Lucene search
K

8396 matches found

OSV
OSV
added 2026/01/05 9:32 a.m.4 views

CVE-2025-68756 block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock

In the Linux kernel, the following vulnerability has been resolved: block: Use RCU in blkmqunquiescetagset instead of set-taglistlock blkmqadd,delqueuetagset functions add and remove queues from tagset, the functions make sure that tagset and queues are marked as shared when two or more queues ar...

6AI score0.00025EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2026/01/05 12:0 a.m.3 views

PT-2026-1244

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to tagset management within the block layer. Specifically, the blk mq unquiesce tagset functions, used for managing queues, were updated to use...

4.6CVSS6.3AI score0.00025EPSS
Exploits0
Amazon
Amazon
added 2026/01/05 12:0 a.m.5 views

Important: ecs-service-connect-agent

Issue Overview: There exists a denial of service through Data corruption in gRPC-C++ - gRPC-C++ servers with transmit zero copy enabled through the channel arg GRPCARGTCPTXZEROCOPYENABLED can experience data corruption issues. The data sent by the application may be corrupted before transmission...

9.8CVSS7.5AI score0.01141EPSS
Exploits7
Positive Technologies
Positive Technologies
added 2026/01/03 12:0 a.m.3 views

PT-2026-2158

Name of the Vulnerable Software and Affected Versions zlib versions up to and including 1.3.1.2 Description zlib versions up to and including 1.3.1.2 contain a global buffer overflow in the untgz utility. The TGZfname function uses an unbounded strcpy call to copy an attacker-supplied archive nam...

10CVSS7.3AI score0.00006EPSS
Exploits0References35
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.5 views

PT-2026-4485

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the idpf driver related to RSS LUT initialization. Specifically, the RSS LUT is not initialized until an interface is active, leading to a NULL...

5.5CVSS5.4AI score0.00028EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.2 views

PT-2026-6129

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the scsi subsystem, specifically in the qla2xxx driver. The qla27xx copy fpin pkt and qla27xx copy multiple pkt functions use the frame size...

7AI score0.00034EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.4 views

PT-2026-26115

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to RCU Read-Copy-Update protection in the /proc/net/ptype interface. Specifically, the functions ptype seq next and ptype seq show do not adhere ...

5.5CVSS5.8AI score0.00031EPSS
Exploits0References272
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.3 views

PT-2026-27742

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel’s ice driver related to XDP eXpress Data Path Receive Queue RxQ handling. The frag size field in XDP RxQ info incorrectly used the DMA write size...

6AI score0.00019EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.3 views

PT-2026-27716

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free issue within the pipapo set type in the netfilter module. A large number of expired elements can cause the garbage collection process to run fo...

8.4CVSS5.8AI score0.00254EPSS
Exploits8References345
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.2 views

PT-2026-26580

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the io uring subsystem. Specifically, a condition exists where, if DEFER TASKRUN and SETUP TASKRUN are utilized concurrently with ring resizing,...

5.8AI score0.00017EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.8 views

PT-2026-8133

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to kernel stack trace recording. An infinite recursion could occur when tracing RCU events with the kernel stack trace trigger enabled, as the...

8.8CVSS5.8AI score0.00031EPSS
Exploits0References282
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.6 views

PT-2026-4663

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free condition exists in the macvlan forward source function within the macvlan module. The issue stems from a lack of proper RCU Read-Copy-Update protection on the vlan...

7.8CVSS6AI score0.00012EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.4 views

PT-2026-27745

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to tracing buffer management. Specifically, a double-free condition can occur in the tracing buffers mmap close function when a process forks an...

5.5CVSS6AI score0.00017EPSS
Exploits0References103
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.2 views

PT-2026-26048

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue in the networking scheduler net/sched related to the act gate action. Specifically, the act gate action can be replaced while a hrtimer callback or dum...

7.8CVSS5.8AI score0.00018EPSS
Exploits0References81
RedhatCVE
RedhatCVE
added 2025/12/31 12:7 p.m.3 views

CVE-2023-54325

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix out-of-bounds read When preparing an AER-CTR request, the driver copies the key provided by the user into a data structure that is accessible by the firmware. If the target device is QAT GEN4, the key size is...

5.5CVSS5.8AI score0.00028EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/12/31 12:31 a.m.4 views

SUSE CVE-2022-50833

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: use hdev-workqueue when queuing hdev-cmd,ncmdtimer works syzbot is reporting attempt to schedule hdev-cmdwork work from systemwq WQ into hdev-workqueue WQ which is under draining operation 1, for commit c8efcc2589464ac...

5.5CVSS6.4AI score0.00024EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2025/12/31 12:30 a.m.2 views

SUSE CVE-2022-50884

In the Linux kernel, the following vulnerability has been resolved: drm: Prevent drmcopyfield to attempt copying a NULL pointer There are some struct drmdriver fields that are required by drivers since drmcopyfield attempts to copy them to user-space via DRMIOCTLVERSION. But it can be possible th...

5.5CVSS6.4AI score0.0007EPSS
Exploits0References10
SUSE CVE
SUSE CVE
added 2025/12/31 12:25 a.m.1 views

SUSE CVE-2023-54325

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix out-of-bounds read When preparing an AER-CTR request, the driver copies the key provided by the user into a data structure that is accessible by the firmware. If the target device is QAT GEN4, the key size is...

6.3CVSS6.5AI score0.00028EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:0 a.m.3 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993255)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993255 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: fix use-after-free on source server when doing inter-server copy Use-after-free occurred wh...

7.8CVSS6.5AI score0.00035EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:0 a.m.1 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993287)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993287 advisory. In the Linux kernel, the following vulnerability has been resolved: spmi: trace: fix stack-out-of-bound access in SPMI tracing functions tracespmiwritebegin and...

7.1CVSS6AI score0.00039EPSS
Exploits0References4
Rows per page
Query Builder