44 matches found
Linux Kernel Heap Buffer Overflow DoS
The vulnerability in the arch/arm64/kvm/vgic/vgic.c component of the Linux kernel is related to an improper implementation of a control flow. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability of protected information...
Linux kernel Heap Buffer Overflow DoS
The vulnerability in the createmappingnoalloc and updatemappingprot functions within the arch/arm64/mm/mmu.c component of the Linux kernel operating system is related to insufficient resource control during its existence. Exploitation of this vulnerability may allow an attacker to compromise the...
Linux arch/arm64/include/asm/exception.h Data Compromise
The vulnerability of the arch/arm64/include/asm/exception.h component in the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of protected information...
PT-2026-108758
The ARM64 MMU back-end allocated address space identifiers ASIDs for memory domains with a bare round-robin counter in arch mem domain init arch/arm64/core/mmu.c. VM ASID BITS is 8, so only 255 ASIDs exist; once the counter wrapped, arch mem domain init could hand an ASID to a new domain while a...
ROS-20261006-73-0247
The vulnerability in the arch/arm64/kernel/hibernate.c component of the Linux operating system relates to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260930-73-0109
The vulnerability in the arch/arm64/kernel/signal.c component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a system failure...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the pgshiftleveltottl function in the arch/arm64/kvm/nested.c file of Linux operating systems is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
ROS-20260923-73-0078
The vulnerability of the docsum function in the arch/arm64/lib/csum.c module, which is part of the ARM 64-bit kernel support for the Linux operating system, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
PT-2026-121249
Уязвимость функции kvm hyp handle fpsimd компонента arch/arm64/kvm/hyp/include/hyp/switch.h ядра операционной системы Linux связана с реализацией некорректного потока управления. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
Linux ARM64 BPF JIT DoS
The vulnerability of the preparetrampoline function in the arch/arm64/net/bpfjitcomp.c network support module on the ARM 64-bit kernel of the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service...
CVE-2025-36920
In hypalloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-36920
A vulnerability in the hyp_alloc function of arch/arm64/kvm/hyp/nvhe/alloc.c allows for an out-of-bounds write due to improper input validation. This issue specifically impacts the pKVM component and could lead to local escalation of privilege (EoP) without requiring additional execution privileg...
CVE-2025-36920: Improper Input Validation
In hypalloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2025-54658
Уязвимость функции change memory common модуля arch/arm64/mm/pageattr.c ядра операционной системы Linux связана с отсутствием проверки возвращаемого значения. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, оказать воздействие на конфиденциальность, целостность и...
PT-2025-55050
Уязвимость функции kvm arch vcpu ioctl модуля arch/arm64/kvm/arm.c подсистемы виртуализации на платформе ARM 64бит ядра операционной системы Linux связана с доступом к неинициализированному указателю. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
Kitten security vulnerabilities
kitten is a lightweight kernel open-sourced by HobbesOSR. A security vulnerability exists in kitten, which stems from resource consumption due to incorrect operation of the function setpteat in file /include/arch-arm64/pgtable.h...
PT-2025-63024
Уязвимость компонента arch/arm64/include/asm/exception.h ядра операционной системы Linux связана с недостаточным контролем ресурса в период его существования. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность и доступность защищаемой информации...
Linux ARM 64-bit Kernel poe_set() Buffer Overflow DoS
The vulnerability of the poeset function in the arch/arm64/kernel/ptrace.c module, which is part of the ARM 64-bit kernel support for the Linux operating system, relates to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to access protected information or...
Linux arch/arm64/net/bpf_jit_comp.c Heap Buffer Overflow DoS
The vulnerability of the preparetrampoline function in the arch/arm64/net/bpfjitcomp.c module of the Linux operating system is related to incorrect calculations. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2022-49090: NULL Pointer Dereference
In the Linux kernel, the following vulnerability has been resolved: arch/arm64: Fix topology initialization for core scheduling Arm64 systems rely on storecputopology to call updatesiblingsmasks to transfer the toplogy to the various cpu masks. This needs to be done before the call to...