Lucene search
+L

557 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/03 12:00 a.m.•2 views

CVE-2026-80726: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's...

9.3CVSS6.6AI score0.0019EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/03 12:00 a.m.•21 views

PT-2026-84924

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's...

6.7AI score0.0019EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2026/09/03 12:00 a.m.•7 views

The vulnerability of the Translation Lookaside Buffer (TLB) of the Memory Management Unit (MMU) in ARM microprogramming processor software allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Translation Lookaside Buffer TLB of the Memory Management Unit MMU in ARM microprogramming processor systems is related to errors in the representation of certain functions. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integrit...

9.4CVSS6.5AI score0.00544EPSS
SaveExploits0References9Affected Software5
RedhatCVE
RedhatCVE
•added 2026/08/27 3:02 p.m.•20 views

CVE-2026-80560

A flaw was found in the Linux kernel, specifically within the openrisc architecture's signal handling. An unprivileged local attacker can exploit a vulnerability in the restoresigcontext function by crafting a malicious signal frame. This allows the attacker to disable the Data Memory Management...

7.8CVSS5.5AI score0.00176EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/08/27 6:31 a.m.•10 views

EUVD-2026-66475

In the Linux kernel, the following vulnerability has been resolved: openrisc: signal: do not restore privileged SR bits on sigreturn restoresigcontext copies the whole supervision register SR from the signal frame and only clears SPRSRSM before the value is reloaded into the hardware SR through E...

7.8CVSS5.6AI score0.00176EPSS
SaveExploits0References9
OSV
OSV
•added 2026/08/26 3:17 p.m.•15 views

AZL-97788 CVE-2026-80560 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: openrisc: signal: do not restore privileged SR bits on sigreturn restoresigcontext copies the whole supervision register SR from the signal frame and only clears SPRSRSM before the value is reloaded into the hardware SR through E...

7.8CVSS5.9AI score0.00176EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/26 3:17 p.m.•16 views

CVE-2026-80560

In the Linux kernel, the following vulnerability has been resolved: openrisc: signal: do not restore privileged SR bits on sigreturn restoresigcontext copies the whole supervision register SR from the signal frame and only clears SPRSRSM before the value is reloaded into the hardware SR through E...

7.8CVSS0.00176EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
•added 2026/08/26 3:17 p.m.•13 views

CVE-2026-80560

In the Linux kernel, the following vulnerability has been resolved: openrisc: signal: do not restore privileged SR bits on sigreturn restoresigcontext copies the whole supervision register SR from the signal frame and only clears SPRSRSM before the value is reloaded into the hardware SR through E...

7.8CVSS6AI score0.00176EPSS
SaveExploits0References9
CVE
CVE
•added 2026/08/26 2:37 p.m.•45 views

CVE-2026-80560

This Linux kernel vulnerability affects the OpenRISC (or1k) architecture signal handling path. The function restore_sigcontext() copies the entire supervision register (SR) from a user-controlled signal frame and only clears the SPR_SR_SM bit before reloading it into hardware. All other privilege...

7.8CVSS5.6AI score0.00176EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2026/08/26 2:37 p.m.•41 views

CVE-2026-80560 openrisc: signal: do not restore privileged SR bits on sigreturn

In the Linux kernel, the following vulnerability has been resolved: openrisc: signal: do not restore privileged SR bits on sigreturn restoresigcontext copies the whole supervision register SR from the signal frame and only clears SPRSRSM before the value is reloaded into the hardware SR through E...

7.8CVSS0.00176EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2026/08/26 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-80560

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openrisc: signal: do not restore privileged SR bits on sigreturn restoresigcontext copies the whole supervision register SR from the signal frame and only clea...

7.8CVSS5.9AI score0.00176EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/26 12:00 a.m.•22 views

PT-2026-82176

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the restore sigcontext function where the supervision register SR is copied from the signal frame without properly clearing privileged bits before returning to user...

7.8CVSS6AI score0.00176EPSS
SaveExploits0References11
RedhatCVE
RedhatCVE
•added 2026/08/19 5:04 a.m.•15 views

CVE-2026-72173

A flaw was found in the Linux kernel's memory management unit MMU. The pagemappmdrangethp function incorrectly issued a warning when encountering certain non-present Page Middle Directory PMD entries. This issue arose because an assertion related to migration-only softleaf entries became outdated...

5.5CVSS6.2AI score0.00198EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/08/18 12:00 a.m.•13 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102004)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102004 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN The shadow MMU computes GFNs for...

8.8CVSS6.2AI score0.00171EPSS
SaveExploits0References4
OSV
OSV
•added 2026/08/15 6:22 a.m.•10 views

UBUNTU-CVE-2026-72328

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix potential amdxdnaumap lifetime race amdxdnaumaprelease calls the blocking mmuintervalnotifierremove before removing the object from abo-mem.umaplist. If aie2populaterange runs concurrently, it may obtain a...

7.8CVSS6.5AI score0.00168EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/08/15 5:55 a.m.•19 views

EUVD-2026-59227

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix potential amdxdnaumap lifetime race amdxdnaumaprelease calls the blocking mmuintervalnotifierremove before removing the object from abo-mem.umaplist. If aie2populaterange runs concurrently, it may obtain a...

5.4AI score0.00168EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/08/11 11:45 p.m.•9 views

SUSE CVE-2026-68428

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Fix use-after-free on vendor module reload mmudestroycaches destroys ptelistdesccache and mmupageheadercache, but leaves both pointers unchanged. The pointers live in kvm.ko, and therefore survive when a vendor modu...

6.4CVSS6.3AI score0.00165EPSS
SaveExploits0References13
Microsoft CVE
Microsoft CVE
•added 2026/08/11 8:10 a.m.•11 views

KVM: x86/mmu: Fix use-after-free on vendor module reload

...

4.1CVSS5.9AI score0.00165EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/08/11 12:00 a.m.•18 views

The vulnerability of the Shadow MMU management mechanism for page-level shadow tables in the KVM subsystem of the Linux operating system allows a perpetrator to escalate their privileges, execute arbitrary code, or cause service interruptions.

The vulnerability of the Shadow MMU management mechanism for virtual machine tables in Linux kernel-based virtual machines is related to the dereferencing of pointers with expired lifetimes. Exploiting this vulnerability can allow an attacker to enhance their privileges, execute arbitrary code, o...

8.8CVSS7AI score0.00347EPSS
SaveExploits4References22Affected Software4
UbuntuCve
UbuntuCve
•added 2026/08/10 1:20 p.m.•12 views

CVE-2026-68428

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Fix use-after-free on vendor module reload mmudestroycaches destroys ptelistdesccache and mmupageheadercache, but leaves both pointers unchanged. The pointers live in kvm.ko, and therefore survive when a vendor modu...

6.3AI score0.00165EPSS
SaveExploits0References6
Rows per page
Query Builder