Lucene search
K

13 matches found

AstraLinux
AstraLinux
added 2026/06/19 11:10 a.m.3 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: efivarfs: fixed error propagation in efivarentryget The efivarentryget function always returns success, even if the underlying efivarentryget function fails, thereby masking errors. This may result in uninitialized heap memory...

7.8CVSS5.3AI score0.0012EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2026/04/20 6:30 p.m.3 views

kernel: Linux kernel: Information disclosure in efivarfs via incorrect error propagation

A flaw was found in the efivarfs component of the Linux kernel. This vulnerability, an information disclosure issue, arises from incorrect error handling in the efivarentryget function. An unprivileged local attacker can exploit this by reading from efivarfs, potentially causing uninitialized...

7.8CVSS5.6AI score0.0012EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2026/03/09 10:2 a.m.3 views

kernel: Linux kernel: Information disclosure in efivarfs via incorrect error propagation

A flaw was found in the efivarfs component of the Linux kernel. This vulnerability, an information disclosure issue, arises from incorrect error handling in the efivarentryget function. An unprivileged local attacker can exploit this by reading from efivarfs, potentially causing uninitialized...

7.8CVSS5.7AI score0.0012EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2026/02/16 6:19 a.m.3 views

CVE-2026-23156

A flaw was found in the efivarfs component of the Linux kernel. This vulnerability, an information disclosure issue, arises from incorrect error handling in the efivarentryget function. An unprivileged local attacker can exploit this by reading from efivarfs, potentially causing uninitialized...

7.8CVSS5.7AI score0.0012EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2026/02/16 12:26 a.m.2 views

SUSE CVE-2026-23156

In the Linux kernel, the following vulnerability has been resolved: efivarfs: fix error propagation in efivarentryget efivarentryget always returns success even if the underlying efivarentryget fails, masking errors. This may result in uninitialized heap memory being copied to userspace in the...

5.8CVSS5.2AI score0.0012EPSS
Exploits0References20
NVD
NVD
added 2026/02/14 4:15 p.m.7 views

CVE-2026-23156

In the Linux kernel, the following vulnerability has been resolved: efivarfs: fix error propagation in efivarentryget efivarentryget always returns success even if the underlying efivarentryget fails, masking errors. This may result in uninitialized heap memory being copied to userspace in the...

7.8CVSS0.0012EPSS
Exploits0References5
UbuntuCve
UbuntuCve
added 2026/02/14 4:15 p.m.2 views

CVE-2026-23156

In the Linux kernel, the following vulnerability has been resolved: efivarfs: fix error propagation in efivarentryget efivarentryget always returns success even if the underlying efivarentryget fails, masking errors. This may result in uninitialized heap memory being copied to userspace in the...

7.8CVSS5.7AI score0.0012EPSS
Exploits0References13
OSV
OSV
added 2026/02/14 4:15 p.m.4 views

UBUNTU-CVE-2026-23156

In the Linux kernel, the following vulnerability has been resolved: efivarfs: fix error propagation in efivarentryget efivarentryget always returns success even if the underlying efivarentryget fails, masking errors. This may result in uninitialized heap memory being copied to userspace in the...

7.8CVSS5.7AI score0.0012EPSS
Exploits0References16
EUVD
EUVD
added 2026/02/14 4:1 p.m.4 views

EUVD-2026-5881

In the Linux kernel, the following vulnerability has been resolved: efivarfs: fix error propagation in efivarentryget efivarentryget always returns success even if the underlying efivarentryget fails, masking errors. This may result in uninitialized heap memory being copied to userspace in the...

5.2AI score0.0012EPSS
Exploits0References5
CVE
CVE
added 2026/02/14 4:1 p.m.14 views

CVE-2026-23156

CVE-2026-23156 affects Linux kernel efivarfs: efivar_entry_get() may return success even if __efivar_entry_get() fails, potentially enabling uninitialized heap data to be copied to userspace via efivarfs_file_read(). The root cause is error propagation being suppressed; the fix is to return the e...

7.8CVSS5.2AI score0.0012EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2026/02/14 4:1 p.m.4 views

CVE-2026-23156 efivarfs: fix error propagation in efivar_entry_get()

In the Linux kernel, the following vulnerability has been resolved: efivarfs: fix error propagation in efivarentryget efivarentryget always returns success even if the underlying efivarentryget fails, masking errors. This may result in uninitialized heap memory being copied to userspace in the...

7.8CVSS5.2AI score0.0012EPSS
Exploits0References8
CNNVD
CNNVD
added 2026/02/14 12:0 a.m.4 views

Linux kernel和ux 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, caused by an improper propagation of the efivarentryget function, which may lead to uninitialized memory leaks...

7.8CVSS7AI score0.0012EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.5 views

PT-2026-8151

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the efivar entry get function does not properly propagate errors from the efivar entry get function. This can lead to uninitialized heap memory...

7.8CVSS6.7AI score0.0012EPSS
Exploits0
Rows per page
Query Builder