Lucene search
+L

1155 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•0 views

CVE-2023-54005: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: binder: fix memory leak in binderinit In binderinit, the destruction of binderallocshrinkerinit is not performed in the wrong path, which will cause memory leaks. So this commit introduces binderallocshrinkerexit and calls it in...

5.6AI score0.00211EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/12/24 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2023-54157

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - binder: fix UAF of alloc-vma in race with munmap cmllamas: clean forward port from commit 015ac18be7de binder: fix UAF of alloc-vma in race with munmap in 5.10...

7.8CVSS7.6AI score0.0015EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•3 views

CVE-2023-54157: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF of alloc-vma in race with munmap cmllamas: clean forward port from commit 015ac18be7de "binder: fix UAF of alloc-vma in race with munmap" in 5.10 stable. It is needed in mainline after the revert of commit...

7.8CVSS7.4AI score0.0015EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/24 12:00 a.m.•12 views

PT-2025-52962

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the binder init function within the Linux kernel. The issue stems from the incomplete destruction of binder alloc shrinker init, leading to memory leaks. The fix...

5.7AI score0.00211EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/12/17 12:24 a.m.•12 views

SUSE CVE-2025-68260

In the Linux kernel, the following vulnerability has been resolved: rustbinder: fix race condition on deathlist Rust Binder contains the following unsafe operation: // SAFETY: A NodeDeath is never inserted into the death list // of any node other than its owner, so it is either in this // death...

5.5CVSS6AI score0.00215EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/12/17 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2025-68260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rustbinder: fix race condition on deathlist Rust Binder contains the following unsafe operation: // SAFETY: A NodeDeath is never inserted into the death list //...

7.8CVSS6.1AI score0.00215EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/12/16 3:30 p.m.•13 views

EUVD-2025-203744

In the Linux kernel, the following vulnerability has been resolved: rustbinder: fix race condition on deathlist Rust Binder contains the following unsafe operation: // SAFETY: A NodeDeath is never inserted into the death list // of any node other than its owner, so it is either in this // death...

6AI score0.00215EPSS
SaveExploits0References3
NVD
NVD
•added 2025/12/16 3:15 p.m.•16 views

CVE-2025-68260

In the Linux kernel, the following vulnerability has been resolved: rustbinder: fix race condition on deathlist Rust Binder contains the following unsafe operation: // SAFETY: A NodeDeath is never inserted into the death list // of any node other than its owner, so it is either in this // death...

7.8CVSS0.00215EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2025/12/16 3:15 p.m.•13 views

CVE-2025-68260

In the Linux kernel, the following vulnerability has been resolved: rustbinder: fix race condition on deathlist Rust Binder contains the following unsafe operation: // SAFETY: A NodeDeath is never inserted into the death list // of any node other than its owner, so it is either in this // death...

7.8CVSS6AI score0.00215EPSS
SaveExploits0References4
OSV
OSV
•added 2025/12/16 3:15 p.m.•15 views

UBUNTU-CVE-2025-68260

In the Linux kernel, the following vulnerability has been resolved: rustbinder: fix race condition on deathlist Rust Binder contains the following unsafe operation: // SAFETY: A NodeDeath is never inserted into the death list // of any node other than its owner, so it is either in this // death...

7.8CVSS6.1AI score0.00215EPSS
SaveExploits0References5
CVE
CVE
•added 2025/12/16 2:45 p.m.•80 views

CVE-2025-68260

CVE-2025-68260 is tied to a Linux kernel vulnerability in the Rust Binder, where an unsafe removal of a NodeDeath from a death_list can race with other threads. The root cause, per the description, is that Node::release currently moves items to a local stack list under a lock and then iterates th...

7.8CVSS6AI score0.00215EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/16 2:45 p.m.•47 views

CVE-2025-68260 rust_binder: fix race condition on death_list

In the Linux kernel, the following vulnerability has been resolved: rustbinder: fix race condition on deathlist Rust Binder contains the following unsafe operation: // SAFETY: A NodeDeath is never inserted into the death list // of any node other than its owner, so it is either in this // death...

7.8CVSS0.00215EPSS
SaveExploits0References2
OSV
OSV
•added 2025/12/16 2:45 p.m.•14 views

CVE-2025-68260 rust_binder: fix race condition on death_list

In the Linux kernel, the following vulnerability has been resolved: rustbinder: fix race condition on deathlist Rust Binder contains the following unsafe operation: // SAFETY: A NodeDeath is never inserted into the death list // of any node other than its owner, so it is either in this // death...

7.8CVSS6.2AI score
SaveExploits0References5
CNNVD
CNNVD
•added 2025/12/16 12:00 a.m.•17 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a contention condition in deathlist in rustbinder...

6AI score0.00215EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/12/15 12:00 a.m.•18 views

The vulnerability of the binder_release_work() function in the drivers/android/binder.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the binderreleasework function in the drivers/android/binder.c module of the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00189EPSS
SaveExploits0References6Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/12/11 12:00 a.m.•6 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991165)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991165 advisory. In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF of ref-proc caused by race condition A transaction of type BINDERTYPEWEAKHANDLE c...

7.8CVSS7AI score0.00168EPSS
SaveExploits0References4
Packet Storm
Packet Storm
•added 2025/12/09 12:00 a.m.•225 views

📄 Android 7 / 8 / 8.1 Pointer Disclosure

A flaw in Android's Binder IPC allowed applications to craft Parcels where binder-object metadata overlapped with string data. When unmarshalling, the kernel inserted genuine kernel pointers into attacker-controlled buffers. These could then be echoed back through services like clipboard, resulti...

7.8CVSS6.7AI score0.00096EPSS
SaveExploits1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/12/04 2:43 p.m.•41 views

Security Bulletin: Multiple vulnerabilities in IBM Controller

Summary Multiple vulnerabilities were addressed in IBM Controller 11.1.2. Vulnerability Details CVEID:CVE-2024-38820 DESCRIPTION: The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase has some Locale dependent exceptions that could...

9.3CVSS7AI score0.16912EPSS
SaveExploits1Affected Software2
Microsoft CVE
Microsoft CVE
•added 2025/11/25 1:02 a.m.•27 views

Timing Side-Channel in PSK Binder Verification

...

4.3CVSS7AI score0.00256EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/11/22 11:12 p.m.•15 views

CVE-2025-11932

The server previously verified the TLS 1.3 PSK binder using a non-constant time method which could potentially leak information about the PSK binder...

4.3CVSS6.6AI score0.00256EPSS
SaveExploits0References1
Rows per page
Query Builder