Lucene search
+L

4297 matches found

osv_ubuntu
osv_ubuntu
•added 2025/12/06 10:15 p.m.•23 views

UBUNTU-CVE-2025-40277

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGACMDMAXDATASIZE This data originates from userspace and is used in buffer offset calculations which could potentially overflow causing an out-of-bounds access...

8.5CVSS6.7AI score0.00237EPSS
SaveExploits0References36
Microsoft CVE
Microsoft CVE
•added 2025/12/06 9:03 a.m.•18 views

KVM: arm64: Check the untrusted offset in FF-A memory share

...

8.2CVSS6.7AI score0.0015EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/06 12:00 a.m.•4 views

CVE-2025-40277: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGACMDMAXDATASIZE This data originates from userspace and is used in buffer offset calculations which could potentially overflow causing an out-of-bounds access...

7.8CVSS6.4AI score0.00237EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/05 5:35 p.m.•15 views

CVE-2025-40216

No description is available for this CVE...

7CVSS5.9AI score0.00142EPSS
SaveExploits0References4
Microsoft CVE
Microsoft CVE
•added 2025/12/05 9:03 a.m.•24 views

mm/damon/vaddr: do not repeat pte_offset_map_lock() until success

...

4.1CVSS6.4AI score0.00187EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/12/05 12:26 a.m.•34 views

SUSE CVE-2025-40216

In the Linux kernel, the following vulnerability has been resolved: iouring/rsrc: don't rely on user vaddr alignment There is no guaranteed alignment for user pointers, however the calculation of an offset of the first page into a folio after coalescing uses some weird bit mask logic, get rid of ...

6.7CVSS5.8AI score0.00142EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
•added 2025/12/05 12:25 a.m.•17 views

SUSE CVE-2025-40266

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Check the untrusted offset in FF-A memory share Verify the offset to prevent OOB access in the hypervisor FF-A buffer in case an untrusted large enough value U32MAX - sizeofstruct ffacompositememregion + 1, U32MAX is...

6.6CVSS6.2AI score0.0015EPSS
SaveExploits0References7
Packet Storm News
Packet Storm News
•added 2025/12/05 12:00 a.m.•14 views

Frequency-Matching Quantum Key Distribution

Quantum key distribution QKD enables information-theoretically secure communication against eavesdropping. However, phase instability remains a challenge across many QKD applications, particularly in schemes such as twin-field QKD and measurement-device-independent QKD. The most dominant source o...

6.8AI score
SaveExploits0
osv_azl
osv_azl
•added 2025/12/04 4:16 p.m.•49 views

AZL-71422 CVE-2025-40266 affecting package kernel for versions less than 6.6.119.3-1

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Check the untrusted offset in FF-A memory share Verify the offset to prevent OOB access in the hypervisor FF-A buffer in case an untrusted large enough value U32MAX - sizeofstruct ffacompositememregion + 1, U32MAX is...

8.2CVSS6.2AI score0.0015EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/12/04 4:16 p.m.•31 views

UBUNTU-CVE-2025-40266

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Check the untrusted offset in FF-A memory share Verify the offset to prevent OOB access in the hypervisor FF-A buffer in case an untrusted large enough value U32MAX - sizeofstruct ffacompositememregion + 1, U32MAX is...

8.2CVSS6.4AI score0.0015EPSS
SaveExploits0References23
osv_cve
osv_cve
•added 2025/12/04 4:08 p.m.•17 views

CVE-2025-40266 KVM: arm64: Check the untrusted offset in FF-A memory share

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Check the untrusted offset in FF-A memory share Verify the offset to prevent OOB access in the hypervisor FF-A buffer in case an untrusted large enough value U32MAX - sizeofstruct ffacompositememregion + 1, U32MAX is...

8.2CVSS6.6AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2025/12/04 4:08 p.m.•12 views

CVE-2025-40266 KVM: arm64: Check the untrusted offset in FF-A memory share

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Check the untrusted offset in FF-A memory share Verify the offset to prevent OOB access in the hypervisor FF-A buffer in case an untrusted large enough value U32MAX - sizeofstruct ffacompositememregion + 1, U32MAX is...

6.2AI score0.0015EPSS
SaveExploits0References4
CVE
CVE
•added 2025/12/04 4:08 p.m.•70 views

CVE-2025-40266

The CVE-2025-40266 issue affects the Linux kernel KVM on arm64, where the untrusted FF-A memory share offset could lead to out-of-bounds access in the hypervisor. The connected documents confirm this vulnerability and indicate mitigation via kernel updates. Recommended action: apply the reference...

8.2CVSS6.2AI score0.0015EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/12/04 4:08 p.m.•42 views

CVE-2025-40266 KVM: arm64: Check the untrusted offset in FF-A memory share

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Check the untrusted offset in FF-A memory share Verify the offset to prevent OOB access in the hypervisor FF-A buffer in case an untrusted large enough value U32MAX - sizeofstruct ffacompositememregion + 1, U32MAX is...

8.2CVSS0.0015EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/12/04 4:08 p.m.•19 views

EUVD-2025-201191

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Check the untrusted offset in FF-A memory share Verify the offset to prevent OOB access in the hypervisor FF-A buffer in case an untrusted large enough value U32MAX - sizeofstruct ffacompositememregion + 1, U32MAX is...

6.3AI score0.0015EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/12/04 3:30 p.m.•22 views

EUVD-2025-201161

In the Linux kernel, the following vulnerability has been resolved: iouring/rsrc: don't rely on user vaddr alignment There is no guaranteed alignment for user pointers, however the calculation of an offset of the first page into a folio after coalescing uses some weird bit mask logic, get rid of ...

5.8AI score0.00142EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2025/12/04 3:15 p.m.•21 views

DEBIAN-CVE-2025-40216

In the Linux kernel, the following vulnerability has been resolved: iouring/rsrc: don't rely on user vaddr alignment There is no guaranteed alignment for user pointers, however the calculation of an offset of the first page into a folio after coalescing uses some weird bit mask logic, get rid of ...

7.8CVSS6AI score0.00142EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/12/04 3:15 p.m.•32 views

UBUNTU-CVE-2025-40218

In the Linux kernel, the following vulnerability has been resolved: mm/damon/vaddr: do not repeat pteoffsetmaplock until success DAMON's virtual address space operation set implementation vaddr calls pteoffsetmaplock inside the page table walk callback function. This is for reading and writing pa...

6.1AI score0.00187EPSS
SaveExploits0References22
EUVD
EUVD
•added 2025/12/04 2:50 p.m.•22 views

EUVD-2025-201185

In the Linux kernel, the following vulnerability has been resolved: mm/damon/vaddr: do not repeat pteoffsetmaplock until success DAMON's virtual address space operation set implementation vaddr calls pteoffsetmaplock inside the page table walk callback function. This is for reading and writing pa...

6AI score0.00187EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2025/12/04 2:14 p.m.•19 views

CVE-2025-40216 io_uring/rsrc: don't rely on user vaddr alignment

In the Linux kernel, the following vulnerability has been resolved: iouring/rsrc: don't rely on user vaddr alignment There is no guaranteed alignment for user pointers, however the calculation of an offset of the first page into a folio after coalescing uses some weird bit mask logic, get rid of ...

7.8CVSS6.3AI score
SaveExploits0References6
Rows per page
Query Builder