83 matches found
CVE-2023-54239
CVE-2023-54239 concerns the Linux kernel iommufd component. Public docs describe a fixed issue where a user virtual address (uptr) could overflow when mapping pages, triggering WARN_ONs (notably from pin_user_pages) due to invalid arguments. The fix prevents creating a pages object with an uptr a...
CVE-2023-54239 iommufd: Check for uptr overflow
In the Linux kernel, the following vulnerability has been resolved: iommufd: Check for uptr overflow syzkaller found that setting up a map with a user VA that wraps past zero can trigger WARNONs, particularly from pinuserpages weirdly returning 0 due to invalid arguments. Prevent creating a pages...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an unchecked user pointer overflow that could lead to a null pointer dereference...
TencentOS Server 4: xterm (TSSA-2025:0133)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0133 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
FreeBSD : SQLite -- CWE-190 Integer Overflow or Wraparound (c5889223-b4e1-11f0-ae9b-b42e991fc52e)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the c5889223-b4e1-11f0-ae9b-b42e991fc52e advisory. https://github.com/google/security-research/security/advisories/GHSA-v2c8-vqqp-hv3g reports: An integer...
EUVD-2006-1902
Malware in sbrugna...
EUVD-2023-44930
Malicious code in bioql PyPI...
EUVD-2025-22637
Malicious code in bioql PyPI...
SUSE CVE-2023-53327
In the Linux kernel, the following vulnerability has been resolved: iommufd/selftest: Catch overflow of uptr and length syzkaller hits a WARNON when trying to have a uptr close to UINTPTRMAX: WARNING: CPU: 1 PID: 393 at drivers/iommu/iommufd/selftest.c:403 iommufdtest+0xb19/0x16f0 Modules linked...
CVE-2023-53327
In the Linux kernel, the following vulnerability has been resolved: iommufd/selftest: Catch overflow of uptr and length syzkaller hits a WARNON when trying to have a uptr close to UINTPTRMAX: WARNING: CPU: 1 PID: 393 at drivers/iommu/iommufd/selftest.c:403 iommufdtest+0xb19/0x16f0 Modules linked...
UBUNTU-CVE-2023-53327
In the Linux kernel, the following vulnerability has been resolved: iommufd/selftest: Catch overflow of uptr and length syzkaller hits a WARNON when trying to have a uptr close to UINTPTRMAX: WARNING: CPU: 1 PID: 393 at drivers/iommu/iommufd/selftest.c:403 iommufdtest+0xb19/0x16f0 Modules linked...
CVE-2023-53327
CVE-2023-53327 concerns a Linux kernel iommufd selftest issue where an overflow of uptr and length near UINTPTR_MAX could trigger a WARN_ON in drivers/iommu/iommufd/selftest.c. The vulnerability is described as resolved, with the notable consequence being user memory range checks that must not ov...
SUSE CVE-2025-38366
In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Check validity of "numcpu" from user space The maximum supported cpu number is EIOINTCROUTEMAXVCPUS about irqchip EIOINTC, here add validation about cpu number to avoid array pointer overflow...
The vulnerability of the RGXFWIF_HWPERF_CTL_BLK() function in the Driver Development Kit (DDK) allows a hacker to execute arbitrary code.
The vulnerability of the RGXFWIFHWPERFCTLBLK function in the Driver Development Kit DDK is related to a pointer overflow that occurs beyond the allocated memory range. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
CVE-2025-38366
In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Check validity of "numcpu" from user space The maximum supported cpu number is EIOINTCROUTEMAXVCPUS about irqchip EIOINTC, here add validation about cpu number to avoid array pointer overflow...
CVE-2025-38366 LoongArch: KVM: Check validity of "num_cpu" from user space
In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Check validity of "numcpu" from user space The maximum supported cpu number is EIOINTCROUTEMAXVCPUS about irqchip EIOINTC, here add validation about cpu number to avoid array pointer overflow...
CVE-2025-38366 LoongArch: KVM: Check validity of "num_cpu" from user space
In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Check validity of "numcpu" from user space The maximum supported cpu number is EIOINTCROUTEMAXVCPUS about irqchip EIOINTC, here add validation about cpu number to avoid array pointer overflow...
PT-2025-30766 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue in the KVM component related to the validation of the num cpu value received from user space for LoongArch architecture. Insufficient validation of t...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : editorconfig-core-c (SUSE-SU-2024:4152-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4152-1 advisory. - CVE-2024-53849: stack buffer overflow and pointer overflow when handling escaped characters. bsc1233815...
openSUSE Security Advisory (SUSE-SU-2024:4152-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...