Lucene search
+L

7521 matches found

NVD
NVD
added 2026/08/22 4:16 p.m.10 views

CVE-2026-74729

In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: lpc-snoop: Fix usercopy overflow in snoopfileread putfifowithdiscard acts as both producer and consumer on the kfifo: it calls kfifoskip advances out and kfifoput advances in from the IRQ handler without synchronizin...

0.00198EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/22 4:16 p.m.8 views

CVE-2026-74641

In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset sndus428ctlsvmfault turns the faulting page offset into a kernel address with no bound of any kind: offset = vmf-pgoff us428ctlssharedmem + offset; page = virttopagevaddr; getpagepag...

0.00215EPSS
SaveExploits0References8
CVE
CVE
added 2026/08/22 3:33 p.m.20 views

CVE-2026-74729

CVE-2026-74729 is a usercopy overflow in the Linux kernel's soc: aspeed: lpc-snoop driver. The root cause is a race condition on SMP systems: put_fifo_with_discard() in the IRQ handler and snoop_file_read() concurrently access the same kfifo without synchronization, which can leave the internal (...

5.6AI score0.00198EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/22 3:33 p.m.10 views

EUVD-2026-64416

In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: lpc-snoop: Fix usercopy overflow in snoopfileread putfifowithdiscard acts as both producer and consumer on the kfifo: it calls kfifoskip advances out and kfifoput advances in from the IRQ handler without synchronizin...

5.6AI score0.00198EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/22 3:32 p.m.11 views

CVE-2026-74641

CVE-2026-74641 is a kernel memory corruption vulnerability in the Linux kernel ALSA usx2y driver . The function snd_us428ctls_vm_fault() converts a faulting page offset into a kernel address with no bounds check , while the shared memory region is only a single page. Because file_mmap_size_max() ...

5.5AI score0.00215EPSS
SaveExploits0References8
OSV
OSV
added 2026/08/22 3:32 p.m.5 views

CVE-2026-74641 ALSA: usx2y: bound the hwdep mmap fault offset

In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset sndus428ctlsvmfault turns the faulting page offset into a kernel address with no bound of any kind: offset = vmf-pgoff us428ctlssharedmem + offset; page = virttopagevaddr; getpagepag...

5.7AI score
SaveExploits0References11
EUVD
EUVD
added 2026/08/22 3:32 p.m.7 views

EUVD-2026-64578

In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset sndus428ctlsvmfault turns the faulting page offset into a kernel address with no bound of any kind: offset = vmf-pgoff us428ctlssharedmem + offset; page = virttopagevaddr; getpagepag...

5.5AI score0.00215EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/08/22 3:32 p.m.21 views

CVE-2026-74641 ALSA: usx2y: bound the hwdep mmap fault offset

In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset sndus428ctlsvmfault turns the faulting page offset into a kernel address with no bound of any kind: offset = vmf-pgoff us428ctlssharedmem + offset; page = virttopagevaddr; getpagepag...

0.00215EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/08/22 2:28 p.m.8 views

EUVD-2026-64332

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: zero shared page before exposing to userspace bnxtreallocucontext allocates uctx-shpg via getfreepageGFPKERNEL. The buddy allocator does not zero pages without GFPZERO, so the page contains stale kernel data from...

5.5AI score0.0022EPSS
SaveExploits0References8
CVE
CVE
added 2026/08/22 2:28 p.m.28 views

CVE-2026-74584

CVE-2026-74584 is a kernel memory disclosure in the Linux kernel's bnxt_re RDMA driver . The function bnxt_re_alloc_ucontext() allocates a shared page using __get_free_page(GFP_KERNEL), which does not zero the page. This page is subsequently mapped into userspace via vm_insert_page(), but only 4 ...

5.5AI score0.0022EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.12 views

PT-2026-79646

In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset snd us428ctls vm fault turns the faulting page offset into a kernel address with no bound of any kind: offset = vmf-pgoff us428ctls sharedmem + offset; page = virt to pagevaddr; get...

5.4AI score0.00215EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.11 views

PT-2026-79734

In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop file read put fifo with discard acts as both producer and consumer on the kfifo: it calls kfifo skip advances out and kfifo put advances in from the IRQ handler without...

5.5AI score0.00198EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/21 6:16 p.m.10 views

CVE-2026-77237

Missing queue-set type validation in xQueueAddToSet in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSEQUEUESETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later...

8.2CVSS0.00121EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/21 5:52 p.m.14 views

CVE-2026-77237

FreeRTOS-Kernel before version 11.3.1 contains a missing queue-set type validation in the xQueueAddToSet() function. On MPU-enabled ports with configUSE_QUEUE_SETS=1 , an unprivileged task can exploit this to read privileged kernel memory , crossing the memory protection boundary. The CVSS 3.1 sc...

8.2CVSS5.4AI score0.00121EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/08/21 7:46 a.m.5 views

CVE-2026-74496

A flaw was found in the Linux kernel's Foo Over UDP FOU tunnel driver. An ordering issue in the foucreate function can lead to a use-after-free vulnerability. This occurs when a struct fou object is published before being fully added to the system's list. If the addition fails, the object can be...

7.8CVSS5.6AI score0.0012EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/21 12:31 a.m.10 views

EUVD-2026-63754

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption due to insufficient validation. A crafted filesystem image can trigger an out-of-bounds kernel-stack write during directory reads, causing a system crash or potentially enabling privilege...

6.7CVSS5.4AI score0.0016EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/21 12:31 a.m.9 views

EUVD-2026-63702

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to disclose sensitive kernel memory due to an out-of-bounds read...

5.5CVSS5.2AI score0.00144EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/20 10:17 p.m.9 views

CVE-2026-19783

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption due to insufficient validation. A crafted filesystem image can trigger an out-of-bounds kernel-stack write during directory reads, causing a system crash or potentially enabling privilege...

6.7CVSS0.0016EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/20 10:17 p.m.10 views

CVE-2026-16973

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to disclose sensitive kernel memory due to an out-of-bounds read...

5.5CVSS0.00144EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/20 10:04 p.m.14 views

CVE-2026-19783

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 have a kernel memory corruption flaw: insufficient validation during directory reads of a crafted filesystem image causes an out-of-bounds kernel-stack write, risking system crash or privilege escalation. IBM PSIRT reference: https://www.ibm.com/support/pages/...

6.7CVSS5.4AI score0.0016EPSS
SaveExploits0References1
Rows per page
Query Builder