Lucene search
+L

417 matches found

Positive Technologies
Positive Technologies
•added 2025/08/22 12:00 a.m.•20 views

PT-2025-39138

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue exists in the PSI Pressure Stall Information monitoring mechanism within the Linux kernel. The problem occurs when a file descriptor is accessed after it has...

8.5CVSS7.3AI score0.00154EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/08/19 11:22 p.m.•15 views

SUSE CVE-2025-38614

In the Linux kernel, the following vulnerability has been resolved: eventpoll: Fix semi-unbounded recursion Ensure that epoll instances can never form a graph deeper than EPMAXNESTS+1 links. Currently, eploopcheckproc ensures that the graph is loop-free and does some recursion depth checks, but...

5.5CVSS6.1AI score0.00185EPSS
SaveExploits0References23
NVD
NVD
•added 2025/08/19 5:15 p.m.•17 views

CVE-2025-38614

In the Linux kernel, the following vulnerability has been resolved: eventpoll: Fix semi-unbounded recursion Ensure that epoll instances can never form a graph deeper than EPMAXNESTS+1 links. Currently, eploopcheckproc ensures that the graph is loop-free and does some recursion depth checks, but...

7.8CVSS0.00185EPSS
SaveExploits0References12
osv_azl
osv_azl
•added 2025/08/19 5:15 p.m.•20 views

AZL-66533 CVE-2025-38614 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: eventpoll: Fix semi-unbounded recursion Ensure that epoll instances can never form a graph deeper than EPMAXNESTS+1 links. Currently, eploopcheckproc ensures that the graph is loop-free and does some recursion depth checks, but...

7.8CVSS6.1AI score0.00185EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2025/08/19 5:15 p.m.•8 views

DEBIAN-CVE-2025-38614

In the Linux kernel, the following vulnerability has been resolved: eventpoll: Fix semi-unbounded recursion Ensure that epoll instances can never form a graph deeper than EPMAXNESTS+1 links. Currently, eploopcheckproc ensures that the graph is loop-free and does some recursion depth checks, but...

5.5CVSS6.3AI score0.00185EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2025/08/19 5:15 p.m.•20 views

AZL-73878 CVE-2025-38614 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: eventpoll: Fix semi-unbounded recursion Ensure that epoll instances can never form a graph deeper than EPMAXNESTS+1 links. Currently, eploopcheckproc ensures that the graph is loop-free and does some recursion depth checks, but...

7.8CVSS6.1AI score0.00185EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/19 5:03 p.m.•64 views

CVE-2025-38614 eventpoll: Fix semi-unbounded recursion

In the Linux kernel, the following vulnerability has been resolved: eventpoll: Fix semi-unbounded recursion Ensure that epoll instances can never form a graph deeper than EPMAXNESTS+1 links. Currently, eploopcheckproc ensures that the graph is loop-free and does some recursion depth checks, but...

7.8CVSS0.00185EPSS
SaveExploits0References7
CVE
CVE
•added 2025/08/19 5:03 p.m.•115 views

CVE-2025-38614

The CVE CVE-2025-38614 affects the Linux kernel eventpoll/epoll component. The vulnerability stemmed from semi-unbounded recursion in ep_loop_check_proc() and related upwards/downwards path checks, enabling depths up to ~500 in certain graphs before a fix. The fix introduces subtree depth trackin...

7.8CVSS6.1AI score0.00185EPSS
SaveExploits0References12Affected Software1
osv_cve
osv_cve
•added 2025/08/19 5:03 p.m.•17 views

CVE-2025-38614 eventpoll: Fix semi-unbounded recursion

In the Linux kernel, the following vulnerability has been resolved: eventpoll: Fix semi-unbounded recursion Ensure that epoll instances can never form a graph deeper than EPMAXNESTS+1 links. Currently, eploopcheckproc ensures that the graph is loop-free and does some recursion depth checks, but...

7.8CVSS6.1AI score0.00185EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
•added 2025/08/19 12:00 a.m.•21 views

PT-2025-33812

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw within the eventpoll subsystem that could allow for semi-unbounded recursion. The issue stems from insufficient depth checks when creating graph edges...

7.8CVSS6.6AI score0.00185EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/08/19 12:00 a.m.•13 views

PT-2025-49437

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the 9p protocol’s handling of file descriptors. Specifically, the p9 fd request function may not correctly kick the receive thread when EPOLL...

4.4CVSS6.3AI score0.00172EPSS
SaveExploits0
Packet Storm News
Packet Storm News
•added 2025/08/18 12:00 a.m.•22 views

Linux 6.4 epoll Use-After-Free

Linux versions starting at 6.4 suffer from a use-after-free vulnerability via a race condition between epeventpollrelease and eventpollreleasefile because mutexunlock is not ownership-drop-safe...

6.9AI score0.00184EPSS
SaveExploits0
osv_ubuntu
osv_ubuntu
•added 2025/07/18 8:15 a.m.•13 views

UBUNTU-CVE-2025-38349

In the Linux kernel, the following vulnerability has been resolved: eventpoll: don't decrement ep refcount while still holding the ep mutex Jann Horn points out that epoll is decrementing the ep refcount and then doing a mutexunlock&ep-mtx; afterwards. That's very wrong, because it can lead to a...

7.8CVSS6.5AI score0.00184EPSS
SaveExploits0References32
Vulnrichment
Vulnrichment
•added 2025/07/18 7:53 a.m.•17 views

CVE-2025-38349 eventpoll: don't decrement ep refcount while still holding the ep mutex

In the Linux kernel, the following vulnerability has been resolved: eventpoll: don't decrement ep refcount while still holding the ep mutex Jann Horn points out that epoll is decrementing the ep refcount and then doing a mutexunlock&ep-mtx; afterwards. That's very wrong, because it can lead to a...

7.8CVSS6.2AI score0.00184EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/07/18 12:00 a.m.•6 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from improperly decrementing the epoll reference count, which could lead to reuse after release...

7.8CVSS6.7AI score0.00184EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/07/09 12:00 a.m.•28 views

PT-2025-30016

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's eventpoll implementation where the epoll reference count is decremented while still holding the ep mutex. This can lead to a use-after-free condition...

7.8CVSS6.8AI score0.00184EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/06/19 3:16 a.m.•13 views

SUSE CVE-2025-38017

In the Linux kernel, the following vulnerability has been resolved: fs/eventpoll: fix endless busy loop after timeout has expired After commit 0a65bc27bd64 "eventpoll: Set epoll timeout if it's in the future", the following program would immediately enter a busy loop in the kernel: int main int e...

5.5CVSS5.8AI score0.00163EPSS
SaveExploits0References3
NVD
NVD
•added 2025/06/18 10:15 a.m.•21 views

CVE-2025-38017

In the Linux kernel, the following vulnerability has been resolved: fs/eventpoll: fix endless busy loop after timeout has expired After commit 0a65bc27bd64 "eventpoll: Set epoll timeout if it's in the future", the following program would immediately enter a busy loop in the kernel: int main int e...

5.5CVSS0.00163EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/06/18 9:28 a.m.•18 views

CVE-2025-38017 fs/eventpoll: fix endless busy loop after timeout has expired

In the Linux kernel, the following vulnerability has been resolved: fs/eventpoll: fix endless busy loop after timeout has expired After commit 0a65bc27bd64 "eventpoll: Set epoll timeout if it's in the future", the following program would immediately enter a busy loop in the kernel: int main int e...

5.8AI score0.00163EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/05/23 5:24 a.m.•14 views

CVE-2023-52266

ehttp 1.0.6 before 17405b9 has an epollsocket.cpp readfunc use-after-free. An attacker can make many connections over a short time to trigger this...

7.5CVSS7.3AI score0.0074EPSS
SaveExploits1References1
Rows per page
Query Builder