Lucene search
+L

8032 matches found

OSV
OSV
added 2025/05/20 3:21 p.m.9 views

CVE-2025-37910 ptp: ocp: Fix NULL dereference in Adva board SMA sysfs operations

In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix NULL dereference in Adva board SMA sysfs operations On Adva boards, SMA sysfs store/get operations can call handlesignaloutputs or handlesignalinputs while the irig and dcf pointers are uninitialized, leading to a...

6.8AI score
SaveExploits0References6
CVE
CVE
added 2025/05/20 3:21 p.m.106 views

CVE-2025-37908

The CVE-2025-37908 issue affects the Linux kernel’s memory allocator slab subsystem. Root cause: slab->obj_exts was not reliably cleared during unaccount_slab() when mem_alloc_profiling_enabled() is false, allowing residual allocations to persist after shutdown_mem_profiling(). This can trigge...

7.8CVSS6.5AI score0.00172EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2025/05/20 3:21 p.m.12 views

CVE-2025-37909

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Fix memleak issue when GSO enabled Always map the skb to the LS descriptor. Previously skb was mapped to EXT descriptor when the number of fragments is zero with GSO enabled. Mapping the skb to EXT descriptor preven...

5.5CVSS5.7AI score0.00174EPSS
SaveExploits0
OSV
OSV
added 2025/05/20 3:21 p.m.11 views

CVE-2025-37908 mm, slab: clean up slab->obj_exts always

In the Linux kernel, the following vulnerability has been resolved: mm, slab: clean up slab-objexts always When memory allocation profiling is disabled at runtime or due to an error, shutdownmemprofiling is called: slab-objexts which previously allocated remains. It won't be cleared by...

7.8CVSS6.5AI score
SaveExploits0References6
Debian CVE
Debian CVE
added 2025/05/20 3:21 p.m.7 views

CVE-2025-37905

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Balance device refcount when destroying devices Using devicefindchild to lookup the proper SCMI device to destroy causes an unbalance in device refcount, since devicefindchild calls an implicit getdevice: this,...

5.5CVSS5.6AI score0.00168EPSS
SaveExploits0
Cvelist
Cvelist
added 2025/05/20 3:21 p.m.37 views

CVE-2025-37903 drm/amd/display: Fix slab-use-after-free in hdcp

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix slab-use-after-free in hdcp The HDCP code in amdgpudmhdcp.c copies pointers to amdgpudmconnector objects without incrementing the kref reference counts. When using a USB-C dock, and the dock is unplugged, the...

7.8CVSS0.0017EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2025/05/20 3:21 p.m.7 views

CVE-2025-37902

Removed by vendor...

7.7AI score
SaveExploits0
Debian CVE
Debian CVE
added 2025/05/20 3:21 p.m.8 views

CVE-2025-37898

In the Linux kernel, the following vulnerability has been resolved: powerpc64/ftrace: fix module loading without patchable function entries getstubssize assumes that there must always be at least one patchable function entry, which is not always the case modules that export data but no code,...

5.5CVSS5.7AI score0.0014EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2025/05/20 3:21 p.m.7 views

CVE-2025-37894

In the Linux kernel, the following vulnerability has been resolved: net: use sockgenput when skstate is TCPTIMEWAIT It is possible for a pointer of type struct inettimewaitsock to be returned from the functions inetlookupestablished and inet6lookupestablished. This can cause a crash when the...

9.8CVSS5.6AI score0.00398EPSS
SaveExploits0
NVD
NVD
added 2025/05/20 11:15 a.m.20 views

CVE-2025-37892

In the Linux kernel, the following vulnerability has been resolved: mtd: inftlcore: Add error check for inftlreadoob In INFTLfindwriteunit, the return value of inftlreadoob need to be checked. A proper implementation can be found in INFTLdeleteblock. The status will be set as SECTORIGNORE to brea...

7.8CVSS0.00171EPSS
SaveExploits0References10
OSV
OSV
added 2025/05/20 11:0 a.m.10 views

CVE-2025-37892 mtd: inftlcore: Add error check for inftl_read_oob()

In the Linux kernel, the following vulnerability has been resolved: mtd: inftlcore: Add error check for inftlreadoob In INFTLfindwriteunit, the return value of inftlreadoob need to be checked. A proper implementation can be found in INFTLdeleteblock. The status will be set as SECTORIGNORE to brea...

6.1AI score
SaveExploits0References13
Cvelist
Cvelist
added 2025/05/20 11:0 a.m.36 views

CVE-2025-37892 mtd: inftlcore: Add error check for inftl_read_oob()

In the Linux kernel, the following vulnerability has been resolved: mtd: inftlcore: Add error check for inftlreadoob In INFTLfindwriteunit, the return value of inftlreadoob need to be checked. A proper implementation can be found in INFTLdeleteblock. The status will be set as SECTORIGNORE to brea...

0.00171EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2025/05/20 12:0 a.m.13 views

PT-2025-22211

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A panic in the Linux kernel's ocfs2 module can occur due to a failed folio allocation. This issue arises when the folio array free code encounters an error value -ENOMEM instead of a val...

7.8CVSS7.5AI score0.11039EPSS
SaveExploits5References318
Rosalinux
Rosalinux
added 2025/05/19 5:10 p.m.76 views

Advisory ROSA-SA-2025-2862

Software: kernel 4.18.0 OS: ROSA Virtualization 3.0 packageevrstring: kernel-4.18.0-553.40.1.el810 CVE-ID: CVE-2023-52864 BDU-ID: 2024-10416 CVE-Crit: MEDIUM. CVE-DESC.: A vulnerability in the wmicharopen function of the Linux operating system kernel is related to the driver not binding to a devi...

7.8CVSS10AI score0.28058EPSS
SaveExploits16
OpenVAS
OpenVAS
added 2025/05/19 12:0 a.m.6 views

Huawei EulerOS: Security Advisory for python-dns (EulerOS-SA-2025-1495)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7CVSS7.1AI score0.01857EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2025/05/19 12:0 a.m.5 views

Huawei EulerOS: Security Advisory for python-dns (EulerOS-SA-2025-1207)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7CVSS7.2AI score0.01857EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/05/19 12:0 a.m.8 views

PT-2025-22058 · Unknown · Bslthemes Tastyc

Name of the Vulnerable Software and Affected Versions: bslthemes Tastyc versions prior to 2.5.2 Description: The issue is related to a Path Traversal vulnerability, specifically a '.../...//' vulnerability, which allows PHP Local File Inclusion in bslthemes Tastyc. Recommendations: For versions...

8.1CVSS8.5AI score0.00615EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/05/19 12:0 a.m.8 views

Oracle Linux 8 : grafana (ELSA-2025-7894)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7894 advisory. 9.2.10-23 - Resolves RHEL-89949: CVE-2025-4123 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

7.6CVSS7.8AI score0.98258EPSS
SaveExploits6References2
OpenVAS
OpenVAS
added 2025/05/19 12:0 a.m.4 views

Huawei EulerOS: Security Advisory for python-dns (EulerOS-SA-2025-1218)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7CVSS7.2AI score0.01857EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/05/17 12:18 a.m.28 views

CVE-2025-48027

The HttpAuth plugin in pGina.Fork through 3.9.9.12 allows authentication bypass when an adversary controls DNS resolution for pginaloginserver...

5.4CVSS7.3AI score0.00284EPSS
SaveExploits2References1
Rows per page
Query Builder