Lucene search
K

10777 matches found

Positive Technologies
Positive Technologies
added 2024/12/10 12:0 a.m.4 views

PT-2025-9956

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel's crypto subsystem, specifically in the Tegra crypto driver, has been identified. The tegra cmac init or tegra sha init function may return an error when memo...

7.8CVSS7.6AI score0.10568EPSS
Exploits2References850
Ubuntu
Ubuntu
added 2024/12/09 4:46 p.m.24 views

USN-7144-1: Linux kernel (Intel IoTG) vulnerabilities

Supraja Sridhara, Benedict Schlüter, Mark Kuhne, Andrin Bertschi, and Shweta Shinde discovered that the Confidential Computing framework in the Linux kernel for x86 platforms did not properly handle 32-bit emulation on TDX and SEV. An attacker with access to the VMM could use this to cause a deni...

8.8CVSS7.8AI score0.00879EPSS
Exploits8
SUSE CVE
SUSE CVE
added 2024/12/05 12:16 a.m.2 views

SUSE CVE-2024-53132

In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix "Missing outer runtime PM protection" warning Fix the following drmWARN: 953.586396 xe 0000:00:02.0: drm Missing outer runtime PM protection ... 953.587090 ? xepmruntimegetnoresume+0x8d/0xa0 xe 953.587208...

5.5CVSS7.8AI score0.00172EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/12/04 12:0 a.m.3 views

The vulnerability of the Cisco Meeting Management platform’s journaling subsystem allows attackers to disclose protected information.

The vulnerability of the Cisco Meeting Management platform’s journaling subsystem relates to the lack of protection for sensitive data. Exploiting this vulnerability could allow a malicious actor to disclose confidential information...

4.3CVSS5.4AI score0.00379EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/12/03 12:0 a.m.8 views

PT-2024-36949

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A use-after-free issue was encountered in the Linux kernel, specifically in the net/smc component. This issue manifested as the LGR/link refcnt reaching 0 early and entering the clear process,...

7.8CVSS6.8AI score0.00222EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2024/11/26 12:55 a.m.4 views

kernel: hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs

A vulnerability was found in the Linux kernel's hwmon subsystem, specifically in the mlxreg-fan driver. The issue arises when the driver’s sysfs interface for controlling fan speed does not properly handle cases where the requested minimum fan speed exceeds the maximum allowable value. When the...

7.1CVSS6.7AI score0.00244EPSS
Exploits0References5
OSV
OSV
added 2024/11/25 1:43 p.m.11 views

USN-7121-3 linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ATM...

8.4CVSS6.8AI score0.00333EPSS
Exploits1References46
BDU FSTEC
BDU FSTEC
added 2024/11/25 12:0 a.m.3 views

The vulnerability of the ctl_request_sense() function in the ctl subsystem of FreeBSD allows a hacker to execute arbitrary code.

The vulnerability of the ctlrequestsense function in the ctl subsystem of FreeBSD lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

8.4CVSS6.3AI score0.00395EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/25 12:0 a.m.4 views

The vulnerabilities of the ctl_write_buffer() and ctl_read_buffer() functions in the ctl subsystem of the FreeBSD operating system allow a hacker to execute arbitrary code.

The vulnerability of the ctlwritebuffer and ctlreadbuffer functions in the ctl subsystem of the FreeBSD operating system is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

9.3CVSS5.8AI score0.00601EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/25 12:0 a.m.3 views

The vulnerability of the ctl_report_supported_opcodes() function in the ctl subsystem of FreeBSD allows a hacker to execute arbitrary code.

The vulnerability of the ctlreportsupportedopcodes function in the ctl subsystem of FreeBSD stems from a pointer being moved beyond the allocated memory area due to insufficient filtering of special elements. Exploiting this vulnerability allows an attacker to execute arbitrary code...

8.8CVSS5.8AI score0.00395EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/25 12:0 a.m.3 views

The vulnerability of the ctl_write_buffer() function in the ctl subsystem of the FreeBSD operating system allows a hacker to execute arbitrary code.

The vulnerability of the ctlwritebuffer function in the ctl subsystem of the FreeBSD operating system is related to the use of memory after it is freed due to incorrect flag setting. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS5.9AI score0.00521EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/25 12:0 a.m.4 views

PT-2025-3624

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue is related to the wifi mac80211 component in the Linux kernel, where the size of an unsigned long is 4 bytes on 32-bit systems, while a u64 is 8 bytes. This leads to incorrect bit...

7.8CVSS7AI score0.00221EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2024/11/21 12:0 a.m.4 views

PT-2025-3623

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns the Linux kernel's wifi functionality, specifically the cfg80211 module. During link deletion, the link ID is removed from the valid links bitmap before cleanup...

4.6CVSS7.2AI score0.0018EPSS
Exploits0
OpenVAS
OpenVAS
added 2024/11/21 12:0 a.m.31 views

Ubuntu: Security Advisory (USN-7121-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.4CVSS8.9AI score0.00333EPSS
Exploits1References2
OSV
OSV
added 2024/11/20 1:36 p.m.16 views

USN-7121-2 linux-azure vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ATM...

8.4CVSS6.9AI score0.00333EPSS
Exploits1References46
Ubuntu
Ubuntu
added 2024/11/20 1:36 p.m.30 views

USN-7121-2: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ATM...

8.4CVSS7AI score0.00333EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2024/11/20 12:0 a.m.27 views

Ubuntu 14.04 LTS : Linux kernel (Azure) vulnerabilities (USN-7121-2)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7121-2 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

8.4CVSS7.1AI score0.00333EPSS
Exploits1References42
Tenable Nessus
Tenable Nessus
added 2024/11/20 12:0 a.m.21 views

Ubuntu 22.04 LTS : Linux kernel (Azure) vulnerabilities (USN-7123-1)

"The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7123-1 advisory. It was discovered that the CIFS network file system implementation in the Linux kernel did not properly validate certain SMB messages, leading to an...

8.8CVSS7.5AI score0.00879EPSS
Exploits9References223
Tenable Nessus
Tenable Nessus
added 2024/11/20 12:0 a.m.18 views

Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel (Low Latency) vulnerabilities (USN-7089-7)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7089-7 advisory. Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing...

7.8CVSS7.1AI score0.00478EPSS
Exploits4References195
OSV
OSV
added 2024/11/19 11:44 p.m.14 views

USN-7121-1 linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ATM...

8.4CVSS6.7AI score0.00333EPSS
Exploits1References46
Rows per page
Query Builder