Lucene search
+L

14133 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/30 12:00 a.m.•3 views

CVE-2025-40093: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fecm: Refactor bind path to use free After an bind/unbind cycle, the ecm-notifyreq is left stale. If a subsequent bind fails, the unified error label attempts to free this stale request, leading to a NULL pointer...

7.8CVSS5.8AI score0.00154EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/30 12:00 a.m.•18 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from rndis-notifyreq becoming stale after a bind-unbind loop, which could lead to a null pointer dereference...

6.3AI score0.00154EPSS
SaveExploits0References6
OpenVAS
OpenVAS
•added 2025/10/30 12:00 a.m.•12 views

Fedora: Security Advisory (FEDORA-2025-92566203fd)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS7AI score0.10737EPSS
SaveExploits1References8
Tenable Nessus
Tenable Nessus
•added 2025/10/30 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2025-40094

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: facm: Refactor bind path to use free After an bind/unbind cycle, the acm-notifyreq is left stale. If a subsequent bind fails, the unified error lab...

7.8CVSS6.2AI score0.00154EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/10/30 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2025-40092

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: fncm: Refactor bind path to use free After an bind/unbind cycle, the ncm-notifyreq is left stale. If a subsequent bind fails, the unified error lab...

7.8CVSS6.3AI score0.00154EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/10/30 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2025-40095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: frndis: Refactor bind path to use free After an bind/unbind cycle, the rndis-notifyreq is left stale. If a subsequent bind fails, the unified error...

7.8CVSS6.3AI score0.00154EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/10/30 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2025-40093

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: fecm: Refactor bind path to use free After an bind/unbind cycle, the ecm-notifyreq is left stale. If a subsequent bind fails, the unified error lab...

7.8CVSS6.3AI score0.00154EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/10/30 12:00 a.m.•7 views

Fedora 42 : bind / bind-dyndb-ldap (2025-92566203fd)

The remote Fedora 42 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-92566203fd advisory. Update to 9.18.41 rhbz2405786 Security fixes: - DNSSEC validation fails if matching but invalid DNSKEY is found. CVE-2025-8677 - Address various...

8.6CVSS7AI score0.10737EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2025/10/30 12:00 a.m.•7 views

Fedora 41 : bind / bind-dyndb-ldap (2025-10c407da27)

The remote Fedora 41 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-10c407da27 advisory. Update to 9.18.41 rhbz2405786 Security fixes: - DNSSEC validation fails if matching but invalid DNSKEY is found. CVE-2025-8677 - Address various...

8.6CVSS7AI score0.10737EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2025/10/30 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2025-40069

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix obj leak in VMBIND error path If we fail a handle-lookup part way thru, we need...

7.8CVSS5.8AI score0.00144EPSS
SaveExploits0References2
CNVD
CNVD
•added 2025/10/29 12:00 a.m.•20 views

Unspecified Vulnerability in ISC BIND 9 (CNVD-2025-26736)

ISC BIND 9 is a domain name system software from the ISC organization. A security vulnerability exists in ISC BIND 9, which arises from an overly lax acceptance of response records, and can be exploited by an attacker to cause forged data to be injected into the cache...

8.6CVSS6.7AI score0.00667EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/10/29 12:00 a.m.•22 views

Unspecified Vulnerability in ISC BIND 9

ISC BIND 9 is a domain name system software from the ISC organization. A security vulnerability exists in ISC BIND 9 that stems from a weakness in the pseudo-random number generator, which can be exploited by an attacker to cause prediction of source ports and query IDs...

8.6CVSS6.8AI score0.00466EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/28 6:16 p.m.•18 views

CVE-2025-40069

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix obj leak in VMBIND error path If we fail a handle-lookup part way thru, we need to drop the already obtained obj references. Patchwork: https://patchwork.freedesktop.org/patch/669784/...

5.8AI score0.00144EPSS
SaveExploits0References4
NVD
NVD
•added 2025/10/28 12:15 p.m.•21 views

CVE-2025-40069

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix obj leak in VMBIND error path If we fail a handle-lookup part way thru, we need to drop the already obtained obj references. Patchwork: https://patchwork.freedesktop.org/patch/669784/...

7.8CVSS0.00144EPSS
SaveExploits0References2
OSV
OSV
•added 2025/10/28 12:15 p.m.•18 views

UBUNTU-CVE-2025-40069

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix obj leak in VMBIND error path If we fail a handle-lookup part way thru, we need to drop the already obtained obj references. Patchwork: https://patchwork.freedesktop.org/patch/669784/...

7.8CVSS5.8AI score0.00144EPSS
SaveExploits0References10
Debian CVE
Debian CVE
•added 2025/10/28 11:48 a.m.•32 views

CVE-2025-40069

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix obj leak in VMBIND error path If we fail a handle-lookup part way thru, we need to drop the already obtained obj references. Patchwork: https://patchwork.freedesktop.org/patch/669784/...

7.8CVSS5.8AI score0.00144EPSS
SaveExploits0
CVE
CVE
•added 2025/10/28 11:48 a.m.•58 views

CVE-2025-40069

In CVE-2025-40069, the Linux kernel vulnerability affects the DRM MSM path: obj references leaked if a handle-lookup fails mid-path in VM_BIND. The fix ensures already-obtained objects are dropped to prevent leaks. Patch reference: patchwork.freedesktop.org/patch/669784/. The issue is described i...

7.8CVSS5.7AI score0.00144EPSS
SaveExploits0References2
OSV
OSV
•added 2025/10/28 11:48 a.m.•12 views

CVE-2025-40069 drm/msm: Fix obj leak in VM_BIND error path

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix obj leak in VMBIND error path If we fail a handle-lookup part way thru, we need to drop the already obtained obj references. Patchwork: https://patchwork.freedesktop.org/patch/669784/...

7.8CVSS6.4AI score
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/10/28 6:59 a.m.•24 views

CVE-2025-12235

A vulnerability was found in Tenda CH22 1.0.0.1. This vulnerability affects the function fromSetIpBind of the file /goform/SetIpBind. The manipulation of the argument page results in buffer overflow. The attack must originate from the local network. The exploit has been made public and could be...

8.6CVSS6.5AI score0.05232EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/10/28 12:00 a.m.•10 views

PT-2025-49445

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s drm/mediatek subsystem that could lead to a use-after-free condition during device unbinding. A recent fix for device reference leaks during bind...

4.6CVSS6.1AI score0.0019EPSS
SaveExploits0
Rows per page
Query Builder