ROS-20261006-73-0247

The vulnerability in the arch/arm64/kernel/hibernate.c component of the Linux operating system relates to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260930-73-0109

The vulnerability in the arch/arm64/kernel/signal.c component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the pgshift_level_to_ttl() function in the arch/arm64/kvm/nested.c file of Linux kernel allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pgshiftleveltottl function in the arch/arm64/kvm/nested.c file of Linux operating systems is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

ROS-20260923-73-0078

The vulnerability of the docsum function in the arch/arm64/lib/csum.c module, which is part of the ARM 64-bit kernel support for the Linux operating system, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the prepare_trampoline() function in the arch/arm64/net/bpf_jit_comp.c network support module on the ARM 64-bit kernel platform of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the preparetrampoline function in the arch/arm64/net/bpfjitcomp.c network support module on the ARM 64-bit kernel of the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service...

CVE-2025-36920

In hypalloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36920

A vulnerability in the hyp_alloc function of arch/arm64/kvm/hyp/nvhe/alloc.c allows for an out-of-bounds write due to improper input validation. This issue specifically impacts the pKVM component and could lead to local escalation of privilege (EoP) without requiring additional execution privileg...

CVE-2025-36920: Improper Input Validation

In hypalloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-54658

Уязвимость функции change memory common модуля arch/arm64/mm/pageattr.c ядра операционной системы Linux связана с отсутствием проверки возвращаемого значения. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, оказать воздействие на конфиденциальность, целостность и...

PT-2025-55050

Уязвимость функции kvm arch vcpu ioctl модуля arch/arm64/kvm/arm.c подсистемы виртуализации на платформе ARM 64бит ядра операционной системы Linux связана с доступом к неинициализированному указателю. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

kitten 安全漏洞

kitten is a lightweight kernel open-sourced by HobbesOSR. A security vulnerability exists in kitten, which stems from resource consumption due to incorrect operation of the function setpteat in file /include/arch-arm64/pgtable.h...

The vulnerability of the poe_set() function in the arch/arm64/kernel/ptrace.c module, which is part of the ARM 64-bit kernel support in the Linux operating system, allows a attacker to gain access to protected information or cause service interruptions.

The vulnerability of the poeset function in the arch/arm64/kernel/ptrace.c module, which is part of the ARM 64-bit kernel support for the Linux operating system, relates to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to access protected information or...

The vulnerability of the prepare_trampoline() function in the arch/arm64/net/bpf_jit_comp.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the preparetrampoline function in the arch/arm64/net/bpfjitcomp.c module of the Linux operating system is related to incorrect calculations. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2022-49090: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: arch/arm64: Fix topology initialization for core scheduling Arm64 systems rely on storecputopology to call updatesiblingsmasks to transfer the toplogy to the various cpu masks. This needs to be done before the call to...

PT-2024-33970

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61 Description: A shift-out-of-bounds bug has been reported in the Linux kernel when running a VM with MTE enabled host kernel. The bug occurs in the arch/arm64/kvm/sys regs.c file at line 1988, where a shif...

The vulnerability of the vgic_its_check_cache() function in the arch/arm64/kvm/vgic/vgic-its.c module of the Kernel-based Virtual Machine (KVM) virtualization subsystem of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vgicitscheckcache function in the arch/arm64/kvm/vgic/vgic-its.c module of the Kernel-based Virtual Machine KVM virtualization subsystem of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker ...

PT-2023-36780

Уязвимость функции do csum модуля arch/arm64/lib/csum.c поддержки платформы ARM 64бит ядра операционной системы Linux связана с чтением за границами буфера. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информаци...

PT-2023-36789

Уязвимость функции prepare trampoline модуля arch/arm64/net/bpf jit comp.c поддержки сети на платформе ARM 64бит ядра операционной системы Linux связана с неправильным отключением или освобождением ресурса. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2023-36738

Уязвимость функции acpi ffh address space arch setup модуля arch/arm64/kernel/acpi.c ядра операционной системы Linux связана с неправильным освобождением памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2022-37986

Уязвимость функции pte user accessible page модуля arch/arm64/include/asm/pgtable.h поддержки платформы ARM 64бит ядра операционной системы Linux связана с копированием буфера без проверки размера входных данных классическое переполнение буфера. Эксплуатация уязвимости может позволить нарушителю...