Lucene search
+L

1697 matches found

NVD
NVD
•added 2025/05/01 1:15 p.m.•12 views

CVE-2025-23159

In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add a check to handle OOB in sfr region sfr-bufsize is in shared memory and can be modified by malicious user. OOB write is possible when the size is made higher than actual sfr data buffer. Cap the size to...

8.4CVSS0.00227EPSS
SaveExploits0References11
osv_debian
osv_debian
•added 2025/05/01 1:15 p.m.•9 views

DEBIAN-CVE-2025-23159

In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add a check to handle OOB in sfr region sfr-bufsize is in shared memory and can be modified by malicious user. OOB write is possible when the size is made higher than actual sfr data buffer. Cap the size to...

5.5CVSS6.3AI score0.00227EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/05/01 1:15 p.m.•22 views

UBUNTU-CVE-2025-23159

In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add a check to handle OOB in sfr region sfr-bufsize is in shared memory and can be modified by malicious user. OOB write is possible when the size is made higher than actual sfr data buffer. Cap the size to...

8.4CVSS6.3AI score0.00227EPSS
SaveExploits0References41
Cvelist
Cvelist
•added 2025/05/01 12:55 p.m.•30 views

CVE-2025-23159 media: venus: hfi: add a check to handle OOB in sfr region

In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add a check to handle OOB in sfr region sfr-bufsize is in shared memory and can be modified by malicious user. OOB write is possible when the size is made higher than actual sfr data buffer. Cap the size to...

8.4CVSS0.00227EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/01 12:00 a.m.•6 views

CVE-2025-23159: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add a check to handle OOB in sfr region sfr-bufsize is in shared memory and can be modified by malicious user. OOB write is possible when the size is made higher than actual sfr data buffer. Cap the size to...

8.4CVSS6.2AI score0.00227EPSS
SaveExploits0References11
RedhatCVE
RedhatCVE
•added 2025/04/26 5:01 a.m.•31 views

CVE-2025-0467

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory...

8.2CVSS5.9AI score0.00177EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/18 12:00 a.m.•21 views

Imagination GPU Driver security vulnerabilities

Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in Imagination GPU Driver that originates from kernel software in Guest VM that may utilize shared memory to write GPU firmware data...

8.2CVSS5.8AI score0.00177EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/04/14 12:00 a.m.•14 views

arm-smmu-v3 IOMMU DoS

The vulnerability of the armsmmuallocsharedcd function in the driver/iommu/arm/arm-smmu-v3/arm-smmu-v3-sva.c file is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

7.8CVSS7.3AI score0.00288EPSS
SaveExploits0References13Affected Software3
SUSE CVE
SUSE CVE
•added 2025/04/09 1:33 a.m.•16 views

SUSE CVE-2025-22015

In the Linux kernel, the following vulnerability has been resolved: mm/migrate: fix shmem xarray update during migration A shmem folio can be either in page cache or in swap cache, but not at the same time. Namely, once it is in swap cache, folio-mapping should be NULL, and the folio is no longer...

5.5CVSS5.8AI score0.00214EPSS
SaveExploits0References15
attackerkb
attackerkb
•added 2025/04/07 11:15 a.m.•8 views

CVE-2024-43067

Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory...

7.8CVSS5.8AI score0.00093EPSS
SaveExploits0References2
NVD
NVD
•added 2025/04/07 11:15 a.m.•21 views

CVE-2024-43067

Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory...

7.8CVSS0.00093EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/07 12:00 a.m.•9 views

CVE-2024-43067: Time-of-check Time-of-use (TOCTOU) Race Condition

Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory...

7.8CVSS6.1AI score0.00093EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/07 12:00 a.m.•19 views

PT-2025-15191 · Qualcomm · Snapdragon +57

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory. Recommendations: At the moment, there is no information abo...

7.8CVSS7.1AI score0.00093EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2022-26365

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Linux disk/nic frontends data leaks This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CV...

7.1CVSS6.5AI score0.00329EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2016-10012

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The shared memory manager associated with pre-authentication compression in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all...

7.8CVSS7.1AI score0.01281EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2019-5068

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the shared...

5.1CVSS5.7AI score0.00484EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2025/02/27 3:14 a.m.•12 views

SUSE CVE-2021-47657

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Ensure that objs is not NULL in virtiogpuarrayputfree If virtiogpuobjectshmeminit fails e.g. due to fault injection, as it happened in the bug report by syzbot, virtiogpuarrayputfree could be called with objs equal to...

5.5CVSS5.9AI score0.00278EPSS
SaveExploits0References7
osv_debian
osv_debian
•added 2025/02/26 7:00 a.m.•20 views

DEBIAN-CVE-2022-49080

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix mpolnew leak in sharedpolicyreplace If mpolnew is allocated but not used in restart loop, mpolnew will be freed via mpolput before returning to the caller. But refcnt is not initialized yet, so mpolput could not...

5.5CVSS5.9AI score0.00312EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/02/26 1:54 a.m.•21 views

CVE-2022-49080 mm/mempolicy: fix mpol_new leak in shared_policy_replace

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix mpolnew leak in sharedpolicyreplace If mpolnew is allocated but not used in restart loop, mpolnew will be freed via mpolput before returning to the caller. But refcnt is not initialized yet, so mpolput could not...

5.7AI score0.00312EPSS
SaveExploits0References12
Cvelist
Cvelist
•added 2025/02/26 1:54 a.m.•25 views

CVE-2022-49080 mm/mempolicy: fix mpol_new leak in shared_policy_replace

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix mpolnew leak in sharedpolicyreplace If mpolnew is allocated but not used in restart loop, mpolnew will be freed via mpolput before returning to the caller. But refcnt is not initialized yet, so mpolput could not...

0.00312EPSS
SaveExploits0References9
Rows per page
Query Builder