Lucene search
+L

317 matches found

Positive Technologies
Positive Technologies
•added 2021/04/11 12:00 a.m.•9 views

PT-2024-11132 Ā· Linux Ā· Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the mt76 driver, specifically the mt7615 component, where the first pointer in the txp needs to be unmapped to prevent DMA mapping entries from leaking...

5.5CVSS5.4AI score0.00222EPSS
SaveExploits0References21
Oracle linux
Oracle linux
•added 2020/07/24 12:00 a.m.•77 views

kernel security, bug fix, and enhancement update

4.18.0-193.13.22.OL8 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 4.18.0-193.13.22 - Rebuild to get kernel image properly signed Bruno...

7.8CVSS0.3AI score0.01218EPSS
SaveExploits2
RedhatCVE
RedhatCVE
•added 2019/11/27 3:17 p.m.•44 views

CVE-2019-18806

A flaw was found in the way the QLogic QLA3xxx NIC HBA Driver in the Linux kernel handled resource cleanup on a DMA mapping error. This flaw allows an attacker able to trigger the DMA mapping error to crash the system. Mitigation In order to mitigate this issue it is possible to prevent the...

5.5CVSS0.8AI score0.00348EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2019/11/21 12:37 p.m.•60 views

CVE-2019-19056

A flaw was found in the way the mwifiex PCIE driver in the Linux kernel handled resource cleanup on a DMA mapping error. This flaw allows an attacker able to trigger the DMA mapping error to crash the system. Mitigation In order to mitigate this issue it is possible to prevent the affected code...

4.7CVSS1.3AI score0.00387EPSS
SaveExploits0References3
CNVD
CNVD
•added 2019/11/08 12:00 a.m.•12 views

Linux kernel memory leak vulnerability (CNVD-2019-40155)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory leak vulnerability exists in the qlalloclargebuffers function in drivers/net/ethernet/qlogic/qla3xxx.c in...

5.5CVSS7.4AI score0.00348EPSS
SaveExploits0References1
Prion
Prion
•added 2019/11/07 4:15 p.m.•34 views

Memory corruption

A memory leak in the qlalloclargebuffers function in drivers/net/ethernet/qlogic/qla3xxx.c in the Linux kernel before 5.3.5 allows local users to cause a denial of service memory consumption by triggering pcidmamappingerror failures, aka CID-1acb8f2a7a9f...

2.1CVSS4.9AI score0.00348EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2017/11/13 3:29 a.m.•25 views

Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "APFS" component. It does not properly restrict the DMA mapping time of FileVault decryption buffers, which allows attackers to read cleartext APFS data via a crafted Thunderbolt adapter...

2.1CVSS3.6AI score0.00324EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2017/11/13 3:00 a.m.•75 views

CVE-2017-13786

APFS DMA mapping timing vulnerability in macOS with versions before 10.13.1. The issue allows reading cleartext APFS data via a crafted Thunderbolt adapter due to insufficient restriction of DMA mapping time for FileVault decryption buffers. Apple’s security update 10.13.1 (and related Sierra/El ...

4.6CVSS5AI score0.00324EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2017/11/13 3:00 a.m.•29 views

CVE-2017-13786

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "APFS" component. It does not properly restrict the DMA mapping time of FileVault decryption buffers, which allows attackers to read cleartext APFS data via a crafted Thunderbolt adapter...

4.5AI score0.00324EPSS
SaveExploits0References2
OSV
OSV
•added 2016/10/10 10:59 a.m.•7 views

DEBIAN-CVE-2015-8950

arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and other products, does not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory by triggering a dmammap call...

5.5CVSS7.4AI score0.01457EPSS
SaveExploits0References1
Prion
Prion
•added 2016/10/10 10:59 a.m.•23 views

Information disclosure

arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and other products, does not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory by triggering a dmammap call...

4.3CVSS6AI score0.01457EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2016/10/10 10:59 a.m.•9 views

UBUNTU-CVE-2015-8950

arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and other products, does not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory by triggering a dmammap call...

5.5CVSS6.7AI score0.01457EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2016/10/10 10:00 a.m.•37 views

CVE-2015-8950

arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and other products, does not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory by triggering a dmammap call...

5.1AI score0.01457EPSS
SaveExploits0References6
CVE
CVE
•added 2016/10/10 10:00 a.m.•91 views

CVE-2015-8950

CVE-2015-8950 affects the Linux kernel (arch/arm64/mm/dma-mapping.c) prior to 4.0.3, where uninitialized data structures in the ION memory-management path can be exposed via dma_mmap. This local-access vulnerability could allow a non-privileged user to read kernel memory. The public references in...

5.5CVSS4.9AI score0.01457EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
•added 2016/10/10 10:00 a.m.•53 views

CVE-2015-8950

arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and other products, does not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory by triggering a dmammap call...

5.5CVSS5.1AI score0.01457EPSS
SaveExploits0
NVD
NVD
•added 2016/08/06 10:59 a.m.•21 views

CVE-2014-9888

arch/arm/mm/dma-mapping.c in the Linux kernel before 3.13 on ARM platforms, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not prevent executable DMA mappings, which might allow local users to gain privileges via a crafted application, aka Android internal bug 28803642 a...

7.8CVSS7.2AI score0.00395EPSS
SaveExploits0References5
Cent OS
Cent OS
•added 2016/05/04 3:07 a.m.•91 views

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2016:0715 An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

7.2CVSS6.5AI score0.00624EPSS
SaveExploits0References7
Rows per page
Query Builder