Lucene search
+L

7525 matches found

RedhatCVE
RedhatCVE
added 2026/08/24 3:42 p.m.2 views

CVE-2026-74641

A flaw was found in the Advanced Linux Sound Architecture ALSA usx2y driver in the Linux kernel. A local attacker, by opening the hwdep node of an attached US-X2Y device, could exploit an unbounded memory mapping mmap fault offset. This allows read-write access to arbitrary kernel memory,...

7CVSS0.00215EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/22 4:16 p.m.10 views

CVE-2026-74729

In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: lpc-snoop: Fix usercopy overflow in snoopfileread putfifowithdiscard acts as both producer and consumer on the kfifo: it calls kfifoskip advances out and kfifoput advances in from the IRQ handler without synchronizin...

0.00198EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/22 4:16 p.m.8 views

CVE-2026-74641

In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset sndus428ctlsvmfault turns the faulting page offset into a kernel address with no bound of any kind: offset = vmf-pgoff us428ctlssharedmem + offset; page = virttopagevaddr; getpagepag...

0.00215EPSS
SaveExploits0References8
CVE
CVE
added 2026/08/22 3:33 p.m.20 views

CVE-2026-74729

CVE-2026-74729 is a usercopy overflow in the Linux kernel's soc: aspeed: lpc-snoop driver. The root cause is a race condition on SMP systems: put_fifo_with_discard() in the IRQ handler and snoop_file_read() concurrently access the same kfifo without synchronization, which can leave the internal (...

5.6AI score0.00198EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/22 3:33 p.m.10 views

EUVD-2026-64416

In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: lpc-snoop: Fix usercopy overflow in snoopfileread putfifowithdiscard acts as both producer and consumer on the kfifo: it calls kfifoskip advances out and kfifoput advances in from the IRQ handler without synchronizin...

5.6AI score0.00198EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/22 3:33 p.m.6 views

CVE-2026-74729 soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read

In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: lpc-snoop: Fix usercopy overflow in snoopfileread putfifowithdiscard acts as both producer and consumer on the kfifo: it calls kfifoskip advances out and kfifoput advances in from the IRQ handler without synchronizin...

5.7AI score
SaveExploits0References5
CVE
CVE
added 2026/08/22 3:32 p.m.11 views

CVE-2026-74641

CVE-2026-74641 is a kernel memory corruption vulnerability in the Linux kernel ALSA usx2y driver . The function snd_us428ctls_vm_fault() converts a faulting page offset into a kernel address with no bounds check , while the shared memory region is only a single page. Because file_mmap_size_max() ...

5.5AI score0.00215EPSS
SaveExploits0References8
OSV
OSV
added 2026/08/22 3:32 p.m.6 views

CVE-2026-74641 ALSA: usx2y: bound the hwdep mmap fault offset

In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset sndus428ctlsvmfault turns the faulting page offset into a kernel address with no bound of any kind: offset = vmf-pgoff us428ctlssharedmem + offset; page = virttopagevaddr; getpagepag...

5.7AI score
SaveExploits0References11
EUVD
EUVD
added 2026/08/22 3:32 p.m.7 views

EUVD-2026-64578

In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset sndus428ctlsvmfault turns the faulting page offset into a kernel address with no bound of any kind: offset = vmf-pgoff us428ctlssharedmem + offset; page = virttopagevaddr; getpagepag...

5.5AI score0.00215EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/08/22 3:32 p.m.21 views

CVE-2026-74641 ALSA: usx2y: bound the hwdep mmap fault offset

In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset sndus428ctlsvmfault turns the faulting page offset into a kernel address with no bound of any kind: offset = vmf-pgoff us428ctlssharedmem + offset; page = virttopagevaddr; getpagepag...

0.00215EPSS
SaveExploits0References8
OSV
OSV
added 2026/08/22 2:28 p.m.11 views

CVE-2026-74584 RDMA/bnxt_re: zero shared page before exposing to userspace

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: zero shared page before exposing to userspace bnxtreallocucontext allocates uctx-shpg via getfreepageGFPKERNEL. The buddy allocator does not zero pages without GFPZERO, so the page contains stale kernel data from...

5.7AI score
SaveExploits0References11
EUVD
EUVD
added 2026/08/22 2:28 p.m.8 views

EUVD-2026-64332

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: zero shared page before exposing to userspace bnxtreallocucontext allocates uctx-shpg via getfreepageGFPKERNEL. The buddy allocator does not zero pages without GFPZERO, so the page contains stale kernel data from...

5.5AI score0.0022EPSS
SaveExploits0References8
CVE
CVE
added 2026/08/22 2:28 p.m.30 views

CVE-2026-74584

CVE-2026-74584 is a kernel memory disclosure in the Linux kernel's bnxt_re RDMA driver . The function bnxt_re_alloc_ucontext() allocates a shared page using __get_free_page(GFP_KERNEL), which does not zero the page. This page is subsequently mapped into userspace via vm_insert_page(), but only 4 ...

5.5AI score0.0022EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.11 views

PT-2026-79734

In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop file read put fifo with discard acts as both producer and consumer on the kfifo: it calls kfifo skip advances out and kfifo put advances in from the IRQ handler without...

5.5AI score0.00198EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.13 views

PT-2026-79646

In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset snd us428ctls vm fault turns the faulting page offset into a kernel address with no bound of any kind: offset = vmf-pgoff us428ctls sharedmem + offset; page = virt to pagevaddr; get...

5.4AI score0.00215EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-74692

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/smc: fix TOCTOU race between smclistenout and listener close smclistenout reads lsmc-sk.skstate without the listener lock, then acquires locksocknested only...

5.6AI score0.00215EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/21 6:16 p.m.11 views

CVE-2026-77237

Missing queue-set type validation in xQueueAddToSet in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSEQUEUESETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later...

8.2CVSS0.00121EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/21 5:52 p.m.15 views

CVE-2026-77237

FreeRTOS-Kernel before version 11.3.1 contains a missing queue-set type validation in the xQueueAddToSet() function. On MPU-enabled ports with configUSE_QUEUE_SETS=1 , an unprivileged task can exploit this to read privileged kernel memory , crossing the memory protection boundary. The CVSS 3.1 sc...

8.2CVSS5.4AI score0.00121EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/08/21 7:46 a.m.6 views

CVE-2026-74496

A flaw was found in the Linux kernel's Foo Over UDP FOU tunnel driver. An ordering issue in the foucreate function can lead to a use-after-free vulnerability. This occurs when a struct fou object is published before being fully added to the system's list. If the addition fails, the object can be...

7.8CVSS5.6AI score0.0012EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/21 12:31 a.m.10 views

EUVD-2026-63754

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption due to insufficient validation. A crafted filesystem image can trigger an out-of-bounds kernel-stack write during directory reads, causing a system crash or potentially enabling privilege...

6.7CVSS5.4AI score0.0016EPSS
SaveExploits0References2
Rows per page
Query Builder