Lucene search
K

851 matches found

OSV
OSV
added 2025/05/20 4:15 p.m.0 views

UBUNTU-CVE-2025-37904

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix the inode leak in btrfsiget BUG There is a bug report that a syzbot reproducer can lead to the following busy inode at unmount time: BTRFS info device loop1: last unmount of filesystem...

5.5CVSS5.7AI score0.00074EPSS
Exploits0References11
Positive Technologies
Positive Technologies
added 2025/05/20 12:0 a.m.3 views

PT-2025-22166 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A bug in the Linux kernel has been identified, which can lead to a busy inode at unmount time, resulting in a kernel BUG. This issue occurs when btrfs alloc path fails, and btrfs...

5AI score0.00452EPSS
Exploits3References57
RedHat Linux
RedHat Linux
added 2025/05/13 8:28 a.m.2 views

kernel: mm/slub: Avoid list corruption when removing a slab from the full list

A use-after-free list corruption vulnerability was found in the Linux kernel. If an allocated object fails in allocconsistencychecks, all objects of the slab will be marked as used and the slab will be removed from the partial list. When an object belonging to the slab gets freed later, the...

5.5CVSS7.1AI score0.0001EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/05/13 8:28 a.m.4 views

xorg: xwayland: Use of uninitialized pointer in compRedirectWindow()

An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect may fail if it cannot allocate the backing pixmap. In that case, compRedirectWindow will return a BadAlloc error without validating the window tree marked just before, which leaves the...

7.8CVSS5.7AI score0.00029EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/05/12 1:6 a.m.1 views

SUSE CVE-2022-49890

In the Linux kernel, the following vulnerability has been resolved: capabilities: fix potential memleak on error path from vfsgetxattralloc In capinodegetsecurity, we will use vfsgetxattralloc to complete the memory allocation of tmpbuf, if we have completed the memory allocation of tmpbuf, but...

5.5CVSS6.3AI score0.0006EPSS
Exploits0References9
SUSE CVE
SUSE CVE
added 2025/05/09 5:8 a.m.2 views

SUSE CVE-2020-36791

In the Linux kernel, the following vulnerability has been resolved: netsched: keep allochash updated after hash allocation In commit 599be01ee567 "netsched: fix an OOB access in clstcindex" I moved cp-hash calculation before the first tcindexallocperfecthash, but cp-allochash is left untouched...

3.3CVSS7.8AI score0.00061EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2025/05/07 2:15 p.m.0 views

CVE-2020-36791

In the Linux kernel, the following vulnerability has been resolved: netsched: keep allochash updated after hash allocation In commit 599be01ee567 "netsched: fix an OOB access in clstcindex" I moved cp-hash calculation before the first tcindexallocperfecthash, but cp-allochash is left untouched...

7.1CVSS6.2AI score0.00061EPSS
Exploits0References10Affected Software1
OSV
OSV
added 2025/05/07 2:15 p.m.0 views

DEBIAN-CVE-2020-36791

In the Linux kernel, the following vulnerability has been resolved: netsched: keep allochash updated after hash allocation In commit 599be01ee567 "netsched: fix an OOB access in clstcindex" I moved cp-hash calculation before the first tcindexallocperfecthash, but cp-allochash is left untouched...

7.1CVSS5.6AI score0.00061EPSS
Exploits0References1
OSV
OSV
added 2025/05/07 2:15 p.m.4 views

CVE-2020-36791

In the Linux kernel, the following vulnerability has been resolved: netsched: keep allochash updated after hash allocation In commit 599be01ee567 "netsched: fix an OOB access in clstcindex" I moved cp-hash calculation before the first tcindexallocperfecthash, but cp-allochash is left untouched...

7.1CVSS6.7AI score
Exploits0References9
OSV
OSV
added 2025/05/07 2:15 p.m.0 views

UBUNTU-CVE-2020-36791

In the Linux kernel, the following vulnerability has been resolved: netsched: keep allochash updated after hash allocation In commit 599be01ee567 "netsched: fix an OOB access in clstcindex" I moved cp-hash calculation before the first tcindexallocperfecthash, but cp-allochash is left untouched...

7.1CVSS6.3AI score0.00061EPSS
Exploits0References12
ATTACKERKB
ATTACKERKB
added 2025/05/02 4:15 p.m.1 views

CVE-2023-53044

In the Linux kernel, the following vulnerability has been resolved: dm stats: check for and propagate allocpercpu failure Check allocprecpu's return value and return an error from dmstatsinit if it fails. Update allocdev to fail if dmstatsinit does. Otherwise, a NULL pointer dereference will occu...

5.5CVSS6.3AI score0.00063EPSS
Exploits0References9Affected Software1
OSV
OSV
added 2025/05/02 4:15 p.m.0 views

DEBIAN-CVE-2023-53044

In the Linux kernel, the following vulnerability has been resolved: dm stats: check for and propagate allocpercpu failure Check allocprecpu's return value and return an error from dmstatsinit if it fails. Update allocdev to fail if dmstatsinit does. Otherwise, a NULL pointer dereference will occu...

5.5CVSS5.5AI score0.00063EPSS
Exploits0References1
OSV
OSV
added 2025/05/02 4:15 p.m.0 views

UBUNTU-CVE-2023-53044

In the Linux kernel, the following vulnerability has been resolved: dm stats: check for and propagate allocpercpu failure Check allocprecpu's return value and return an error from dmstatsinit if it fails. Update allocdev to fail if dmstatsinit does. Otherwise, a NULL pointer dereference will occu...

5.5CVSS6.1AI score0.00063EPSS
Exploits0References11
Cvelist
Cvelist
added 2025/05/02 3:55 p.m.9 views

CVE-2023-53044 dm stats: check for and propagate alloc_percpu failure

In the Linux kernel, the following vulnerability has been resolved: dm stats: check for and propagate allocpercpu failure Check allocprecpu's return value and return an error from dmstatsinit if it fails. Update allocdev to fail if dmstatsinit does. Otherwise, a NULL pointer dereference will occu...

0.00063EPSS
Exploits0References8
CVE
CVE
added 2025/05/02 3:55 p.m.100 views

CVE-2023-53044

The CVE-2023-53044 entry concerns a Linux kernel vulnerability in the dm-stats path. A NULL pointer dereference can occur in dm_stats_cleanup() if alloc_percpu() fails during dm_stats_init(), with the failure not being properly propagated from alloc_precpu() or dm_stats_init() to dm_stats_cleanup...

5.5CVSS6.5AI score0.00063EPSS
Exploits0References8Affected Software1
SUSE CVE
SUSE CVE
added 2025/05/02 2:3 a.m.2 views

SUSE CVE-2025-37740

In the Linux kernel, the following vulnerability has been resolved: jfs: add sanity check for agwidth in dbMount The width in dmapctl of the AG is zero, it trigger a divide error when calculating the control page level in dbAllocAG. To avoid this issue, add a check for agwidth in dbAllocAG...

4.4CVSS7.7AI score0.00049EPSS
Exploits0References16
CNNVD
CNNVD
added 2025/05/02 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from dm stats not checking the allocpercpu return value, which could lead to a null pointer dereference...

5.5CVSS6.4AI score0.00063EPSS
Exploits0References8
OSV
OSV
added 2025/05/01 3:16 p.m.1 views

DEBIAN-CVE-2022-49795

In the Linux kernel, the following vulnerability has been resolved: rethook: fix a potential memleak in rethookalloc In rethookalloc, the variable rh is not freed or passed out if handler is NULL, which could lead to a memleak, fix it. Masami: Add "rethook:" tag to the title. Acke-by: Masami...

5.5CVSS5.5AI score0.00074EPSS
Exploits0References1
CVE
CVE
added 2025/05/01 2:10 p.m.104 views

CVE-2022-49890

CVE-2022-49890 covers a Linux kernel memleak in cap_inode_getsecurity() when using vfs_getxattr_alloc() to allocate tmpbuf. If tmpbuf allocation succeeds but handler->get() fails, memory leak could occur in the sequence (krealloc of xattr_value, then assignment back to *xattr_value). The mitig...

5.5CVSS6.5AI score0.0006EPSS
Exploits0References7Affected Software1
Cvelist
Cvelist
added 2025/05/01 2:10 p.m.9 views

CVE-2022-49872 net: gso: fix panic on frag_list with mixed head alloc types

In the Linux kernel, the following vulnerability has been resolved: net: gso: fix panic on fraglist with mixed head alloc types Since commit 3dcbdb134f32 "net: gso: Fix skbsegment splat when splitting gsosize mangled skb having linear-headed fraglist", it is allowed to change gsosize of a GRO...

0.00063EPSS
Exploits0References8
Rows per page
Query Builder