Lucene search
+L

186 matches found

ATTACKERKB
ATTACKERKB
added 2025/02/26 5:15 p.m.6 views

CVE-2025-1634

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

7.5CVSS7.3AI score0.00759EPSS
SaveExploits0References11
OSV
OSV
added 2025/02/26 4:56 p.m.3 views

CVE-2025-1634 Io.quarkus:quarkus-resteasy: memory leak in quarkus resteasy classic when client requests timeout

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

7.5CVSS7.2AI score0.00759EPSS
SaveExploits0References14
OSV
OSV
added 2025/02/26 7:0 a.m.30 views

UBUNTU-CVE-2022-49198

In the Linux kernel, the following vulnerability has been resolved: mptcp: Fix crash due to tcptsortedanchor was initialized before release skb Got crash when doing pressure test of mptcp: =========================================================================== dstrelease: dst:ffffa06ce6e5c058...

5.5CVSS5.8AI score0.00245EPSS
SaveExploits0References7
OSV
OSV
added 2025/02/26 6:37 a.m.22 views

UBUNTU-CVE-2021-47655

In the Linux kernel, the following vulnerability has been resolved: media: venus: vdec: fixed possible memory leak issue The venushelperallocdpbbufs implementation allows an early return on an error path when checking the id from idaallocmin which would not release the earlier buffer allocation...

5.5CVSS5.9AI score0.00231EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/02/26 12:0 a.m.4 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from tcptsortedanchor being initialized before releasing the skb, causing a crash...

5.5CVSS5.1AI score0.00245EPSS
SaveExploits0References5
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.2 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: atm: idt77252: prevent use after free in dequeuerx We cannot dereference “skb” after calling vcc-push, because the skb is released...

7.8CVSS6.3AI score0.00252EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.2 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ext4: fixed an issue where the buffer of extents was freed twice. In ext4exttrytomergeup, the path1.pbh was set to NULL after it was released. Otherwise, it might be released twice. An example of what triggers this is as...

7.8CVSS6.7AI score0.00321EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2024/12/28 3:50 a.m.5 views

SUSE CVE-2024-53191

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix warning when unbinding If there is an error during some initialization related to firmware, the buffers dp-txringi.txstatus are released. However this is released again when the device is unbinded ath12kpci, and...

6.7CVSS7.7AI score0.0024EPSS
SaveExploits0References13
CNNVD
CNNVD
added 2024/12/27 12:0 a.m.4 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a skb release issue caused by hcidevcdappend in the Bluetooth btmtk subsystem. No detailed vulnerability...

7.8CVSS8.3AI score0.00221EPSS
SaveExploits0References3
NVD
NVD
added 2024/12/02 11:15 a.m.14 views

CVE-2024-33040

Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer release and buffer access...

7CVSS0.00089EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/02 10:18 a.m.20 views

CVE-2024-33040 Use After Free in Camera Driver

Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer release and buffer access...

6.7CVSS0.00089EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2024/10/21 10:38 p.m.15 views

CVE-2024-49882

In the Linux kernel, the following vulnerability has been resolved: ext4: fix double brelse the buffer of the extents path In ext4exttrytomergeup, set path1.pbh to NULL after it has been released, otherwise it may be released twice. An example of what triggers this is as follows: split2 map split...

6.7CVSS7.1AI score0.00321EPSS
SaveExploits0References4
OSV
OSV
added 2024/10/21 6:15 p.m.3 views

DEBIAN-CVE-2024-49882

In the Linux kernel, the following vulnerability has been resolved: ext4: fix double brelse the buffer of the extents path In ext4exttrytomergeup, set path1.pbh to NULL after it has been released, otherwise it may be released twice. An example of what triggers this is as follows: split2 map split...

7.8CVSS6.2AI score0.00321EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/21 6:1 p.m.184 views

CVE-2024-49882

CVE-2024-49882 : In the Linux kernel’s ext4 code, a double free/UAF issue was fixed in ext4_ext_try_to_merge_up() where path[1].p_bh could be freed twice if not NULL after release. The problem manifested as a warning “brelse a buffer twice” during writeback when ext4 extents were merged and buffe...

7.8CVSS7.5AI score0.00321EPSS
SaveExploits0References11Affected Software1
CNNVD
CNNVD
added 2024/10/21 12:0 a.m.6 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from incorrect handling in the e100xmitprepare function, which could cause a skb to be incorrectly released on a...

7.8CVSS6.5AI score0.00237EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/10/14 12:0 a.m.5 views

PT-2025-20401

Name of the Vulnerable Software and Affected Versions Eclipse Jetty versions 9.4.0 through 9.4.56 Description A buffer can be incorrectly released when Eclipse Jetty encounters a gzip error while inflating a request body. This can result in corrupted and/or inadvertent sharing of data between...

7.2CVSS7.1AI score0.0103EPSS
SaveExploits1References43
Microsoft CVE
Microsoft CVE
added 2024/10/12 7:0 a.m.3 views

s390/sclp: Prevent release of buffer in I/O

...

5.5CVSS6.7AI score0.00218EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2024/09/05 2:46 a.m.3 views

SUSE CVE-2024-44969

In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Prevent release of buffer in I/O When a task waiting for completion of a Store Data operation is interrupted, an attempt is made to halt this operation. If this attempt fails due to a hardware or firmware problem, ther...

5.5CVSS6.5AI score0.00218EPSS
SaveExploits0References17
OSV
OSV
added 2024/09/04 7:15 p.m.13 views

AZL-49881 CVE-2024-44969 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Prevent release of buffer in I/O When a task waiting for completion of a Store Data operation is interrupted, an attempt is made to halt this operation. If this attempt fails due to a hardware or firmware problem, ther...

5.5CVSS6.8AI score0.00218EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/04 7:15 p.m.5 views

UBUNTU-CVE-2024-44969

In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Prevent release of buffer in I/O When a task waiting for completion of a Store Data operation is interrupted, an attempt is made to halt this operation. If this attempt fails due to a hardware or firmware problem, ther...

5.5CVSS6.3AI score0.00218EPSS
SaveExploits0References27
Rows per page
Query Builder