Lucene search
K

19 matches found

Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.6 views

PT-2026-43722

In the Linux kernel, the following vulnerability has been resolved: ata: libata-scsi: avoid Non-NCQ command starvation When a non-NCQ command is issued while NCQ commands are being executed, ata scsi qc issue indicates to the SCSI layer that the command issuing should be deferred by returning SCS...

5.9AI score0.00024EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/05/27 12:0 a.m.2 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the ata/libata-scsi module potentially causing non-NCQ command starvation under continuous load o...

5.8AI score0.00024EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2026/05/09 2:40 a.m.2 views

SUSE CVE-2026-43220

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: serialize sequence allocation under concurrent TLB invalidations With concurrent TLB invalidations, completion wait randomly gets timed out because cmdsemval was incremented outside the IOMMU spinlock, allowing...

5.7AI score0.00023EPSS
Exploits1References3
EUVD
EUVD
added 2026/05/06 12:30 p.m.2 views

EUVD-2026-27780

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: serialize sequence allocation under concurrent TLB invalidations With concurrent TLB invalidations, completion wait randomly gets timed out because cmdsemval was incremented outside the IOMMU spinlock, allowing...

5.7AI score0.00023EPSS
Exploits1References4
NVD
NVD
added 2026/05/06 12:16 p.m.1 views

CVE-2026-43220

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: serialize sequence allocation under concurrent TLB invalidations With concurrent TLB invalidations, completion wait randomly gets timed out because cmdsemval was incremented outside the IOMMU spinlock, allowing...

5.5CVSS0.00023EPSS
Exploits1References5
OSV
OSV
added 2026/05/06 12:16 p.m.2 views

DEBIAN-CVE-2026-43220

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: serialize sequence allocation under concurrent TLB invalidations With concurrent TLB invalidations, completion wait randomly gets timed out because cmdsemval was incremented outside the IOMMU spinlock, allowing...

5.5CVSS5.7AI score0.00023EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/05/06 11:28 a.m.2 views

CVE-2026-43220

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: serialize sequence allocation under concurrent TLB invalidations With concurrent TLB invalidations, completion wait randomly gets timed out because cmdsemval was incremented outside the IOMMU spinlock, allowing...

5.5CVSS5.7AI score0.00023EPSS
Exploits1References6Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/06 12:0 a.m.6 views

PT-2026-37560

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the AMD IOMMU driver where concurrent Translation Lookaside Buffer TLB invalidations can cause completion waits to time out randomly. This occurs because the cmd sem v...

5.5CVSS5.8AI score0.00023EPSS
Exploits1References12
OSV
OSV
added 2025/02/26 7:0 a.m.1 views

UBUNTU-CVE-2022-49136

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Fix queuing commands when HCIUNREGISTER is set hcicmdsyncqueue shall return an error if HCIUNREGISTER flag has been set as that means hciunregisterdev has been called so it will likely cause a uaf after the...

7.8CVSS6.2AI score0.001EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/02/26 1:55 a.m.11 views

CVE-2022-49136 Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Fix queuing commands when HCIUNREGISTER is set hcicmdsyncqueue shall return an error if HCIUNREGISTER flag has been set as that means hciunregisterdev has been called so it will likely cause a uaf after the...

0.001EPSS
Exploits0References2
OSV
OSV
added 2025/02/26 1:55 a.m.7 views

CVE-2022-49136 Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Fix queuing commands when HCIUNREGISTER is set hcicmdsyncqueue shall return an error if HCIUNREGISTER flag has been set as that means hciunregisterdev has been called so it will likely cause a uaf after the...

7.8CVSS5.2AI score0.001EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/02/26 1:55 a.m.12 views

CVE-2022-49136 Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Fix queuing commands when HCIUNREGISTER is set hcicmdsyncqueue shall return an error if HCIUNREGISTER flag has been set as that means hciunregisterdev has been called so it will likely cause a uaf after the...

7.5AI score0.001EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2025/02/26 1:55 a.m.8 views

CVE-2022-49136

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Fix queuing commands when HCIUNREGISTER is set hcicmdsyncqueue shall return an error if HCIUNREGISTER flag has been set as that means hciunregisterdev has been called so it will likely cause a uaf after the...

7.8CVSS5.3AI score0.001EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2023/05/09 10:4 a.m.1 views

kernel: Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set

A vulnerability was found in the Linux kernel's Bluetooth subsystem in the hcicmdsyncqueue function. There was a missing check for whether the HCIUNREGISTER flag had been set, meaning that commands were still sent even as the Bluetooth device was being unregistered. This issue could lead to a...

7.8CVSS6.8AI score0.001EPSS
Exploits0References5
OSV
OSV
added 2016/04/12 2:0 a.m.1 views

DEBIAN-CVE-2016-1568

Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service instance crash or possibly execute arbitrary code via an invalid AHCI Native Command Queuing NCQ AIO command...

8.8CVSS9.1AI score0.00337EPSS
Exploits0References1
Cvelist
Cvelist
added 2016/04/08 4:0 p.m.18 views

CVE-2016-1568

Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service instance crash or possibly execute arbitrary code via an invalid AHCI Native Command Queuing NCQ AIO command...

9.4AI score0.00337EPSS
Exploits0References13
RedHat Linux
RedHat Linux
added 2016/01/28 3:56 p.m.2 views

Qemu: ide: ahci use-after-free vulnerability in aio port commands

A use-after-free flaw was found in the way QEMU's IDE AHCI emulator processed certain AHCI Native Command Queuing NCQ AIO commands. A privileged guest user could use this flaw to crash the QEMU process instance or, potentially, execute arbitrary code on the host with privileges of the QEMU proces...

8.8CVSS7.7AI score0.00337EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2016/01/28 3:55 p.m.40 views

Important: Red Hat Security Advisory: qemu-kvm-rhev security update

Updated qemu-kvm-rhev packages that fix two security issues are now available for Red Hat Enterprise Linux OpenStack Platform 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

8.8CVSS7.5AI score0.00343EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2016/01/28 3:55 p.m.2 views

Qemu: ide: ahci use-after-free vulnerability in aio port commands

A use-after-free flaw was found in the way QEMU's IDE AHCI emulator processed certain AHCI Native Command Queuing NCQ AIO commands. A privileged guest user could use this flaw to crash the QEMU process instance or, potentially, execute arbitrary code on the host with privileges of the QEMU proces...

8.8CVSS7.7AI score0.00337EPSS
Exploits0References4
Rows per page
Query Builder