Lucene search
+L

472 matches found

BDU FSTEC
BDU FSTEC
•added 2024/01/09 12:00 a.m.•15 views

The vulnerability of the bt_sock_recvmsg() function in the net/bluetooth/af_bluetooth.c module of the Linux kernel’s Bluetooth driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the btsockrecvmsg function in the net/bluetooth/afbluetooth.c module of the Linux kernel’s Bluetooth driver is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to compromise the...

10CVSS6.6AI score0.00258EPSS
SaveExploits0References15Affected Software6
BDU FSTEC
BDU FSTEC
•added 2024/01/09 12:00 a.m.•21 views

The vulnerability of the atalk_ioctl() function in the net/appletalk/ddp.c module, which is part of the AppleTalk protocol implementation in the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the atalkioctl function in the net/appletalk/ddp.c module, which implements the Appletalk protocol in the Linux kernel, is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to...

7CVSS6.3AI score0.00308EPSS
SaveExploits0References14Affected Software3
BDU FSTEC
BDU FSTEC
•added 2024/01/09 12:00 a.m.•25 views

The vulnerability of the do_vcc_ioctl() function in the net/atm/ioctl.c module, which implements the ATM network protocol in the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dovccioctl function in the net/atm/ioctl.c module, which implements the ATM network protocol in the Linux operating system, is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attack...

7.1CVSS6.3AI score0.0051EPSS
SaveExploits0References15Affected Software4
BDU FSTEC
BDU FSTEC
•added 2023/11/21 12:00 a.m.•10 views

The vulnerability of the `qxl_gem_object_create_with_handle()` function in the `drivers/gpu/drm/qxl/qxl_gem.c` file of the Linux operating system’s kernel driver QXL allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qxlgemobjectcreatewithhandle function in the drivers/gpu/drm/qxl/qxlgem.c driver of the Linux operating system is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to...

7.5CVSS6.4AI score0.00417EPSS
SaveExploits0References24Affected Software2
RedHat Linux
RedHat Linux
•added 2023/11/07 9:03 a.m.•15 views

kernel: iommufd: IOMMUFD_DESTROY should not increase the refcount

A race condition was identified in the iommufd subsystem of the Linux kernel where the IOMMUFDDESTROY command incorrectly increments an object’s reference count without holding the expected exclusive synchronization destroyrwsem. This violates the assumption that temporary reference count...

7.8CVSS5.9AI score0.00143EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2023/11/07 9:03 a.m.•18 views

kernel: net/sched: flower: fix filter idr initialization

A flaw was found in the Linux kernel’s networking traffic control flower classifier. The initialization of the filter IDR was moved too early in the flchange path, allowing concurrent access by multiple users while the structure was still in an inconsistent state. Under certain conditions, this...

7.8CVSS5.5AI score0.00144EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2023/10/09 12:00 a.m.•16 views

The vulnerability of the pfn_swap_entry_to_page() function in the include/linux/swapops.h module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the pfnswapentrytopage function in the include/linux/swapops.h module of the Linux kernel is related to concurrent access to resources race condition. Exploiting this vulnerability could allow a attacker to cause a service failure...

4.7CVSS6.2AI score0.00183EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/09/29 12:00 a.m.•25 views

The vulnerability of the __ip_set_put_netlink() function in the net/netfilter/ipset/ip_set_core.c module of the netfilter kernel of the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the ipsetputnetlink function in the net/netfilter/ipset/ipsetcore.c module of the netfilter component of the Linux operating system is related to concurrent access to resources race condition. Exploiting this vulnerability could allow a attacker to cause service interruptions...

4.7CVSS6.4AI score0.00274EPSS
SaveExploits1References14Affected Software4
BDU FSTEC
BDU FSTEC
•added 2023/08/01 12:00 a.m.•12 views

The vulnerability of the idt77252_exit() function in the drivers/atm/idt77252.c file of the ATM network driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the idt77252exit function in the drivers/atm/idt77252.c file of the ATM network driver for the Linux operating system is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to...

7CVSS6.6AI score0.00426EPSS
SaveExploits1References27Affected Software3
BDU FSTEC
BDU FSTEC
•added 2023/07/21 12:00 a.m.•13 views

The vulnerability of the nft_chain_lookup_byid() function in the net/netfilter/nf_tables_api.c module of the Linux kernel’s netfilter packet filtering subsystem allows a attacker to escalate their privileges and compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nftchainlookupbyid function in the net/netfilter/nftablesapi.c module of the Linux kernel’s packet filtering subsystem is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker t...

7.8CVSS6.5AI score0.0189EPSS
SaveExploits1References15Affected Software5
BDU FSTEC
BDU FSTEC
•added 2023/06/30 12:00 a.m.•16 views

The vulnerability of the dm1105_remove() function in the drivers/media/pci/dm1105/dm1105.c file of the TV Tuner driver on the DM1105 chip in the Linux operating system can be exploited by an attacker, thereby compromising the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dm1105remove function in the drivers/media/pci/dm1105/dm1105.c file of the TV Tuner driver on the DM1105 chip in the Linux operating system is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability coul...

7CVSS6.4AI score0.00193EPSS
SaveExploits0References40Affected Software5
BDU FSTEC
BDU FSTEC
•added 2023/06/26 12:00 a.m.•22 views

The vulnerability of the ravbremove() function in the drivers/net/ethernet/renesas/ravb_main.c file of the network device driver for the Linux operating system’s kernels allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ravbremove function in the drivers/net/ethernet/renesas/ravbmain.c file of the Renesas network device driver for the Linux operating system is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability coul...

7CVSS6.4AI score0.0019EPSS
SaveExploits0References15Affected Software4
BDU FSTEC
BDU FSTEC
•added 2023/06/16 12:00 a.m.•15 views

The vulnerability of the r592remove() function in the drivers/memstick/host/r592.c kernel module of the Linux operating system allows an attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the r592remove function in the drivers/memstick/host/r592.c kernel module of the Linux operating system is related to the use of previously freed memory due to concurrent access to resources race condition. Exploiting this vulnerability could allow an attacker to compromise t...

7.1CVSS6.4AI score0.00437EPSS
SaveExploits0References18Affected Software5
BDU FSTEC
BDU FSTEC
•added 2023/06/05 12:00 a.m.•19 views

The vulnerability of the f2fs_write_end_io() function in the fs/f2fs/data.c file of the Linux kernel’s file system f2fs allows a privileged attacker to cause a service failure.

The vulnerability of the f2fswriteendio function in the fs/f2fs/data.c file of the Linux operating system’s file system f2fs is related to the swapping of the zero pointer from a concurrent access resource in a race condition. Exploiting this vulnerability could allow an attacker to cause service...

4.7CVSS6.1AI score0.00189EPSS
SaveExploits0References14Affected Software5
BDU FSTEC
BDU FSTEC
•added 2023/05/17 12:00 a.m.•20 views

The vulnerability of the Qualcomm Technologies EMAC Gigabit Ethernet Controller kernel in the Linux operating system, located in the emacremove() function, allows a attacker to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the Qualcomm Technologies EMAC Gigabit Ethernet Controller driver for the Linux operating system is related to concurrent access to resources due to incorrect synchronization in the emacremove function within the drivers/net/ethernet/qualcomm/emac/emac.c module. Exploiting th...

6.4CVSS6.8AI score
SaveExploits0References12Affected Software3
Positive Technologies
Positive Technologies
•added 2023/05/09 12:00 a.m.•22 views

PT-2025-8513 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A data-race issue exists around sysctl fib multipath use neigh. The value of sysctl fib multipath use neigh can be changed concurrently while it is being read, which requires the use o...

8.8CVSS6.8AI score0.05147EPSS
SaveExploits14References285
SUSE CVE
SUSE CVE
•added 2023/02/15 4:27 a.m.•11 views

SUSE CVE-2018-10902

It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc double free in sndrawmidiinputparams and sndrawmidioutputstatus which are part of sndrawmidiioctl handler in rawmidi.c file. A malicious local attacker could possibly use this f...

7CVSS7.6AI score0.00523EPSS
SaveExploits0References30
SUSE CVE
SUSE CVE
•added 2023/02/15 4:22 a.m.•9 views

SUSE CVE-2018-19364

hw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a second thread, leading to for example a use-after-free outcome...

5.3CVSS6.9AI score0.0053EPSS
SaveExploits0References14
SUSE CVE
SUSE CVE
•added 2023/02/15 3:51 a.m.•12 views

SUSE CVE-2020-35513

A flaw incorrect umask during file or directory modification in the Linux kernel NFS network file system functionality was found in the way user create and delete object using NFSv4.2 or newer if both simultaneously accessing the NFS by the other process that is not using new NFSv4.2. A user with...

4.4CVSS6.2AI score0.01347EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/02/08 12:00 a.m.•13 views

PT-2023-16492 · Answerdev · Answer

Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.0.4 Description: The issue is related to a Race Condition, which occurs due to concurrent execution using a shared resource with improper synchronization. This problem is identified in the GitHub repositor...

8.1CVSS8.3AI score0.0069EPSS
SaveExploits1References10
Rows per page
Query Builder