Lucene search
+L

12273 matches found

Positive Technologies
Positive Technologies
•added 2025/02/26 12:00 a.m.•23 views

PT-2025-8131

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue occurs during the GPU reset code path in the Linux kernel. This happens because the link encoder assignments are not properly cleared after a GPU reset, resulting in ...

7.8CVSS6.1AI score0.00234EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/02/26 12:00 a.m.•13 views

PT-2025-20536

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock issue has been identified in the Linux kernel, specifically between rcu tasks trace and event mutex. This occurs due to a lock dependency when free event grabs event mutex and...

5.6CVSS5.8AI score0.00213EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/02/26 12:00 a.m.•14 views

PT-2025-8642 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been identified, related to the usage of RCU NONIDLE during the cfi slowpath diag function. This can result in an invalid RCU state in the cpuid...

5.7AI score0.00258EPSS
SaveExploits0References12
CNNVD
CNNVD
•added 2025/02/26 12:00 a.m.•22 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the lack of rcu protection in the bondethtoolgettsinfo function...

5.5CVSS5.8AI score0.00272EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/26 12:00 a.m.•5 views

CVE-2022-49464: Use After Free

In the Linux kernel, the following vulnerability has been resolved: erofs: fix buffer copy overflow of ztailpacking feature I got some KASAN report as below: 46.959738 ================================================================== 46.960430 BUG: KASAN: use-after-free in...

7.8CVSS7.2AI score0.00264EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/26 12:00 a.m.•16 views

PT-2025-27687

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to TIF IO BITMAP inconsistencies. The issue occurs when io bitmap exit invokes task update io bitmap, which can lead to a...

5.5CVSS6AI score0.0021EPSS
SaveExploits0
CNNVD
CNNVD
•added 2025/02/26 12:00 a.m.•24 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse of mt76 when removing a non-RCU wcid pointer...

7.8CVSS6.2AI score0.00422EPSS
SaveExploits0References5
AlpineLinux
AlpineLinux
•added 2025/02/25 3:54 p.m.•18 views

CVE-2025-26595

A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size...

7.8CVSS7.5AI score0.00438EPSS
SaveExploits0
osv_cve
osv_cve
•added 2025/02/25 7:22 a.m.•21 views

CVE-2025-1675 Out of bounds read in dns_copy_qname

The function dnscopyqname in dnspack.c performs performs a memcpy operation with an untrusted field and does not check if the source buffer is large enough to contain the copied data...

8.2CVSS6AI score0.00386EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/02/25 12:00 a.m.•20 views

PT-2025-7818

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description The issue is related to the function dns copy qname in dns pack.c, which performs a memcpy operation with an untrusted field. It does not check if the source buffer is large enough to contain...

9.1CVSS6.1AI score0.00386EPSS
SaveExploits0References11
CNNVD
CNNVD
•added 2025/02/25 12:00 a.m.•15 views

Zephyr buffer error vulnerability

Zephyr is an extensible real-time operating system RTOS open-sourced by Zephyr. A buffer error vulnerability exists in Zephyr 4.0 and prior versions that stems from not checking the source buffer size, which could result in a data copy error...

9.1CVSS5.9AI score0.00386EPSS
SaveExploits0References1
osv_oesa
osv_oesa
•added 2025/02/21 11:08 a.m.•29 views

OESA-2025-1158 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ila: call nfunregisternethooks sooner syzbot found an use-after-free Read in ilanfinput 1 Issue here is that ilaxlatexitnet frees the rhashtable, then call...

7.8CVSS7AI score0.00842EPSS
SaveExploits1References19
osv_oesa
osv_oesa
•added 2025/02/21 11:08 a.m.•24 views

OESA-2025-1162 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ila: call nfunregisternethooks sooner syzbot found an use-after-free Read in ilanfinput 1 Issue here is that ilaxlatexitnet frees the rhashtable, then call...

7.8CVSS7AI score0.00842EPSS
SaveExploits1References19
Positive Technologies
Positive Technologies
•added 2025/02/19 12:00 a.m.•18 views

PT-2025-27751

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the bpf Berkeley Packet Filter functionality, specifically with ktls panic and sockmap. The issue arises when the BPF...

8CVSS6.1AI score0.00199EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/02/15 12:00 a.m.•37 views

PT-2025-25834

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the bpf verifier, where the copy verifier state function should copy the loop entry field. If not copied,...

7.8CVSS6.2AI score0.00243EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/02/14 7:07 a.m.•24 views

SUSE CVE-2023-0459

Copyfromuser on 64-bit versions of the Linux kernel does not implement the uaccessbeginnospec allowing a user to bypass the "accessok" check and pass a kernel pointer to copyfromuser. This would allow an attacker to leak information. We recommend upgrading beyond commit...

4.7CVSS6.2AI score0.00641EPSS
SaveExploits0References26
SUSE CVE
SUSE CVE
•added 2025/02/14 6:24 a.m.•11 views

SUSE CVE-2023-34049

The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force Salt-SSH to run their script. If an attacker has access to the target VM and knows the path to the pre-flight script before it runs they can ensure Salt-SSH runs their script wi...

8.4CVSS6.6AI score0.00205EPSS
SaveExploits0References18
SUSE CVE
SUSE CVE
•added 2025/02/14 5:33 a.m.•12 views

SUSE CVE-2024-11407

There exists a denial of service through Data corruption in gRPC-C++ - gRPC-C++ servers with transmit zero copy enabled through the channel arg GRPCARGTCPTXZEROCOPYENABLED can experience data corruption issues. The data sent by the application may be corrupted before transmission over the network...

5.8CVSS6AI score0.00572EPSS
SaveExploits0References9
osv_cve
osv_cve
•added 2025/02/12 2:15 p.m.•25 views

CVE-2025-26354

A CWE-35 "Path Traversal" in maxtime/api/database/database.lua copy endpoint in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to overwrite sensitive files via crafted HTTP requests...

7.2CVSS7.1AI score0.00839EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2025/02/11 7:35 a.m.•10 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: KVM: x86: Acquiring kvm-srcu when handling KVMSETVCPUEVENTS Acquire kvm-srcu when processing KVMSETVCPUEVENTS. When SMM mode is toggled, KVM will forcibly leave the nested VMX/SVM state. Leaving such a state also results in...

7.8CVSS6.5AI score0.00245EPSS
SaveExploits0References3
Rows per page
Query Builder