Lucene search
+L

16813 matches found

CVE
CVE
•added 2025/12/08 1:19 a.m.•47 views

CVE-2023-53749

CVE-2023-53749 is discussed across multiple sources as a Linux kernel issue: the x86 memory-clearing path in clear_user_rep_good() had incorrect exception-table annotations, which could lead to a kernel oops instead of -EFAULT when a user-space access faults. Upstream fixes remove the problematic...

6.2AI score0.00024EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/12/08 12:23 a.m.•25 views

SUSE CVE-2025-40272

In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix use-after-free race in fault handler When a page fault occurs in a secret memory file created with memfdsecret2, the kernel will allocate a new folio for it, mark the underlying page as not-present in the direct...

5.5CVSS6.5AI score0.00143EPSS
SaveExploits0References21
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/08 12:00 a.m.•4 views

CVE-2022-50625: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: avoid SBSA UART accessing DMACR register Chapter "B Generic UART" in "ARM Server Base System Architecture" 1 documentation describes a generic UART interface. Such generic UART does not support DMA. In current...

6.3AI score0.00237EPSS
SaveExploits0References1
Amazon
Amazon
•added 2025/12/08 12:00 a.m.•19 views

Medium: postgresql15

Issue Overview: Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail...

5.9CVSS6.4AI score0.00364EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/12/08 12:00 a.m.•13 views

Amazon Linux 2 : libpq, --advisory ALAS2POSTGRESQL14-2025-020 (ALASPOSTGRESQL14-2025-020)

The version of libpq installed on the remote host is prior to 14.20-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2POSTGRESQL14-2025-020 advisory. Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network...

5.9CVSS6.7AI score0.00364EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/12/08 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2025-40272

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/secretmem: fix use-after-free race in fault handler When a page fault occurs in a secret memory file created with memfdsecret2, the kernel will allocate a ne...

7.8CVSS6.6AI score0.00143EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/12/07 9:55 p.m.•24 views

CVE-2025-40272

A use-after-free race condition was found in the secretmem subsystem of the Linux kernel. When two tasks concurrently fault on the same page in a memfdsecret file, the losing task may free its folio before restoring the direct map entry. This allows the freed page to be reallocated while still...

5.8CVSS6.6AI score0.00143EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/12/07 12:30 a.m.•31 views

EUVD-2025-201583

In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix use-after-free race in fault handler When a page fault occurs in a secret memory file created with memfdsecret2, the kernel will allocate a new folio for it, mark the underlying page as not-present in the direct...

6.5AI score0.00143EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/12/07 12:00 a.m.•15 views

PT-2026-23739

Name of the Vulnerable Software and Affected Versions GNU Binutils versions through 2.46 Description The software contains a flaw where a null pointer dereference can occur when processing a specially crafted ELF binary with incorrectly formatted header fields. This happens during relocation...

7.8CVSS6.1AI score0.00266EPSS
SaveExploits4References42
osv_debian
osv_debian
•added 2025/12/06 10:15 p.m.•19 views

DEBIAN-CVE-2025-40272

In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix use-after-free race in fault handler When a page fault occurs in a secret memory file created with memfdsecret2, the kernel will allocate a new folio for it, mark the underlying page as not-present in the direct...

7.8CVSS6.8AI score0.00143EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/06 10:15 p.m.•21 views

CVE-2025-40272

In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix use-after-free race in fault handler When a page fault occurs in a secret memory file created with memfdsecret2, the kernel will allocate a new folio for it, mark the underlying page as not-present in the direct...

7.8CVSS0.00143EPSS
SaveExploits0References6
osv_ubuntu
osv_ubuntu
•added 2025/12/06 10:15 p.m.•23 views

UBUNTU-CVE-2025-40272

In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix use-after-free race in fault handler When a page fault occurs in a secret memory file created with memfdsecret2, the kernel will allocate a new folio for it, mark the underlying page as not-present in the direct...

7.8CVSS6.8AI score0.00143EPSS
SaveExploits0References34
CVE
CVE
•added 2025/12/06 9:50 p.m.•77 views

CVE-2025-40272

CVE-2025-40272 : In the Linux kernel, a use-after-free race in mm/secretmem fault handling could occur when two tasks fault on the same memfd_secret page concurrently, risking a supervisor not-present page fault. The issue arises from the previous fault-handler ordering, which freed the folio bef...

7.8CVSS6.5AI score0.00143EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2025/12/06 9:50 p.m.•45 views

CVE-2025-40272 mm/secretmem: fix use-after-free race in fault handler

In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix use-after-free race in fault handler When a page fault occurs in a secret memory file created with memfdsecret2, the kernel will allocate a new folio for it, mark the underlying page as not-present in the direct...

7.8CVSS0.00143EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2025/12/06 9:50 p.m.•20 views

CVE-2025-40272 mm/secretmem: fix use-after-free race in fault handler

In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix use-after-free race in fault handler When a page fault occurs in a secret memory file created with memfdsecret2, the kernel will allocate a new folio for it, mark the underlying page as not-present in the direct...

7.8CVSS6.2AI score
SaveExploits0References9
Debian CVE
Debian CVE
•added 2025/12/06 9:50 p.m.•20 views

CVE-2025-40272

In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix use-after-free race in fault handler When a page fault occurs in a secret memory file created with memfdsecret2, the kernel will allocate a new folio for it, mark the underlying page as not-present in the direct...

7.8CVSS6.8AI score0.00143EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/06 12:00 a.m.•5 views

CVE-2025-40272: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix use-after-free race in fault handler When a page fault occurs in a secret memory file created with memfdsecret2, the kernel will allocate a new folio for it, mark the underlying page as not-present in the direct...

7.8CVSS6.5AI score0.00143EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2025/12/04 12:50 p.m.•24 views

kernel: net: sched: sfb: fix null pointer access issue when sfb_init() fails

A null pointer dereference exists in the linux kernel, such that when sfbinit fails qdisc is NULL, and it will cause gpf issue, leading to damage to the availability of the system...

5.5CVSS6.2AI score0.00208EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/04 12:00 a.m.•5 views

CVE-2025-40237: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fs/notify: call exportfsencodefid with sumount Calling intotifyshowfdinfo on fd watching an overlayfs inode, while the overlayfs is being unmounted, can lead to dereferencing NULL ptr. This issue was found by syzkaller. Race...

6.2AI score0.00201EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/04 12:00 a.m.•3 views

CVE-2025-40235: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: btrfs: directly free partially initialized fsinfo in btrfscheckleakedroots If fsinfo-supercopy or fsinfo-superforcommit allocated failed in btrfsgettreesubvol, then no need to call btrfsfreefsinfo. Otherwise btrfscheckleakedroots...

5.8AI score0.00199EPSS
SaveExploits0References1
Rows per page
Query Builder