Lucene search
K

25 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.3 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: fbdev: Fixed invalid page access after closing deferred I/O devices When a fbdev with deferred I/O is opened and then closed, the dirty pages remain in the pageref list. Eventually, those pages may be processed during the delayed...

7.8CVSS6.2AI score0.00125EPSS
Exploits0References2
EUVD
EUVD
added 2026/04/22 3:31 p.m.1 views

EUVD-2026-24876

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: serialize btintelhwerror with hcireqsynclock btintelhwerror issues two hcicmdsync calls HCIOPRESET and Intel exception-info retrieval without holding hcireqsynclock. This lets it race against hcidevdoclose -...

5.6AI score0.00015EPSS
Exploits0References6
EUVD
EUVD
added 2026/03/25 12:30 p.m.3 views

EUVD-2026-15287

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: complete pending data exchange on device close In nciclosedevice, complete any pending data exchange before closing. The data exchange callback e.g. rawsockdataexchangecomplete holds a socket reference. NIPA occasionall...

5.7AI score0.00018EPSS
Exploits0References4
NVD
NVD
added 2026/03/25 11:16 a.m.3 views

CVE-2026-23330

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: complete pending data exchange on device close In nciclosedevice, complete any pending data exchange before closing. The data exchange callback e.g. rawsockdataexchangecomplete holds a socket reference. NIPA occasionall...

5.5CVSS0.00018EPSS
Exploits0References5
UbuntuCve
UbuntuCve
added 2026/03/25 11:16 a.m.3 views

CVE-2026-23330

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: complete pending data exchange on device close In nciclosedevice, complete any pending data exchange before closing. The data exchange callback e.g. rawsockdataexchangecomplete holds a socket reference. NIPA occasionall...

5.5CVSS5.7AI score0.00018EPSS
Exploits0References5
OSV
OSV
added 2026/03/25 11:16 a.m.1 views

UBUNTU-CVE-2026-23330

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: complete pending data exchange on device close In nciclosedevice, complete any pending data exchange before closing. The data exchange callback e.g. rawsockdataexchangecomplete holds a socket reference. NIPA occasionall...

5.5CVSS5.7AI score0.00018EPSS
Exploits0References6
OSV
OSV
added 2026/03/25 10:27 a.m.3 views

CVE-2026-23330 nfc: nci: complete pending data exchange on device close

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: complete pending data exchange on device close In nciclosedevice, complete any pending data exchange before closing. The data exchange callback e.g. rawsockdataexchangecomplete holds a socket reference. NIPA occasionall...

5.5CVSS5.7AI score0.00018EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/03/25 10:27 a.m.2 views

CVE-2026-23330

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: complete pending data exchange on device close In nciclosedevice, complete any pending data exchange before closing. The data exchange callback e.g. rawsockdataexchangecomplete holds a socket reference. NIPA occasionall...

5.5CVSS5.7AI score0.00018EPSS
Exploits0References6Affected Software1
CVE
CVE
added 2026/03/25 10:27 a.m.3 views

CVE-2026-23330

Summary: CVE-2026-23330 affects the Linux kernel NFC/NCI subsystem. The issue arises in nci_close_device() where pending data exchanges may not be completed before closing, allowing a leaking unreferenced socket object (example: 0xff1100000f435000, size 2048) and associated references. This could...

5.5CVSS5.7AI score0.00018EPSS
Exploits0References5Affected Software1
Debian CVE
Debian CVE
added 2026/03/25 10:27 a.m.1 views

CVE-2026-23330

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: complete pending data exchange on device close In nciclosedevice, complete any pending data exchange before closing. The data exchange callback e.g. rawsockdataexchangecomplete holds a socket reference. NIPA occasionall...

5.5CVSS5.2AI score0.00018EPSS
Exploits0
CVE
CVE
added 2026/02/14 4:1 p.m.7 views

CVE-2026-23167

Technical details (affected product, component, version, root cause, and fix) are not publicly available in the provided connected documents. Monitor for updates to CVE-2026-23167 as more information becomes available.

4.7CVSS5.2AI score0.00014EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2026/01/12 5:26 p.m.1 views

CVE-2025-68657 espressif/usb_host_hid Double-Free Race Condition in USB Host HID Device Close Path

Espressif ESP-IDF USB Host HID Human Interface Device Driver allows access to HID devices. Prior to 1.1.0, calls to hidhostdeviceclose can free the same usbtransfert twice. The USB event callback and user code share the hidifacet state without locking, so both can tear down a READY interface...

6.4CVSS7AI score0.00025EPSS
Exploits0References5
CVE
CVE
added 2026/01/12 5:26 p.m.5 views

CVE-2025-68657

CVE-2025-68657 affects the ESP-IDF USB Host HID driver. Before version 1.1.0, hid_host_device_close() can free the same usb_transfer_t twice, and the USB event callback shares hid_iface_t state with user code without locking, allowing race conditions that may tear down a READY interface in parall...

6.4CVSS6.7AI score0.00025EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.3 views

PT-2026-27695

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the Near Field Communication NFC subsystem related to incomplete data exchange handling during device closure. Specifically, the nci close devic...

5.5CVSS5.8AI score0.00018EPSS
Exploits0References23
SUSE CVE
SUSE CVE
added 2025/06/19 3:45 a.m.2 views

SUSE CVE-2022-49954

In the Linux kernel, the following vulnerability has been resolved: Input: iforce - wake up after clearing IFORCEXMITRUNNING flag syzbot is reporting hung task at inputunregisterdevice 1, for iforceclose waiting at waiteventinterruptible with dev-mutex held is blocking inputdisconnectdevice from...

5.5CVSS6.5AI score0.00063EPSS
Exploits0References12
RedHat Linux
RedHat Linux
added 2025/05/13 8:28 a.m.3 views

kernel: tpm: Clean up TPM space after command failure

In the Linux kernel, the following vulnerability has been resolved: tpm: Clean up TPM space after command failure tpmdevtransmit prepares the TPM space before attempting command transmission. However if the command fails no rollback of this preparation is done. This can result in transient handle...

5.5CVSS6.5AI score0.0002EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2025/02/27 3:2 a.m.1 views

SUSE CVE-2022-49695

In the Linux kernel, the following vulnerability has been resolved: igb: fix a use-after-free issue in igbcleantxring Fix the following use-after-free bug in igbcleantxring routine when the NIC is running in XDP mode. The issue can be triggered redirecting traffic into the igb NIC and then closin...

5.5CVSS6.6AI score0.00019EPSS
Exploits0References7
OSV
OSV
added 2025/02/26 7:1 a.m.1 views

DEBIAN-CVE-2022-49695

In the Linux kernel, the following vulnerability has been resolved: igb: fix a use-after-free issue in igbcleantxring Fix the following use-after-free bug in igbcleantxring routine when the NIC is running in XDP mode. The issue can be triggered redirecting traffic into the igb NIC and then closin...

7.8CVSS5.4AI score0.00019EPSS
Exploits0References1
OSV
OSV
added 2025/02/26 7:1 a.m.0 views

UBUNTU-CVE-2022-49695

In the Linux kernel, the following vulnerability has been resolved: igb: fix a use-after-free issue in igbcleantxring Fix the following use-after-free bug in igbcleantxring routine when the NIC is running in XDP mode. The issue can be triggered redirecting traffic into the igb NIC and then closin...

7.8CVSS6.1AI score0.00019EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2024/12/17 12:0 a.m.2 views

PT-2025-3594 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability has been resolved in the Linux kernel. The issue occurs when userspace holds an fd open, unbinds the device, and then closes it, causing the driver to attempt to access...

7.7CVSS7.3AI score0.00037EPSS
Exploits0References13
Rows per page
Query Builder