Lucene search
K

15 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.4 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: iouring: The incorrect reference to iokiocb in iolinkskb has been fixed. In the iolinkskb function, there is a bug where the value of prevnotif is incorrectly assigned using ‘nd’ instead of ‘prevnd’. This causes the context...

7.8CVSS6.5AI score0.00014EPSS
Exploits0References2
NVD
NVD
added 2026/03/21 1:17 a.m.0 views

CVE-2026-32052

OpenClaw versions prior to 2026.2.24 contain a command injection vulnerability in the system.run shell-wrapper that allows attackers to execute hidden commands by injecting positional argv carriers after inline shell payloads. Attackers can craft misleading approval text while executing arbitrary...

9.8CVSS0.00099EPSS
Exploits0References4
CVE
CVE
added 2026/03/21 12:42 a.m.7 views

CVE-2026-32052

OpenClaw is affected as of versions prior to 2026.2.24, with a command injection in the system.run shell-wrapper. The attack vector involves injecting trailing positional argv carriers after inline shell payloads, enabling execution of hidden commands while a misleading approval text is displayed...

9.8CVSS6.1AI score0.00099EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2026/03/21 12:42 a.m.22 views

CVE-2026-32052 OpenClaw < 2026.2.24 - Hidden Command Execution via Shell-Wrapper Positional argv Carriers

OpenClaw versions prior to 2026.2.24 contain a command injection vulnerability in the system.run shell-wrapper that allows attackers to execute hidden commands by injecting positional argv carriers after inline shell payloads. Attackers can craft misleading approval text while executing arbitrary...

6.4CVSS0.00099EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/01/22 12:0 a.m.2 views

Gitea security vulnerabilities

Gitea is a lightweight Git service developed using Go language in the Gitea community. Gitea has a security vulnerability that stems from improper validation of repository context when deleting attachments. This vulnerability allows users to still delete attachments from other repositories that...

7.5CVSS5.8AI score0.00017EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/10/10 1:7 p.m.2 views

CVE-2025-39963

In the Linux kernel, the following vulnerability has been resolved: iouring: fix incorrect iokiocb reference in iolinkskb In iolinkskb function, there is a bug where prevnotif is incorrectly assigned using 'nd' instead of 'prevnd'. This causes the context validation check to compare the current...

5.5CVSS5.8AI score0.00014EPSS
Exploits0References7
SUSE CVE
SUSE CVE
added 2025/10/09 11:23 p.m.2 views

SUSE CVE-2025-39963

In the Linux kernel, the following vulnerability has been resolved: iouring: fix incorrect iokiocb reference in iolinkskb In iolinkskb function, there is a bug where prevnotif is incorrectly assigned using 'nd' instead of 'prevnd'. This causes the context validation check to compare the current...

7CVSS6.5AI score0.00014EPSS
Exploits0References14
EUVD
EUVD
added 2025/10/09 3:31 p.m.2 views

EUVD-2025-33335

In the Linux kernel, the following vulnerability has been resolved: iouring: fix incorrect iokiocb reference in iolinkskb In iolinkskb function, there is a bug where prevnotif is incorrectly assigned using 'nd' instead of 'prevnd'. This causes the context validation check to compare the current...

5.9AI score0.00014EPSS
Exploits0References4
NVD
NVD
added 2025/10/09 1:15 p.m.2 views

CVE-2025-39963

In the Linux kernel, the following vulnerability has been resolved: iouring: fix incorrect iokiocb reference in iolinkskb In iolinkskb function, there is a bug where prevnotif is incorrectly assigned using 'nd' instead of 'prevnd'. This causes the context validation check to compare the current...

7.8CVSS0.00014EPSS
Exploits0References3
OSV
OSV
added 2025/10/09 12:13 p.m.2 views

CVE-2025-39963 io_uring: fix incorrect io_kiocb reference in io_link_skb

In the Linux kernel, the following vulnerability has been resolved: iouring: fix incorrect iokiocb reference in iolinkskb In iolinkskb function, there is a bug where prevnotif is incorrectly assigned using 'nd' instead of 'prevnd'. This causes the context validation check to compare the current...

7.8CVSS6.1AI score0.00014EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the incorrect use of the nd parameter instead of the prevnd parameter in the iolinkskb function, which could...

7.8AI score0.00014EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/10/09 12:0 a.m.1 views

PT-2025-41377

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel’s io uring functionality within the io link skb function. A bug causes an incorrect assignment of prev notif using nd instead of prev nd during contex...

7.8CVSS7.7AI score0.00014EPSS
Exploits0References19
OSV
OSV
added 2025/09/29 10:38 p.m.2 views

CVE-2025-59941 go-f3 is Vulnerable to Cached Justification Verification Bypass

go-f3 is a Golang implementation of Fast Finality for Filecoin F3. In versions 0.8.8 and below, go-f3's justification verification caching mechanism has a vulnerability where verification results are cached without properly considering the context of the message. An attacker can bypass...

5.9CVSS6.5AI score0.0005EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/08/08 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-37878

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf/core: Fix WARNON!ctx in freeevent for partial init Move the getctxchildctx call and the childevent-ctx assignment to occur immediately after the child even...

5.5CVSS6.8AI score0.00024EPSS
Exploits0References3
OSV
OSV
added 2024/08/26 10:11 a.m.11 views

CVE-2024-43906 drm/admgpu: fix dereferencing null pointer context

In the Linux kernel, the following vulnerability has been resolved: drm/admgpu: fix dereferencing null pointer context When user space sets an invalid ta type, the pointer context will be empty. So it need to check the pointer context before using it...

5.5CVSS6.1AI score0.00033EPSS
Exploits0References6
Rows per page
Query Builder