Lucene search
+L

77543 matches found

CVE
CVE
added 2026/04/22 1:53 p.m.25 views

CVE-2026-31443

CVE-2026-31443 : Linux kernel, dmaengine: idxd driver fix. When hardware does not support event logging and a Function Level Reset (FLR) occurs, the driver previously attempted to restore the event log even if it was never allocated, and may crash. The fix ensures the event log is only freed if i...

5.5CVSS5.6AI score0.00121EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2026/04/22 1:53 p.m.35 views

CVE-2026-31439 dmaengine: xilinx: xdma: Fix regmap init error handling

In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinx: xdma: Fix regmap init error handling devmregmapinitmmio returns an ERRPTR upon error, not NULL. Fix the error check and also fix the error message. Use the error code from ERRPTR instead of the wrong value in r...

0.00122EPSS
SaveExploits0References5
CVE
CVE
added 2026/04/22 1:53 p.m.27 views

CVE-2026-31439

The CVE-2026-31439 entry refers to a Linux kernel issue in dmaengine: xilinx: xdma, where devm_regmap_init_mmio could return an ERR_PTR and the error handling/ messaging were incorrect. The description and connected advisories confirm this is a kernel regression/fix in the regmap init path, with ...

5.5CVSS5.6AI score0.00122EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/04/22 1:53 p.m.9 views

CVE-2026-31439 dmaengine: xilinx: xdma: Fix regmap init error handling

In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinx: xdma: Fix regmap init error handling devmregmapinitmmio returns an ERRPTR upon error, not NULL. Fix the error check and also fix the error message. Use the error code from ERRPTR instead of the wrong value in r...

5.9AI score
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2026/04/22 1:47 p.m.9 views

CVE-2026-33595 DoQ/DoH3 excessive memory allocation

A client can trigger excessive memory allocation by generating a lot of errors responses over a single DoQ and DoH3 connection, as some resources were not properly released until the end of the connection...

5.3CVSS5.8AI score0.00371EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/22 1:47 p.m.34 views

CVE-2026-33595 DoQ/DoH3 excessive memory allocation

A client can trigger excessive memory allocation by generating a lot of errors responses over a single DoQ and DoH3 connection, as some resources were not properly released until the end of the connection...

5.3CVSS0.00371EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/22 1:47 p.m.7 views

CVE-2026-33595 DoQ/DoH3 excessive memory allocation

A client can trigger excessive memory allocation by generating a lot of errors responses over a single DoQ and DoH3 connection, as some resources were not properly released until the end of the connection...

5.3CVSS5.9AI score
SaveExploits0References5
CVE
CVE
added 2026/04/22 1:47 p.m.38 views

CVE-2026-33595

The connected documents independently confirm CVE-2026-33595 affects PowerDNS DNSdist, describing a flaw where a client can trigger excessive memory allocation by generating many error responses over a single DoQ/DoH3 connection, with resources not released until connection end. This is the state...

7.5CVSS5.8AI score0.00371EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/04/22 9:31 a.m.12 views

EUVD-2026-24618

Integer overflow in output tensor copy size calculation in Samsung Open Source ONE could cause incorrect copy length and memory corruption for oversized tensors. Affected version is prior to commit 1.30.0...

6.6CVSS5.8AI score0.00138EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/04/22 8:19 a.m.17 views

kernel: macvlan: fix error recovery in macvlan_common_newlink()

A use-after-free vulnerability was found in the macvlan driver. When creating a macvlan interface in source mode fails after the source MAC has been added to the hash table e.g., due to an invalid interface name, the hash entry still references the freed netdevice structure. Subsequent packets...

7.8CVSS5.6AI score0.00119EPSS
SaveExploits0References5
CVE
CVE
added 2026/04/22 5:57 a.m.26 views

CVE-2026-41667

Technical details about CVE-2026-41667 are not provided in the supplied documents. The description notes an integer overflow in Samsung ONE’s constant tensor data size calculation affecting large constant nodes, with affected versions prior to commit 1.30.0; monitor for updates.

6.6CVSS6AI score0.00162EPSS
SaveExploits0References1Affected Software1
GithubExploit
GithubExploit
added 2026/04/22 1:22 a.m.151 views

Exploit for Origin Validation Error in Apache Airflow_Providers_Amazon

CVE-2026-25604 PoC Host Header Injection leading to SAML au...

5.4CVSS5.8AI score0.00359EPSS
SaveExploits1
EUVD
EUVD
added 2026/04/22 12:31 a.m.12 views

EUVD-2026-24550

An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to determine the names of private repositories by their numeric ID. The mobile upload policy API endpoint did not perform an early authorization check, and validation error...

5.3CVSS5.8AI score0.00296EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/04/22 12:31 a.m.12 views

EUVD-2026-24513

KDE Kleopatra before 26.08.0 on Windows allows local users to obtain the privileges of a Kleopatra user, because there is an error in the mechanism KUniqueService for ensuring that only one instance is running...

6.9CVSS5.8AI score0.00114EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/04/22 12:25 a.m.21 views

kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain()

A flaw was found in the Linux kernel. A local attacker with CAPNETADMIN capabilities, or remote packet traffic, could exploit a use-after-free vulnerability in the nftablesaddchain function's error handling. Successful exploitation could lead to a kernel crash, resulting in a Denial of Service Do...

7.8CVSS5.8AI score0.00788EPSS
SaveExploits2References5
NVD
NVD
added 2026/04/22 12:16 a.m.12 views

CVE-2026-40343

free5GC UDR is the user data repository UDR for free5GC, an an open-source project for 5th generation 5G mobile core networks. In versions up to and including 1.4.2, a fail-open request handling flaw in the UDR service causes the /nudr-dr/v2/policy-data/subs-to-notify POST handler to continue...

6.9CVSS0.09955EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/04/22 12:15 a.m.15 views

Moderate: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

7.8CVSS6.4AI score0.00788EPSS
SaveExploits3References10
RedHat Linux
RedHat Linux
added 2026/04/22 12:13 a.m.12 views

kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain()

A flaw was found in the Linux kernel. A local attacker with CAPNETADMIN capabilities, or remote packet traffic, could exploit a use-after-free vulnerability in the nftablesaddchain function's error handling. Successful exploitation could lead to a kernel crash, resulting in a Denial of Service Do...

7.8CVSS5.8AI score0.00788EPSS
SaveExploits2References5
CNNVD
CNNVD
added 2026/04/22 12:00 a.m.17 views

ONE 输入验证错误漏洞

ONE is a high-performance edge-side neural network inference framework developed by Samsung. Versions prior to ONE 1.30.0 contained a vulnerability related to input validation errors. This vulnerability stemmed from integer overflows in the calculation of buffer sizes, which could lead to...

6.6CVSS5.9AI score0.00138EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/22 12:00 a.m.16 views

PT-2026-34505

Name of the Vulnerable Software and Affected Versions uutils coreutils affected versions not specified Description An argument parsing error in the kill utility incorrectly interprets the command 'kill -1' as a request to send the default signal SIGTERM to PID -1. Sending a signal to PID -1 cause...

5.5CVSS5.9AI score0.00128EPSS
SaveExploits0References15
Rows per page
Query Builder