Lucene search
+L

217 matches found

OSV
OSV
added 2026/03/18 5:40 p.m.7 views

CVE-2025-71270 LoongArch: Enable exception fixup for specific ADE subcode

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Enable exception fixup for specific ADE subcode This patch allows the LoongArch BPF JIT to handle recoverable memory access errors generated by BPFPROBEMEM instructions. When a BPF program performs memory access...

5.5CVSS5.7AI score0.00121EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/02/14 4:27 p.m.6 views

CVE-2026-23194

In the Linux kernel, the following vulnerability has been resolved: rustbinder: correctly handle FDA objects of length zero Fix a bug where an empty FDA fd array object with 0 fds would cause an out-of-bounds error. The previous implementation used skip == 0 to mean "this is a pointer fixup", but...

5.4AI score0.00112EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2026/02/14 4:27 p.m.34 views

CVE-2026-23194 rust_binder: correctly handle FDA objects of length zero

In the Linux kernel, the following vulnerability has been resolved: rustbinder: correctly handle FDA objects of length zero Fix a bug where an empty FDA fd array object with 0 fds would cause an out-of-bounds error. The previous implementation used skip == 0 to mean "this is a pointer fixup", but...

0.00112EPSS
SaveExploits0References2
CVE
CVE
added 2026/02/14 4:27 p.m.50 views

CVE-2026-23194

CVE-2026-23194 relates to the Linux kernel rust_binder handling of FDA objects of length zero. The issue was a out-of-bounds write when an empty fd-array (FDA) with 0 fds was processed, caused by treating skip == 0 as a special “pointer fixup.” The fix replaces this zero-special-case pattern (ori...

7.8CVSS5.5AI score0.00112EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/02/14 4:27 p.m.8 views

CVE-2026-23194 rust_binder: correctly handle FDA objects of length zero

In the Linux kernel, the following vulnerability has been resolved: rustbinder: correctly handle FDA objects of length zero Fix a bug where an empty FDA fd array object with 0 fds would cause an out-of-bounds error. The previous implementation used skip == 0 to mean "this is a pointer fixup", but...

7.8CVSS5.5AI score0.00112EPSS
SaveExploits0References5
AstraLinux
AstraLinux
added 2026/01/27 5:1 a.m.4 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix slab out-of-bounds access in mtreportfixup A malicious HID device can trigger a slab out-of-bounds during mtreportfixup by passing in report descriptor smaller than 607 bytes. mtreportfixup attempts to patch...

7.1CVSS6.4AI score0.0015EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/01/27 5:1 a.m.8 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: arm64: Do not call NULL in docompatalignmentfixup. doalignmentt32tohandler only fixes alignment faults for specific instructions; otherwise, it returns NULL e.g., for LDREX. When this occurs, a signal is sent to the caller...

5.5CVSS6.5AI score0.00191EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/27 12:0 a.m.4 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005154)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005154 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: wait for fixup workers before stopping cleaner kthread during umount During unmount, at...

5.5CVSS6.8AI score0.0029EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/22 12:0 a.m.6 views

Azure Linux 3.0 Security Update: kernel (CVE-2025-22033)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22033 advisory. - In the Linux kernel, the following vulnerability has been resolved: arm64: Don't call NULL in...

5.5CVSS6AI score0.00191EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.6 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001235)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001235 advisory. The cpreportfixup function in drivers/hid/hid-cypress.c in the Linux kernel 3.2 and 4.x before 4.9.4 allows physically proximate attackers to cause a denial of servi...

6.6CVSS7.4AI score0.00454EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.3 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001914)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001914 advisory. The reportfixup functions in the HID subsystem in the Linux kernel before 3.16.2 might allow physically proximate attackers to cause a denial of service out-of-bound...

4.7CVSS6.9AI score0.00397EPSS
SaveExploits0References22
RedHat Linux
RedHat Linux
added 2026/01/12 1:52 p.m.6 views

kernel: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()

A flaw exists in the Linux kernel’s HID multitouch driver function mtreportfixup in drivers/hid/hid-multitouch.c. A malicious HID device may supply a report descriptor smaller than 607 bytes; the function then attempts to access and patch byte offset 607 without first verifying the descriptor...

7.1CVSS5.8AI score0.0015EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/01/12 9:30 a.m.4 views

kernel: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()

A flaw exists in the Linux kernel’s HID multitouch driver function mtreportfixup in drivers/hid/hid-multitouch.c. A malicious HID device may supply a report descriptor smaller than 607 bytes; the function then attempts to access and patch byte offset 607 without first verifying the descriptor...

7.1CVSS5.8AI score0.0015EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:0 a.m.5 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993014)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993014 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: wait for fixup workers before stopping cleaner kthread during umount During unmount, at...

5.5CVSS6.5AI score0.0029EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:0 a.m.3 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992842)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992842 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: cougar: fix slab-out-of-bounds Read in cougarreportfixup reportfixup for the Cougar 500k...

7.1CVSS6.2AI score0.00266EPSS
SaveExploits0References3
CVE
CVE
added 2025/12/30 12:8 p.m.30 views

CVE-2023-54167

The CVE-2023-54167 issue concerns the Linux kernel on m68k where phys_to_virt handling for the initrd was performed before paging_init, causing an access fault on boot with an initial ramdisk on non-zero start memory architectures (e.g., Amiga). The fix postpones phys_to_virt initialization until...

5.8AI score0.00166EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/12/16 3:30 p.m.5 views

EUVD-2025-203704

In the Linux kernel, the following vulnerability has been resolved: net: usb: qmiwwan: initialize MAC header offset in qmimuxrxfixup Raw IP packets have no MAC header, leaving skb-macheader uninitialized. This can trigger kernel panics on ARM64 when xfrm or other subsystems access the offset due ...

6AI score0.00184EPSS
SaveExploits0References9
NVD
NVD
added 2025/12/16 2:15 p.m.8 views

CVE-2025-68192

In the Linux kernel, the following vulnerability has been resolved: net: usb: qmiwwan: initialize MAC header offset in qmimuxrxfixup Raw IP packets have no MAC header, leaving skb-macheader uninitialized. This can trigger kernel panics on ARM64 when xfrm or other subsystems access the offset due ...

0.00184EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2025/12/16 2:15 p.m.4 views

CVE-2025-68192

In the Linux kernel, the following vulnerability has been resolved: net: usb: qmiwwan: initialize MAC header offset in qmimuxrxfixup Raw IP packets have no MAC header, leaving skb-macheader uninitialized. This can trigger kernel panics on ARM64 when xfrm or other subsystems access the offset due ...

5.9AI score0.00184EPSS
SaveExploits0References35
CVE
CVE
added 2025/12/16 1:43 p.m.31 views

CVE-2025-68192

Technical details about CVE-2025-68192 are not publicly disclosed in the provided connected documents; the SUSE/OpenVAS/Nessus entries reference the CVE but do not furnish product/component/version/root-cause/fix specifics. Monitor for updates.

6.1AI score0.00184EPSS
SaveExploits0References8
Rows per page
Query Builder