Lucene search
+L

27 matches found

Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•10 views

PT-2026-94619

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the arm mpam module when a user unbinds a Memory System Component MSC after an error interrupt has triggered the mpam disable function. This happens...

5.4AI score0.00198EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•9 views

PT-2026-94618

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use after free UAF issue exists in the arm mpam driver. This occurs when a user unbinds a Memory System Component MSC that is the sole remaining MSC for a component, causing the...

6AI score0.00198EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/08/10 12:03 p.m.•40 views

CVE-2026-68345 arm_mpam: guard MBWU state before adding it to garbage

In the Linux kernel, the following vulnerability has been resolved: armmpam: guard MBWU state before adding it to garbage destroycomponentcfg adds each RIS mbwustate object to the MPAM garbage list when destroying component configuration. However, mbwustate is allocated per RIS and only for RISes...

0.00198EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/10 12:00 a.m.•9 views

PT-2026-69745

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm mpam module where the destroy component cfg function adds each RIS mbwu state object to the MPAM garbage list during component configuration destruction. Becau...

5.5AI score0.00198EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/06/30 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-53278

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - armmpam: Check whether the config array is allocated before destroying it destroycomponentcfg is called to free the configuration array. It uses the embedded...

5.5CVSS5.8AI score0.00143EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/06/29 11:04 a.m.•30 views

CVE-2026-53278

A flaw was found in the Linux kernel's armmpam component. This vulnerability occurs when the destroycomponentcfg function is called from mpamdisable before the configuration array has been properly allocated. This can lead to a null pointer dereference, potentially causing a system crash and...

5.5CVSS5.6AI score0.00143EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/06/28 1:09 a.m.•26 views

SUSE CVE-2026-53278

In the Linux kernel, the following vulnerability has been resolved: armmpam: Check whether the config array is allocated before destroying it destroycomponentcfg is called to free the configuration array. It uses the embedded 'garbage' structure, which means the array has to be allocated. If...

5.5CVSS5.7AI score0.00143EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2026/06/26 8:17 p.m.•12 views

DEBIAN-CVE-2026-53278

In the Linux kernel, the following vulnerability has been resolved: armmpam: Check whether the config array is allocated before destroying it destroycomponentcfg is called to free the configuration array. It uses the embedded 'garbage' structure, which means the array has to be allocated. If...

5.5CVSS5.8AI score0.00143EPSS
SaveExploits0References1
NVD
NVD
•added 2026/06/26 8:17 p.m.•25 views

CVE-2026-53278

In the Linux kernel, the following vulnerability has been resolved: armmpam: Check whether the config array is allocated before destroying it destroycomponentcfg is called to free the configuration array. It uses the embedded 'garbage' structure, which means the array has to be allocated. If...

5.5CVSS0.00143EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/06/26 8:17 p.m.•24 views

CVE-2026-53278

In the Linux kernel, the following vulnerability has been resolved: armmpam: Check whether the config array is allocated before destroying it destroycomponentcfg is called to free the configuration array. It uses the embedded 'garbage' structure, which means the array has to be allocated. If...

5.5CVSS5.7AI score0.00143EPSS
SaveExploits0References15
osv_ubuntu
osv_ubuntu
•added 2026/06/26 8:17 p.m.•34 views

UBUNTU-CVE-2026-53278

In the Linux kernel, the following vulnerability has been resolved: armmpam: Check whether the config array is allocated before destroying it destroycomponentcfg is called to free the configuration array. It uses the embedded 'garbage' structure, which means the array has to be allocated. If...

5.5CVSS5.8AI score0.00143EPSS
SaveExploits0References16
Cvelist
Cvelist
•added 2026/06/26 7:40 p.m.•44 views

CVE-2026-53278 arm_mpam: Check whether the config array is allocated before destroying it

In the Linux kernel, the following vulnerability has been resolved: armmpam: Check whether the config array is allocated before destroying it destroycomponentcfg is called to free the configuration array. It uses the embedded 'garbage' structure, which means the array has to be allocated. If...

0.00143EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/06/26 7:40 p.m.•18 views

CVE-2026-53278 arm_mpam: Check whether the config array is allocated before destroying it

In the Linux kernel, the following vulnerability has been resolved: armmpam: Check whether the config array is allocated before destroying it destroycomponentcfg is called to free the configuration array. It uses the embedded 'garbage' structure, which means the array has to be allocated. If...

5.8AI score
SaveExploits0References5
CVE
CVE
•added 2026/06/26 7:40 p.m.•53 views

CVE-2026-53278

CVE-2026-53278 affects the Linux kernel arm_mpam component. The vulnerability arises when __destroy_component_cfg() is invoked from mpam_disable() before the configuration array has been allocated, causing a NULL pointer dereference. The function frees the configuration array and mbwu_state; sinc...

5.5CVSS5.7AI score0.00143EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2026/06/26 7:40 p.m.•19 views

CVE-2026-53278

In the Linux kernel, the following vulnerability has been resolved: armmpam: Check whether the config array is allocated before destroying it destroycomponentcfg is called to free the configuration array. It uses the embedded 'garbage' structure, which means the array has to be allocated. If...

5.8AI score0.00143EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
•added 2026/06/26 7:40 p.m.•30 views

EUVD-2026-39883

In the Linux kernel, the following vulnerability has been resolved: armmpam: Check whether the config array is allocated before destroying it destroycomponentcfg is called to free the configuration array. It uses the embedded 'garbage' structure, which means the array has to be allocated. If...

5.7AI score0.00143EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/05/20 5:53 a.m.•14 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: armmpam: Fixed a null pointer dereference issue when restoring bandwidth counters. When a MSC that supports memory bandwidth monitoring is brought offline and then brought back online, the mpamrestorembwustate function calls...

5.5CVSS5.7AI score0.00107EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/14 12:00 a.m.•32 views

PT-2026-52917

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs when the destroy component cfg function is called from mpam disable before the configuration array has been allocated. The function attempts to use an...

5.5CVSS5.6AI score0.00143EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/04/07 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-23433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: armmpam: Fix null pointer dereference when restoring bandwidth counters When an MSC supporti...

5.5CVSS5.7AI score0.00107EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/04/03 11:27 p.m.•16 views

SUSE CVE-2026-23433

In the Linux kernel, the following vulnerability has been resolved: armmpam: Fix null pointer dereference when restoring bandwidth counters When an MSC supporting memory bandwidth monitoring is brought offline and then online, mpamrestorembwustate calls rismsmonread via ipi to restore the...

5.5CVSS5.7AI score0.00107EPSS
SaveExploits0References3
Rows per page
Query Builder