Lucene search
+L

319172 matches found

Cvelist
Cvelist
added 2026/07/25 8:49 a.m.31 views

CVE-2026-64300 perf/aux: Fix page UAF in map_range()

In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix page UAF in maprange maprange reads rb-auxpages, rb-auxnrpages and rb-auxpgoff via perfmmaptopage while holding only event-mmapmutex. Those fields are serialized by rb-auxmutex, and mmapmutex is per event. Thus, two...

7.8CVSS0.00162EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/25 8:49 a.m.7 views

EUVD-2026-49005

In the Linux kernel, the following vulnerability has been resolved: iommufd: Use sizeofhdr instead of sizeofhdr in veventq read The bound-check in iommufdveventqfopsread for the normal vEVENT path uses sizeofhdr where the surrounding code uses sizeofhdr: if !veventforlosteventsheadercur &&...

5.8AI score0.00162EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/07/25 8:49 a.m.8 views

CVE-2026-64288

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB VNCR TLB invalidation occurs from MMU notifiers or TLBI instructions, and either can race against a vcpu not being onlined yet no pseudo-TLB allocated. Similarly, the TLB...

5.7AI score0.00198EPSS
SaveExploits0
EUVD
EUVD
added 2026/07/25 8:49 a.m.8 views

EUVD-2026-48996

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits Move the handling of fastpath userspace exits into vendor code to ensure KVM runs vendor specific operations that need to run before userspace gains...

5.9AI score0.00159EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/25 8:49 a.m.14 views

CVE-2026-64284

CVE-2026-64284 — Linux kernel (KVM/x86): The vulnerability involves moving the handling of fastpath userspace exits into vendor code so KVM can run vendor-specific operations before userspace gains control of the vCPU. The description notes that, for VMX (and soon SVM), KVM must flush the PML buf...

7.1CVSS5.9AI score0.00159EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/07/25 8:49 a.m.7 views

EUVD-2026-48982

In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - reject an oversized device packet size mms114interrupt reads a packet of touch data from the device into a fixed-size on-stack buffer struct mms114touch touchMMS114MAXTOUCH; which holds MMS114MAXTOUCH 10 events of...

5.9AI score0.002EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/07/25 8:49 a.m.29 views

CVE-2026-64270 Input: mms114 - reject an oversized device packet size

In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - reject an oversized device packet size mms114interrupt reads a packet of touch data from the device into a fixed-size on-stack buffer struct mms114touch touchMMS114MAXTOUCH; which holds MMS114MAXTOUCH 10 events of...

0.002EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/25 8:49 a.m.6 views

CVE-2026-64268 RDMA/siw: bound Read Response placement to the RREAD length

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Response placement to the RREAD length In drivers/infiniband/sw/siw/siwqprx.c, siwprocrresp places each inbound Read Response DDP segment at sge-laddr + wqe-processed and then accumulates wqe-processed, but i...

9.8CVSS6AI score
SaveExploits0References11
EUVD
EUVD
added 2026/07/25 8:49 a.m.12 views

EUVD-2026-48980

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Response placement to the RREAD length In drivers/infiniband/sw/siw/siwqprx.c, siwprocrresp places each inbound Read Response DDP segment at sge-laddr + wqe-processed and then accumulates wqe-processed, but i...

6AI score0.00695EPSS
SaveExploits0References8
CVE
CVE
added 2026/07/25 8:49 a.m.26 views

CVE-2026-64268

CVE-2026-64268 concerns a Linux kernel vulnerability in the SIW (RDMA) path where Read Response segments could overrun the sink buffer. The issue resides in siw_qp_rx.c (siw_proc_rresp) which places inbound Read Response DDP segments at sge->laddr + wqe->processed and accumulates processed ...

9.8CVSS6AI score0.00695EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/07/25 8:49 a.m.35 views

CVE-2026-64268 RDMA/siw: bound Read Response placement to the RREAD length

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Response placement to the RREAD length In drivers/infiniband/sw/siw/siwqprx.c, siwprocrresp places each inbound Read Response DDP segment at sge-laddr + wqe-processed and then accumulates wqe-processed, but i...

9.8CVSS0.00695EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/07/25 8:49 a.m.9 views

EUVD-2026-48979

In the Linux kernel, the following vulnerability has been resolved: fuse: avoid 32-bit prune notification count wrap FUSENOTIFYPRUNE validates the nodeid payload length with: size - sizeofoutarg != outarg.count sizeofu64 On 32-bit kernels, sizet is also 32 bits, so the daemon-controlled count...

5.7AI score0.00198EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
added 2026/07/25 8:7 a.m.12 views

Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting

...

6.5CVSS5.8AI score0.00227EPSS
SaveExploits0
OSV
OSV
added 2026/07/25 3:14 a.m.5 views

JLSEC-2026-788 Buffer overflow in gawk's `readdir.c` can cause denial of service and possible code execution

Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk ftype routine. This issue could be used to crash the program and potentially to achieve code execution, although the latter has not been confirmed to be feasible. It affects gawk in versions 5.4.0 and below...

7.5CVSS5.8AI score0.00291EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/25 12:28 a.m.7 views

CVE-2026-66374

Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ DNS-over-QUIC receive path...

8.1CVSS6.7AI score0.00389EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/25 12:28 a.m.49 views

CVE-2026-66374

Knot Resolver is affected by a heap-based buffer overflow in the DoQ (DNS-over-QUIC) receive path that allows remote code execution on versions prior to 6.4.1. The vulnerability arises in the handling of DoQ traffic, enabling an attacker to trigger arbitrary code execution through crafted input s...

8.1CVSS6.7AI score0.00389EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/07/25 12:13 a.m.10 views

SUSE CVE-2026-64252

In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Prevent initial console buffer from landing in XKPHYS In 64-bit configurations calling the initial console output handler from a kernel thread other than the initial one will result in a situation where the stack has...

6AI score0.00165EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/25 12:0 a.m.20 views

PT-2026-64607

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the SMB client. A response-bearing attempt can return a replayable error and free its response buffer. If the SMB2 query info init function fails before the...

9.8CVSS6AI score0.00457EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/07/25 12:0 a.m.9 views

PT-2026-64588

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stack buffer overflow exists in the hid-goodix-spi driver. The function goodix hid set raw report utilizes a 128-byte stack buffer tmp buf to build a protocol frame, consisting of an...

7.8CVSS6AI score0.00142EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/07/25 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-64495

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: gyro: bmg160: bail out when bandwidth/filter is not in table bmg160getfilter walks bmg160sampfreqtable looking for the entry matching the bwbits value rea...

5.8AI score0.00195EPSS
SaveExploits0References3
Rows per page
Query Builder