Lucene search
+L

1828 matches found

OSV
OSV
•added 2026/05/07 8:38 a.m.•26 views

BIT-APACHE-2026-29168 Apache HTTP Server: mod_md unrestricted OCSP response

Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's modmd via OCSP response data. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue...

7.3CVSS7.3AI score0.01068EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/05/07 2:17 a.m.•23 views

SUSE CVE-2026-43163

In the Linux kernel, the following vulnerability has been resolved: md/bitmap: fix GPF in writepage caused by resize race A General Protection Fault occurs in writepage during array resize: RIP: 0010:writepage+0x22b/0x3c0 mdmod This is a use-after-free race between bitmapdaemonwork and...

5.5CVSS6.2AI score0.00091EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2026/05/07 2:16 a.m.•22 views

SUSE CVE-2026-43271

In the Linux kernel, the following vulnerability has been resolved: md-cluster: fix NULL pointer dereference in processmetadataupdate The function processmetadataupdate blindly dereferences the 'thread' pointer acquired via rcudereferenceprotected within the waitevent macro. While the code commen...

5.3CVSS5.7AI score0.00116EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2026/05/07 12:00 a.m.•3 views

PT-2026-41597

Summary The public RSS/Atom feed at /rss renders two attacker-controlled surfaces without HTML escaping. Tag names flow through fmt.AppendfrenderedContent, "%s", tag.Name at internal/service/common/common.go:120, and the Markdown renderer at internal/util/md/md.go does not set the html.SkipHTML...

4.8CVSS6AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/05/07 12:00 a.m.•31 views

PT-2026-38462

Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's mod md via OCSP response data. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue...

7.3CVSS7.3AI score0.01068EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/05/06 12:30 p.m.•30 views

EUVD-2026-27666

In the Linux kernel, the following vulnerability has been resolved: md-cluster: fix NULL pointer dereference in processmetadataupdate The function processmetadataupdate blindly dereferences the 'thread' pointer acquired via rcudereferenceprotected within the waitevent macro. While the code commen...

5.7AI score0.00116EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/05/06 12:30 p.m.•17 views

EUVD-2026-27726

In the Linux kernel, the following vulnerability has been resolved: md/bitmap: fix GPF in writepage caused by resize race A General Protection Fault occurs in writepage during array resize: RIP: 0010:writepage+0x22b/0x3c0 mdmod This is a use-after-free race between bitmapdaemonwork and...

6.2AI score0.00091EPSS
SaveExploits0References9
NVD
NVD
•added 2026/05/06 12:16 p.m.•38 views

CVE-2026-43271

In the Linux kernel, the following vulnerability has been resolved: md-cluster: fix NULL pointer dereference in processmetadataupdate The function processmetadataupdate blindly dereferences the 'thread' pointer acquired via rcudereferenceprotected within the waitevent macro. While the code commen...

5.5CVSS0.00116EPSS
SaveExploits0References5
NVD
NVD
•added 2026/05/06 12:16 p.m.•15 views

CVE-2026-43163

In the Linux kernel, the following vulnerability has been resolved: md/bitmap: fix GPF in writepage caused by resize race A General Protection Fault occurs in writepage during array resize: RIP: 0010:writepage+0x22b/0x3c0 mdmod This is a use-after-free race between bitmapdaemonwork and...

4.7CVSS0.00091EPSS
SaveExploits0References8
CVE
CVE
•added 2026/05/06 11:28 a.m.•50 views

CVE-2026-43271

CVE-2026-43271 involves the Linux kernel md-cluster module where a race during MD array startup can cause a NULL pointer dereference in process_metadata_update when a METADATA_UPDATED message arrives before mddev->thread is initialized. The root cause is the code path that dereferences the thr...

5.5CVSS5.7AI score0.00116EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2026/05/06 11:28 a.m.•55 views

CVE-2026-43271 md-cluster: fix NULL pointer dereference in process_metadata_update

In the Linux kernel, the following vulnerability has been resolved: md-cluster: fix NULL pointer dereference in processmetadataupdate The function processmetadataupdate blindly dereferences the 'thread' pointer acquired via rcudereferenceprotected within the waitevent macro. While the code commen...

0.00116EPSS
SaveExploits0References5
OSV
OSV
•added 2026/05/06 11:28 a.m.•29 views

CVE-2026-43271 md-cluster: fix NULL pointer dereference in process_metadata_update

In the Linux kernel, the following vulnerability has been resolved: md-cluster: fix NULL pointer dereference in processmetadataupdate The function processmetadataupdate blindly dereferences the 'thread' pointer acquired via rcudereferenceprotected within the waitevent macro. While the code commen...

5.8AI score
SaveExploits0References8
Debian CVE
Debian CVE
•added 2026/05/06 11:28 a.m.•27 views

CVE-2026-43271

In the Linux kernel, the following vulnerability has been resolved: md-cluster: fix NULL pointer dereference in processmetadataupdate The function processmetadataupdate blindly dereferences the 'thread' pointer acquired via rcudereferenceprotected within the waitevent macro. While the code commen...

5.5CVSS5.7AI score0.00116EPSS
SaveExploits0
CVE
CVE
•added 2026/05/06 11:27 a.m.•100 views

CVE-2026-43163

Impact: Linux kernel md/bitmap component vulnerable to a use-after-free race during array resize, causing a General Protection Fault in write_page. Root cause: concurrent access to bitmap->storage.filemap between bitmap_daemon_work() and __bitmap_resize(), with md_bitmap_file_unmap() freeing s...

4.7CVSS6.2AI score0.00091EPSS
SaveExploits0References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/06 12:00 a.m.•4 views

CVE-2026-43271: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: md-cluster: fix NULL pointer dereference in processmetadataupdate The function processmetadataupdate blindly dereferences the 'thread' pointer acquired via rcudereferenceprotected within the waitevent macro. While the code commen...

5.5CVSS5.7AI score0.00116EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/05/06 12:00 a.m.•22 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the processmetadataupdate function in the md-cluster module. This function derefreshes a null...

5.5CVSS5.8AI score0.00116EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/06 12:00 a.m.•31 views

PT-2026-37611

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the process metadata update function. During the MD array startup sequence md run, a race condition occurs where the cluster recv thread is active an...

5.5CVSS5.8AI score0.00116EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/06 12:00 a.m.•3 views

CVE-2026-43163: Concurrent Execution using Shared Resource with Improper Synchronization

In the Linux kernel, the following vulnerability has been resolved: md/bitmap: fix GPF in writepage caused by resize race A General Protection Fault occurs in writepage during array resize: RIP: 0010:writepage+0x22b/0x3c0 mdmod This is a use-after-free race between bitmapdaemonwork and...

4.7CVSS6.2AI score0.00091EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2026/05/06 12:00 a.m.•17 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the reuse of freed memory during the resize operation in the md/bitmap functions. This could...

4.7CVSS5.8AI score0.00091EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/05/06 12:00 a.m.•21 views

Linux Distros Unpatched Vulnerability : CVE-2026-43271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md-cluster: fix NULL pointer dereference in processmetadataupdate The function processmetadataupdate blindly dereferences the 'thread' pointer acquired via...

5.5CVSS5.8AI score0.00116EPSS
SaveExploits0References4
Rows per page
Query Builder