Lucene search
K

17 matches found

Debian CVE
Debian CVE
added 2026/05/01 1:56 p.m.2 views

CVE-2026-31718

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbdclosefd via durable scavenger When a durable file handle survives session disconnect TCP close without SMB2LOGOFF, sessionfdcheck sets fp-conn = NULL to preserve the handle for later reconnection...

9.8CVSS5.7AI score0.00066EPSS
Exploits0
CNNVD
CNNVD
added 2026/05/01 12:0 a.m.4 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the persistent cleaner in ksmbd, which reuses memory after release in ksmbdclosefd, potentially...

9.8CVSS5.8AI score0.00066EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2025/12/25 12:58 a.m.2 views

SUSE CVE-2023-53990

In the Linux kernel, the following vulnerability has been resolved: SMB3: Add missing locks to protect deferred close file list cifsdeldeferredclose function has a critical section which modifies the deferred close file list. We must acquire deferredlock before calling cifsdeldeferredclose functi...

5.5CVSS6.6AI score0.00034EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/12/24 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a lack of lock protection when modifying a delayed close file list, which could lead to data contention...

6AI score0.00034EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2025/11/12 12:0 a.m.1 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990752)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990752 advisory. In the Linux kernel, the following vulnerability has been resolved: fs: prevent out-of-bounds array speculation when closing a file descriptor Google-Bug-Id: 1141993...

7.1CVSS6.2AI score0.00056EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-55453

Malicious code in bioql PyPI...

5.8AI score0.00078EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-37952

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: Fix UAF in closefiletableids A use-after-free is possible if one thread destroys the file via ksmbdclosefd while another thread holds a reference to it...

7.8CVSS6.7AI score0.00067EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/05/20 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from post-release reuse in closefiletableids...

7.8CVSS6.4AI score0.00067EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/11/26 7:19 p.m.3 views

runc: file descriptor leak

A file descriptor leak issue was found in the runc package. While a user performs OCLOEXEC all file descriptors before executing the container code, the file descriptor is open when performing setcwd2, which means that the reference can be kept alive in the container by configuring the working...

8.6CVSS7AI score0.05076EPSS
Exploits18References6
OSV
OSV
added 2024/11/08 6:15 a.m.2 views

UBUNTU-CVE-2024-50187

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Stop the active perfmon before being destroyed Upon closing the file descriptor, the active performance monitor is not stopped. Although all perfmons are destroyed in vc4perfmonclosefile, the active performance monitor's...

5.5CVSS6.2AI score0.00016EPSS
Exploits0References21
Positive Technologies
Positive Technologies
added 2024/09/13 12:0 a.m.3 views

PT-2024-40571 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions: chunk free object, file close file, and sclose. No...

7AI score
Exploits0References2
RedHat Linux
RedHat Linux
added 2024/07/17 6:49 p.m.2 views

runc: file descriptor leak

A file descriptor leak issue was found in the runc package. While a user performs OCLOEXEC all file descriptors before executing the container code, the file descriptor is open when performing setcwd2, which means that the reference can be kept alive in the container by configuring the working...

8.6CVSS7AI score0.05076EPSS
Exploits18References6
Microsoft CVE
Microsoft CVE
added 2023/04/25 7:0 a.m.6 views

Malicious HTTP requests could close arbitrary opening file descriptors in cloud-hypervisor

...

4.9CVSS5.2AI score0.0023EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2022/04/13 3:33 p.m.1 views

golang: syscall: don't close fd 0 on ForkExec error

There's a flaw in golang's syscall.ForkExec interface. An attacker who manages to first cause a file descriptor exhaustion for the process, then cause syscall.ForkExec to be called repeatedly, could compromise data integrity and/or confidentiality in a somewhat uncontrolled way in programs linked...

5.8CVSS7.1AI score0.0022EPSS
Exploits0References5
OSV
OSV
added 2021/12/17 12:0 a.m.11 views

OSV-2021-1708 UNKNOWN READ in chunk_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42491 Crash type: UNKNOWN READ Crash state: chunkfreeobject pdficlosefile pdfidereference...

7.2AI score
Exploits0References1
RedHat Linux
RedHat Linux
added 2021/12/15 4:33 p.m.0 views

golang: syscall: don't close fd 0 on ForkExec error

There's a flaw in golang's syscall.ForkExec interface. An attacker who manages to first cause a file descriptor exhaustion for the process, then cause syscall.ForkExec to be called repeatedly, could compromise data integrity and/or confidentiality in a somewhat uncontrolled way in programs linked...

5.8CVSS7.1AI score0.0022EPSS
Exploits0References5
Check Point Advisories
Check Point Advisories
added 2012/11/18 12:0 a.m.2 views

SCADA DNP3 close file request

...

7AI score
Exploits0
Rows per page
Query Builder