Lucene search
+L

54488 matches found

RedhatCVE
RedhatCVE
added 2026/08/17 10:10 p.m.4 views

CVE-2026-72107

A flaw was found in the Linux kernel's device-mapper dm-era component. This vulnerability arises from an incorrect calculation of writeset blocks, which can lead to an out-of-bounds memory access. An attacker could potentially exploit this to cause a denial of service or other undefined behavior...

8.8CVSS5.5AI score0.00632EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/17 9:56 p.m.4 views

CVE-2026-72103

A flaw was found in the Linux kernel's device-mapper dm component. A refactoring error caused the caller's thread keyring, which can contain sensitive data like LUKS volume keys, to persist in memory longer than intended. This issue allows a local attacker with administrative privileges to recove...

7.3CVSS5.4AI score0.00159EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/17 9:56 p.m.4 views

CVE-2026-72102

A flaw was found in the Linux kernel's device mapper DM subsystem. During certain resume operations, the kernel might attempt to free a memory table that has already been released. This error, known as a double-free vulnerability, can lead to memory corruption. A successful exploit could result i...

7.8CVSS4.9AI score0.00164EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/17 9:38 p.m.4 views

CVE-2026-72074

A flaw was found in the Linux kernel's ims-pcu driver. A type confusion vulnerability exists in the CDC union descriptor parsing, where the driver trusts the bMasterInterface0 value without proper verification. This could allow a local attacker, or a malicious USB device, to overwrite the private...

5.5CVSS5.3AI score0.0022EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/17 7:48 p.m.6 views

CVE-2026-72070

A flaw was found in the Linux kernel's libertastf Wi-Fi driver. This vulnerability is a use-after-free, meaning the system attempts to access memory after it has been released. This occurs when the lbtffreeadapter function, responsible for freeing adapter resources, does not properly synchronize...

5.5CVSS5.6AI score0.00209EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/17 7:07 p.m.7 views

CVE-2026-72058

A flaw was found in the Linux kernel's ixp4xxhss network driver. The ixp4xxhssprobe function incorrectly allocates two High-Level Data Link Control HDLC network devices instead of one. This programming error leads to a memory leak, as the initially allocated device is not properly unregistered an...

5.5CVSS5.4AI score0.00215EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/17 5:48 p.m.6 views

CVE-2026-72030

A flaw was found in the Linux kernel's libata-core component. A malicious device, or a local attacker with control over a device, could provide an invalid count for concurrent positioning ranges. This improper handling of input could lead to a buffer overflow, potentially causing the system to...

5.5CVSS5.7AI score0.002EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/17 5:16 p.m.8 views

CVE-2026-9771

The flashcopy system call is verified by zvrfyflashcopy in drivers/flash/flashutil.c. On builds with CONFIGUSERSPACE enabled, this handler is the kernel-side trust boundary for a user-mode caller. Prior to the fix it validated only the output buffer KSYSCALLMEMORYWRITE and passed the two struct...

8.8CVSS0.00106EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/17 4:18 p.m.15 views

CVE-2026-9771 Missing device-pointer validation in flash_copy() syscall allows userspace privilege escalation

The flashcopy system call is verified by zvrfyflashcopy in drivers/flash/flashutil.c. On builds with CONFIGUSERSPACE enabled, this handler is the kernel-side trust boundary for a user-mode caller. Prior to the fix it validated only the output buffer KSYSCALLMEMORYWRITE and passed the two struct...

8.8CVSS6.1AI score
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/17 4:18 p.m.37 views

CVE-2026-9771 Missing device-pointer validation in flash_copy() syscall allows userspace privilege escalation

The flashcopy system call is verified by zvrfyflashcopy in drivers/flash/flashutil.c. On builds with CONFIGUSERSPACE enabled, this handler is the kernel-side trust boundary for a user-mode caller. Prior to the fix it validated only the output buffer KSYSCALLMEMORYWRITE and passed the two struct...

8.8CVSS0.00106EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/17 4:18 p.m.53 views

CVE-2026-9771

CVE-2026-9771 is a missing device-pointer validation vulnerability in the Zephyr RTOS flash_copy() system call (drivers/flash/flash_util.c), affecting builds with CONFIG_USERSPACE enabled. The handler z_vrfy_flash_copy() validated only the output buffer but passed src_dev and dst_dev directly to ...

8.8CVSS6AI score0.00106EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/17 4:18 p.m.10 views

EUVD-2026-60268

The flashcopy system call is verified by zvrfyflashcopy in drivers/flash/flashutil.c. On builds with CONFIGUSERSPACE enabled, this handler is the kernel-side trust boundary for a user-mode caller. Prior to the fix it validated only the output buffer KSYSCALLMEMORYWRITE and passed the two struct...

8.8CVSS6AI score0.00106EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/17 3:00 p.m.6 views

CVE-2026-74519

A flaw was found in the Linux kernel. An issue within the pinctrl subsystem's device tree handling could lead to a double-free vulnerability. This occurs when an error path during device binding attempts to free uninitialized memory, potentially allowing a local attacker to trigger a system crash...

7.8CVSS5.3AI score0.00146EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/17 2:54 p.m.5 views

CVE-2026-68456

A flaw was found in the Linux kernel's ueagle-atm USB driver. This driver uses an asynchronous mechanism for loading firmware but does not wait for its completion when a device is disconnected. This creates a race condition where the device's teardown can run concurrently with firmware loading. I...

5.5CVSS5.3AI score0.00176EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/17 2:19 p.m.5 views

CVE-2026-72445

A flaw was found in the Linux kernel's ALSA USB audio driver for QCOM devices. An attacker, by providing an invalid service interval during stream enablement, can cause the audio substream to become unresponsive. This can lead to a Denial of Service DoS for the affected audio device, requiring a...

5.5CVSS5.4AI score0.00206EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/17 9:17 a.m.6 views

CVE-2026-49304

Permission control vulnerability in the device key management module. Impact: Successful exploitation of this vulnerability may affect availability...

6.2CVSS0.0008EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/17 8:23 a.m.13 views

EUVD-2026-60071

Permission control vulnerability in the device key management module. Impact: Successful exploitation of this vulnerability may affect availability...

6.2CVSS5.3AI score0.0008EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/17 8:23 a.m.37 views

CVE-2026-49304

Permission control vulnerability in the device key management module. Impact: Successful exploitation of this vulnerability may affect availability...

6.2CVSS0.0008EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/08/17 5:05 a.m.7 views

kernel: dm log: fix out-of-bounds write due to region_count overflow

A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...

7.8CVSS5.6AI score0.0014EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2026/08/17 12:00 a.m.5 views

The vulnerability of the __req_mod() function in the drivers/block/drbd/drbd_req.c module of the Linux kernel’s block device driver allows a attacker to cause a service failure.

The vulnerability of the reqmod function in the drivers/block/drbd/drbdreq.c file of the Linux kernel’s block device driver involves pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

5.7CVSS5.6AI score0.00122EPSS
SaveExploits0References11Affected Software3
Rows per page
Query Builder