Lucene search
+L

22 matches found

BDU FSTEC
BDU FSTEC
•added 2026/03/24 12:00 a.m.•18 views

The vulnerability of the zpci_device_reserved() function in the arch/s390/pci/pci.c module of the S390 platform support module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the zpcidevicereserved function in the arch/s390/pci/pci.c module of the S390 platform support library in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

7.8CVSS7.2AI score0.00212EPSS
SaveExploits0References13Affected Software2
BDU FSTEC
BDU FSTEC
•added 2025/12/15 12:00 a.m.•15 views

The vulnerability in the `arch/s390/boot/vmem.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the arch/s390/boot/vmem.c component of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a system failure...

5.5CVSS7.1AI score0.00166EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
•added 2025/07/03 12:00 a.m.•16 views

The vulnerability of the arch/s390 kernel component of the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the arch/s390 kernel component in the Linux operating system is related to the provision of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00216EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
•added 2025/06/25 12:00 a.m.•24 views

The vulnerability of the __poke_user() function in the arch/s390/kernel/ptrace.c module of the Linux operating system allows a hacker to gain access to protected information or cause a service failure.

The vulnerability of the pokeuser function in the arch/s390/kernel/ptrace.c module of the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access protected information or cause service interruptions...

7.1CVSS6.7AI score0.00242EPSS
SaveExploits0References40Affected Software3
BDU FSTEC
BDU FSTEC
•added 2025/04/03 12:00 a.m.•21 views

The vulnerability of the startup_kernel() function in the arch/s390/boot/startup.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the startupkernel function in the arch/s390/boot/startup.c module of the Linux operating system is related to the unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.2AI score0.00177EPSS
SaveExploits0References6Affected Software1
Positive Technologies
Positive Technologies
•added 2025/03/27 12:00 a.m.•7 views

PT-2025-13336

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to an invalid out of bounds read warning generated by GCC 11.1.0 and 11.2.0 when compiling the kernel. The issue arises fro...

4.6CVSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2024/11/25 12:00 a.m.•3 views

PT-2024-41798

Уязвимость функции zpci device reserved модуля arch/s390/pci/pci.c поддержки платформы S390 ядра операционной системы Linux связана с повторным использованием ранее освобожденной памяти. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и...

7.8CVSS0.00212EPSS
SaveExploits0References13
BDU FSTEC
BDU FSTEC
•added 2024/09/13 12:00 a.m.•22 views

The vulnerability in the `arch/s390/boot/decompressor.c` component of the Linux operating system, related to copying buffers without checking the input data, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the arch/s390/boot/decompressor.c component of the Linux operating system involves copying buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

7.8CVSS6.1AI score
SaveExploits0References14Affected Software4
Positive Technologies
Positive Technologies
•added 2024/07/31 12:00 a.m.•5 views

PT-2024-41821

Уязвимость функции load fpu state модуля arch/s390/kernel/fpu.c поддержки платформы S390 ядра операционной системы Linux связана с недостатками в обработке исключительных состояний. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

5.5CVSS5.8AI score0.00183EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2023/05/15 12:00 a.m.•3 views

PT-2023-36775

Уязвимость функции chacha crypt arch модуля arch/s390/crypto/chacha-glue.c поддержки платформы S390 ядра операционной системы Linux связана с неправильным отключением или освобождением ресурса. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

4.6CVSS0.00211EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2022/11/16 12:00 a.m.•2 views

PT-2022-38100

Уязвимость функции get wchan модуля arch/s390/include/asm/processor.h поддержки платформы S390 ядра операционной системы Linux связана с переполнением буфера на основе стека. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность...

7.8CVSS5.8AI score0.00195EPSS
SaveExploits0References6
OSV
OSV
•added 2022/03/10 5:44 p.m.•15 views

UBUNTU-CVE-2022-0516

A vulnerability was found in kvms390guestsidaop in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel. This flaw allows a local attacker with a normal user privilege to obtain unauthorized memory write access. This flaw affects Linux kernel versions prior to 5.17-rc4...

8.4CVSS6.3AI score0.00335EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/08 12:00 a.m.•6 views

CVE-2022-0516: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in kvms390guestsidaop in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel. This flaw allows a local attacker with a normal user privilege to obtain unauthorized memory write access. This flaw affects Linux kernel versions prior to 5.17-rc4...

7.8CVSS6.4AI score0.00335EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/06/04 12:00 a.m.•2 views

PT-2021-2549

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.7 Description: The issue is caused by a buffer overflow in the Kernel-based Virtual Machine KVM subsystem of the Linux kernel, specifically affecting components arch/s390/kvm/kvm-s390.c, include/linux/kvm...

7.8CVSS0.0032EPSS
SaveExploits0References12
Mend
Mend
•added 2020/04/29 12:07 p.m.•2 views

CVE-2020-11884

In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enablesacfuaccess in arch/s390/lib/uaccess.c that fails to protect against a concurrent page table upgrade, aka CID-3f777e19d171. A crash could also occur...

7.3CVSS0.00397EPSS
SaveExploits0References16
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/29 12:00 a.m.•6 views

CVE-2020-11884: Concurrent Execution using Shared Resource with Improper Synchronization

In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enablesacfuaccess in arch/s390/lib/uaccess.c that fails to protect against a concurrent page table upgrade, aka CID-3f777e19d171. A crash could also occur...

7CVSS7AI score0.00397EPSS
SaveExploits0References2
Prion
Prion
•added 2016/04/27 5:59 p.m.•34 views

Design/Logic Flaw

The fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of four page-table levels, which allows local users to cause a denial of service system crash or possibly have unspecified other impact via a crafted application, related to...

6.9CVSS7.2AI score0.00557EPSS
SaveExploits0References13Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/04/27 12:00 a.m.•7 views

CVE-2016-2143: Improper Input Validation

The fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of four page-table levels, which allows local users to cause a denial of service system crash or possibly have unspecified other impact via a crafted application, related to...

7.8CVSS6.4AI score0.00557EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/08/01 12:00 a.m.•8 views

CVE-2014-3534: Improper Privilege Management

arch/s390/kernel/ptrace.c in the Linux kernel before 3.15.8 on the s390 platform does not properly restrict address-space control operations in PTRACEPOKEUSRAREA requests, which allows local users to obtain read and write access to kernel memory locations, and consequently gain privileges, via a...

7.2CVSS5.8AI score0.00455EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/02/28 12:00 a.m.•7 views

CVE-2014-2039: Improper Input Validation

arch/s390/kernel/head64.S in the Linux kernel before 3.13.5 on the s390 platform does not properly handle attempted use of the linkage stack, which allows local users to cause a denial of service system crash by executing a crafted instruction...

4.9CVSS6AI score0.00452EPSS
SaveExploits0References2
Rows per page
Query Builder