Lucene search
+L

35 matches found

RedHat Linux
RedHat Linux
added 2026/01/19 12:8 p.m.6 views

kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGACMDMAXDATASIZE This data originates from userspace and is used in buffer offset calculations which could potentially overflow causing an out-of-bounds access...

7.8CVSS5.9AI score0.00232EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/01/19 12:0 a.m.17 views

RHEL 9 : kernel (RHSA-2026:0793)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:0793 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/xe: Make dma-fences...

9.8CVSS8.1AI score0.00519EPSS
SaveExploits0References12
RedHat Linux
RedHat Linux
added 2026/01/12 9:30 a.m.3 views

kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGACMDMAXDATASIZE This data originates from userspace and is used in buffer offset calculations which could potentially overflow causing an out-of-bounds access...

7.8CVSS5.9AI score0.00232EPSS
SaveExploits0References5
Microsoft CVE
Microsoft CVE
added 2025/12/08 9:1 a.m.8 views

drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE

...

7.8CVSS7AI score0.00232EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/12/07 9:55 p.m.12 views

CVE-2025-40277

No description is available for this CVE. Mitigation To mitigate this issue, prevent module vmwgfx from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically...

7.8CVSS6.3AI score0.00232EPSS
SaveExploits0References4
NVD
NVD
added 2025/12/06 10:15 p.m.4 views

CVE-2025-40277

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGACMDMAXDATASIZE This data originates from userspace and is used in buffer offset calculations which could potentially overflow causing an out-of-bounds access...

7.8CVSS0.00232EPSS
SaveExploits0References8
OSV
OSV
added 2025/12/06 10:15 p.m.13 views

DEBIAN-CVE-2025-40277

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGACMDMAXDATASIZE This data originates from userspace and is used in buffer offset calculations which could potentially overflow causing an out-of-bounds access...

7.8CVSS6AI score0.00232EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/06 9:51 p.m.101 views

CVE-2025-40277

CVE-2025-40277 is a Linux kernel vulnerability affecting the DRM vmwgfx driver. The issue arises from validating the command header size against SVGA_CMD_MAX_DATASIZE, where user-supplied data used in buffer offset calculations could overflow and lead to an out-of-bounds access. Connected sources...

7.8CVSS6.6AI score0.00232EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2025/12/06 9:51 p.m.31 views

CVE-2025-40277 drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGACMDMAXDATASIZE This data originates from userspace and is used in buffer offset calculations which could potentially overflow causing an out-of-bounds access...

7.8CVSS0.00232EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2025/12/06 9:51 p.m.10 views

CVE-2025-40277

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGACMDMAXDATASIZE This data originates from userspace and is used in buffer offset calculations which could potentially overflow causing an out-of-bounds access...

7.8CVSS6AI score0.00232EPSS
SaveExploits0
OSV
OSV
added 2025/07/01 3:15 p.m.6 views

CVE-2025-50404

Intelbras RX1500 Router v2.2.17 and before is vulnerable to Integer Overflow. The websReadEvent function incorrectly uses the int type when processing the "command" field of the http header, causing the array to cross the boundary and overwrite other fields in the array...

5.3CVSS5.4AI score0.06565EPSS
SaveExploits1References2
OSV
OSV
added 2021/06/02 3:15 p.m.1 views

DEBIAN-CVE-2019-12067

The ahcicommitbuf function in ide/ahci.c in QEMU allows attackers to cause a denial of service NULL dereference when the command header 'ad-curcmd' is null...

6.5CVSS6.3AI score0.00307EPSS
SaveExploits0References1
OSV
OSV
added 2021/06/02 3:15 p.m.4 views

CVE-2019-12067

The ahcicommitbuf function in ide/ahci.c in QEMU allows attackers to cause a denial of service NULL dereference when the command header 'ad-curcmd' is null...

6.5CVSS6.5AI score
SaveExploits0References5
OSV
OSV
added 2021/06/02 3:15 p.m.3 views

UBUNTU-CVE-2019-12067

The ahcicommitbuf function in ide/ahci.c in QEMU allows attackers to cause a denial of service NULL dereference when the command header 'ad-curcmd' is null...

6.5CVSS6.7AI score0.00307EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2021/06/02 2:18 p.m.40 views

CVE-2019-12067

The ahcicommitbuf function in ide/ahci.c in QEMU allows attackers to cause a denial of service NULL dereference when the command header 'ad-curcmd' is null...

6.5CVSS5.9AI score0.00307EPSS
SaveExploits0
Rows per page
Query Builder