September 12, 2019 6:07pm UTC reported: Xp recently broke a local kernel...

7.8CVSS6.2AI score0.34893EPSS
SaveIn wildExploits16References6
Rows per page
Query Builder