Lucene search
+L

868 matches found

CVE
CVE
added 2024/12/27 2:23 p.m.102 views

CVE-2024-56559

CVE-2024-56559 : Linux kernel vulnerability in vmalloc/KASAN shadow VA handling where the TLB flush of multiple uses was not consolidated, causing a soft lockup on a 256-core machine during drain_vmap_area_work and Kasan vmap allocations. The issue is resolved by combining all TLB flush operation...

5.5CVSS6.5AI score0.00143EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2024/12/27 2:23 p.m.12 views

CVE-2024-56559

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: combine all TLB flush operations of KASAN shadow virtual address into one operation When compiling kernel source 'make -j $nproc' with the up-and-running KASAN-enabled kernel on a 256-core machine, the following soft...

5.5CVSS5.5AI score0.00143EPSS
SaveExploits0
OSV
OSV
added 2024/12/27 2:23 p.m.7 views

CVE-2024-56559 mm/vmalloc: combine all TLB flush operations of KASAN shadow virtual address into one operation

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: combine all TLB flush operations of KASAN shadow virtual address into one operation When compiling kernel source 'make -j $nproc' with the up-and-running KASAN-enabled kernel on a 256-core machine, the following soft...

5.9AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/12/27 12:0 a.m.10 views

PT-2024-36863 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.10.0-rc5 Description: A soft lockup issue has been identified in the Linux kernel when compiling kernel source with an up-and-running KASAN-enabled kernel on a 256-core machine. The issue occurs due to excessi...

8.1CVSS7.8AI score0.00822EPSS
SaveExploits3References847
CNNVD
CNNVD
added 2024/12/27 12:0 a.m.6 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a TLB refresh operation issue with KASAN shadow virtual addresses in the mm/vmalloc subsystem...

5.5CVSS6.2AI score0.00143EPSS
SaveExploits0References2
zdt
zdt
added 2024/11/24 12:0 a.m.156 views

Linux 6.6 Race Condition Exploit

A security-relevant race between mremap and THP code has been discovered. Reaching the buggy code typically requires the ability to create unprivileged namespaces. The bug leads to installing physical address 0 as a page table, which is likely exploitable in several ways: For example, triggering...

7CVSS6.7AI score0.00206EPSS
SaveExploits2
OSV
OSV
added 2024/11/08 6:15 a.m.2 views

DEBIAN-CVE-2024-50199

In the Linux kernel, the following vulnerability has been resolved: mm/swapfile: skip HugeTLB pages for unusevma I got a bad pud error and lost a 1GB HugeTLB when calling swapoff. The problem can be reproduced by the following steps: 1. Allocate an anonymous 1GB HugeTLB and some other anonymous...

5.5CVSS5.7AI score0.00223EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/14 8:17 a.m.28 views

CVE-2024-43701 GPU DDK - PowerVR: TLB invalidate UAF of dma_buf imported into multiple GPU devices

Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU...

7.4AI score0.0013EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/14 8:17 a.m.35 views

CVE-2024-43701 GPU DDK - PowerVR: TLB invalidate UAF of dma_buf imported into multiple GPU devices

Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU...

0.0013EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/02 9:36 a.m.17 views

USN-6895-4 linux-oem-6.5 vulnerabilities

It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the HugeTLB file syst...

9.8CVSS6.7AI score0.00748EPSS
SaveExploits1References101
OSV
OSV
added 2024/07/19 9:4 a.m.13 views

USN-6895-3 linux-aws-6.5, linux-lowlatency-hwe-6.5, linux-oracle-6.5, linux-starfive-6.5 vulnerabilities

It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the HugeTLB file syst...

9.8CVSS6.7AI score0.00748EPSS
SaveExploits1References101
RedhatCVE
RedhatCVE
added 2024/07/16 10:59 p.m.20 views

CVE-2022-48795

A flaw was found in the sbaunmapsg function in PA-RISC in the Linux kernel, causing a kernel panic due to a null pointer dereference. This occurrs because the code checked sgdmalensglist before verifying if there were remaining entries nents, leading to overruns and crashes when crossing page...

5.5CVSS6.3AI score0.00239EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2024/07/16 3:55 p.m.30 views

CVE-2024-40918

In the Linux kernel, the following vulnerability has been resolved: parisc: Try to fix random segmentation faults in package builds PA-RISC systems with PA8800 and PA8900 processors have had problems with random segmentation faults for many years. Systems with earlier processors are much more...

4.4CVSS6.7AI score0.00295EPSS
SaveExploits0References4
NVD
NVD
added 2024/07/16 12:15 p.m.22 views

CVE-2022-48795

In the Linux kernel, the following vulnerability has been resolved: parisc: Fix data TLB miss in sbaunmapsg Rolf Eike Beer reported the following bug: 1274934.746891 Bad Address null pointer deref?: Code=15 Data TLB miss fault at addr 0000004140000018 1274934.746891 CPU: 3 PID: 5549 Comm: cmake N...

5.5CVSS0.00239EPSS
SaveExploits0References8
OSV
OSV
added 2024/07/16 12:15 p.m.33 views

DEBIAN-CVE-2022-48795

In the Linux kernel, the following vulnerability has been resolved: parisc: Fix data TLB miss in sbaunmapsg Rolf Eike Beer reported the following bug: 1274934.746891 Bad Address null pointer deref?: Code=15 Data TLB miss fault at addr 0000004140000018 1274934.746891 CPU: 3 PID: 5549 Comm: cmake N...

5.5CVSS5.3AI score0.00239EPSS
SaveExploits0References1
OSV
OSV
added 2024/07/16 12:15 p.m.15 views

UBUNTU-CVE-2022-48795

In the Linux kernel, the following vulnerability has been resolved: parisc: Fix data TLB miss in sbaunmapsg Rolf Eike Beer reported the following bug: 1274934.746891 Bad Address null pointer deref?: Code=15 Data TLB miss fault at addr 0000004140000018 1274934.746891 CPU: 3 PID: 5549 Comm: cmake N...

5.5CVSS5.7AI score0.00239EPSS
SaveExploits0References11
UbuntuCve
UbuntuCve
added 2024/07/16 12:15 p.m.21 views

CVE-2022-48795

In the Linux kernel, the following vulnerability has been resolved: parisc: Fix data TLB miss in sbaunmapsg Rolf Eike Beer reported the following bug: 1274934.746891 Bad Address null pointer deref?: Code=15 Data TLB miss fault at addr 0000004140000018 1274934.746891 CPU: 3 PID: 5549 Comm: cmake N...

5.5CVSS5.9AI score0.00239EPSS
SaveExploits0References10
OSV
OSV
added 2024/07/16 11:43 a.m.26 views

CVE-2022-48795 parisc: Fix data TLB miss in sba_unmap_sg

In the Linux kernel, the following vulnerability has been resolved: parisc: Fix data TLB miss in sbaunmapsg Rolf Eike Beer reported the following bug: 1274934.746891 Bad Address null pointer deref?: Code=15 Data TLB miss fault at addr 0000004140000018 1274934.746891 CPU: 3 PID: 5549 Comm: cmake N...

5.7AI score
SaveExploits0References11
Vulnrichment
Vulnrichment
added 2024/07/16 11:43 a.m.14 views

CVE-2022-48795 parisc: Fix data TLB miss in sba_unmap_sg

In the Linux kernel, the following vulnerability has been resolved: parisc: Fix data TLB miss in sbaunmapsg Rolf Eike Beer reported the following bug: 1274934.746891 Bad Address null pointer deref?: Code=15 Data TLB miss fault at addr 0000004140000018 1274934.746891 CPU: 3 PID: 5549 Comm: cmake N...

6.7AI score0.00239EPSS
SaveExploits0References8
CVE
CVE
added 2024/07/16 11:43 a.m.82 views

CVE-2022-48795

CVE-2022-48795 maps to a PA-RISC Linux kernel issue: overrunning sglist in sba_unmap_sg caused a Data TLB miss and null-pointer dereference, leading to a kernel panic. The root cause was testing sg_dma_len(sglist) before confirming remaining entries (nents), which could cross a page boundary and ...

5.5CVSS6.4AI score0.00239EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder