Lucene search
K

25 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.4 views

Astra Linux - уязвимость в linux-5.10, linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: net/mlx5: The port select structure is cleared when attempting to create it. The port select structure is cleared in case of an error, so no stale values remain after the definers are destroyed. This is because the...

5.5CVSS6.5AI score0.00031EPSS
Exploits0References2
OSV
OSV
added 2026/05/08 3:16 p.m.1 views

UBUNTU-CVE-2026-43440

In the Linux kernel, the following vulnerability has been resolved: net/mana: Null servicewq on setup error to prevent double destroy In managdsetup error path, set gc-servicewq to NULL after destroyworkqueue to match the cleanup in managdcleanup. This prevents a use-after-free if the workqueue...

7.8CVSS5.7AI score0.00013EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2026/05/08 2:22 p.m.4 views

CVE-2026-43440

In the Linux kernel, the following vulnerability has been resolved: net/mana: Null servicewq on setup error to prevent double destroy In managdsetup error path, set gc-servicewq to NULL after destroyworkqueue to match the cleanup in managdcleanup. This prevents a use-after-free if the workqueue...

7.8CVSS5.7AI score0.00013EPSS
Exploits0
ATTACKERKB
ATTACKERKB
added 2026/05/08 2:22 p.m.3 views

CVE-2026-43440

In the Linux kernel, the following vulnerability has been resolved: net/mana: Null servicewq on setup error to prevent double destroy In managdsetup error path, set gc-servicewq to NULL after destroyworkqueue to match the cleanup in managdcleanup. This prevents a use-after-free if the workqueue...

5.7AI score0.00013EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2026/05/08 2:22 p.m.25 views

CVE-2026-43440 net/mana: Null service_wq on setup error to prevent double destroy

In the Linux kernel, the following vulnerability has been resolved: net/mana: Null servicewq on setup error to prevent double destroy In managdsetup error path, set gc-servicewq to NULL after destroyworkqueue to match the cleanup in managdcleanup. This prevents a use-after-free if the workqueue...

0.00013EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/05/07 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-43276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: mana: Fix double destroyworkqueue on service rescan PCI path While testing corner cases in the driver, a use-after-free crash was found on the service resc...

7.8CVSS5.9AI score0.00013EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2026/05/06 11:28 a.m.2 views

CVE-2026-43276

In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix double destroyworkqueue on service rescan PCI path While testing corner cases in the driver, a use-after-free crash was found on the service rescan PCI path. When manaservreset calls managdsuspend, managdcleanup...

7.8CVSS5.8AI score0.00013EPSS
Exploits0
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.3 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Avoid double destruction of the default endpoint The rpmsgdevremove function in rpmsgcore is the place where this default endpoint is released. Therefore, it is necessary to avoid destroying the default endpoint in...

7.8CVSS5.7AI score0.00014EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/04/22 12:0 a.m.2 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013474)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013474 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetpipapo: release elements in clone only from destroy path Clone already always...

5.5CVSS5.6AI score0.00023EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-32003

Malicious code in bioql PyPI...

6.4AI score0.00014EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/10/01 11:33 p.m.1 views

SUSE CVE-2022-50421

In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Avoid double destroy of default endpoint The rpmsgdevremove in rpmsgcore is the place for releasing this default endpoint. So need to avoid destroying the default endpoint in rpmsgchrdeveptdevdestroy, this should be...

7.8CVSS6.5AI score0.00014EPSS
Exploits0References3
NVD
NVD
added 2025/10/01 12:15 p.m.3 views

CVE-2022-50421

In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Avoid double destroy of default endpoint The rpmsgdevremove in rpmsgcore is the place for releasing this default endpoint. So need to avoid destroying the default endpoint in rpmsgchrdeveptdevdestroy, this should be...

7.8CVSS0.00014EPSS
Exploits0References3
CVE
CVE
added 2025/10/01 11:41 a.m.7 views

CVE-2022-50421

The CVE-2022-50421 entry concerns the Linux kernel rpmsg subsystem. The root cause is a double-destroy path for the default rpmsg endpoint: rpmsg_chrdev_eptdev_destroy() may destroy the default endpoint again after rpmsg_dev_remove() releases it, causing refcount underflow and use-after-free. Rep...

7.8CVSS6.1AI score0.00014EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2025/08/19 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the RDMA/hns module potentially double destroying rsvqp in the wrong path...

7.8CVSS8.3AI score0.00025EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/07/06 12:0 a.m.1 views

PT-2025-33780

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw in the RDMA/hns subsystem where rsv qp may be double destroyed during an error condition. This occurs first in free mr init and then in hns roce exit...

7.8CVSS5.9AI score0.00025EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2025/05/13 8:28 a.m.2 views

kernel: rpmsg: char: Avoid double destroy of default endpoint

In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Avoid double destroy of default endpoint The rpmsgdevremove in rpmsgcore is the place for releasing this default endpoint. So need to avoid destroying the default endpoint in rpmsgchrdeveptdevdestroy, this should be...

7.8CVSS6.8AI score0.00014EPSS
Exploits0References5
OSV
OSV
added 2025/02/27 2:15 a.m.1 views

AZL-59022 CVE-2025-21714 affecting package kernel 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix implicit ODP use after free Prevent double queueing of implicit ODP mr destroy work by using xacmpxchg to make sure this is the only time we are destroying this specific mr. Without this change, we could try to...

7.8CVSS6.7AI score0.00026EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2025/02/01 3:47 a.m.1 views

SUSE CVE-2025-21675

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Clear port select structure when fail to create Clear the port select structure on error so no stale values left after definers are destroyed. That's because the mlx5lagdestroydefiners always try to destroy all lag...

5.5CVSS7.5AI score0.00031EPSS
Exploits0References13
OSV
OSV
added 2025/01/31 12:15 p.m.1 views

DEBIAN-CVE-2025-21675

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Clear port select structure when fail to create Clear the port select structure on error so no stale values left after definers are destroyed. That's because the mlx5lagdestroydefiners always try to destroy all lag...

5.5CVSS5.7AI score0.00031EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/31 11:25 a.m.1 views

CVE-2025-21675 net/mlx5: Clear port select structure when fail to create

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Clear port select structure when fail to create Clear the port select structure on error so no stale values left after definers are destroyed. That's because the mlx5lagdestroydefiners always try to destroy all lag...

7.4AI score0.00031EPSS
Exploits0References4
Rows per page
Query Builder