Lucene search
K

1714 matches found

SUSE CVE
SUSE CVE
added 2025/07/03 11:23 p.m.1 views

SUSE CVE-2025-38100

In the Linux kernel, the following vulnerability has been resolved: x86/iopl: Cure TIFIOBITMAP inconsistencies iobitmapexit is invoked from exitthread when a task exists or when a fork fails. In the latter case the exitthread cleans up resources which were allocated during fork. iobitmapexit...

4.4CVSS7.8AI score0.00105EPSS
Exploits0References16
OSV
OSV
added 2025/07/03 9:15 a.m.1 views

DEBIAN-CVE-2025-38100

In the Linux kernel, the following vulnerability has been resolved: x86/iopl: Cure TIFIOBITMAP inconsistencies iobitmapexit is invoked from exitthread when a task exists or when a fork fails. In the latter case the exitthread cleans up resources which were allocated during fork. iobitmapexit...

5.5CVSS5.6AI score0.00105EPSS
Exploits0References1
OSV
OSV
added 2025/07/03 9:15 a.m.4 views

UBUNTU-CVE-2025-38100

In the Linux kernel, the following vulnerability has been resolved: x86/iopl: Cure TIFIOBITMAP inconsistencies iobitmapexit is invoked from exitthread when a task exists or when a fork fails. In the latter case the exitthread cleans up resources which were allocated during fork. iobitmapexit...

5.5CVSS6.2AI score0.00105EPSS
Exploits0References42
CVE
CVE
added 2025/07/03 8:35 a.m.70 views

CVE-2025-38100

CVE-2025-38100 affects the Linux kernel (x86/iopl). The issue arises when a task with TIF_IO_BITMAP set lacks an installed bitmap, causing tss_update_io_bitmap() to dereference NULL. Two problems are fixed: (1) io_bitmap_exit() no longer calls task_update_io_bitmap() for non-current tasks (cleanu...

5.5CVSS7.2AI score0.00105EPSS
Exploits0References10Affected Software1
SUSE CVE
SUSE CVE
added 2025/07/03 12:36 a.m.1 views

SUSE CVE-2004-0427

The dofork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mmcount counter when an error occurs after the mmstruct for a child process has been activated, which triggers a memory leak that allows local users to cause a denial of service memory...

2.1CVSS6.5AI score0.00164EPSS
Exploits0References3
Packet Storm News
Packet Storm News
added 2025/06/30 12:0 a.m.2 views

American Fuzzy Lop plus plus 4.33c

Google's American Fuzzy Lop is a brute-force fuzzer coupled with an exceedingly simple but rock-solid instrumentation-guided genetic algorithm. afl++ is a superior fork to Google's afl. It has more speed, more and better mutations, more and better instrumentation, custom module support, etc...

6.9AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/06/19 6:14 p.m.3 views

CVE-2022-49990

In the Linux kernel, the following vulnerability has been resolved: s390: fix double free of GS and RI CBs on fork failure The pointers for guarded storage and runtime instrumentation control blocks are stored in the threadstruct of the associated task. These pointers are initially copied on fork...

5.5CVSS7AI score0.00064EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/06/19 3:44 a.m.1 views

SUSE CVE-2022-49990

In the Linux kernel, the following vulnerability has been resolved: s390: fix double free of GS and RI CBs on fork failure The pointers for guarded storage and runtime instrumentation control blocks are stored in the threadstruct of the associated task. These pointers are initially copied on fork...

5.5CVSS6.3AI score0.00064EPSS
Exploits0References12
NVD
NVD
added 2025/06/18 11:15 a.m.3 views

CVE-2022-49990

In the Linux kernel, the following vulnerability has been resolved: s390: fix double free of GS and RI CBs on fork failure The pointers for guarded storage and runtime instrumentation control blocks are stored in the threadstruct of the associated task. These pointers are initially copied on fork...

7.8CVSS0.00064EPSS
Exploits0References6
OSV
OSV
added 2025/06/18 11:15 a.m.1 views

DEBIAN-CVE-2022-49990

In the Linux kernel, the following vulnerability has been resolved: s390: fix double free of GS and RI CBs on fork failure The pointers for guarded storage and runtime instrumentation control blocks are stored in the threadstruct of the associated task. These pointers are initially copied on fork...

7.8CVSS5.4AI score0.00064EPSS
Exploits0References1
OSV
OSV
added 2025/06/18 11:15 a.m.1 views

UBUNTU-CVE-2022-49990

In the Linux kernel, the following vulnerability has been resolved: s390: fix double free of GS and RI CBs on fork failure The pointers for guarded storage and runtime instrumentation control blocks are stored in the threadstruct of the associated task. These pointers are initially copied on fork...

7.8CVSS6.1AI score0.00064EPSS
Exploits0References8
Cvelist
Cvelist
added 2025/06/18 11:0 a.m.7 views

CVE-2022-49990 s390: fix double free of GS and RI CBs on fork() failure

In the Linux kernel, the following vulnerability has been resolved: s390: fix double free of GS and RI CBs on fork failure The pointers for guarded storage and runtime instrumentation control blocks are stored in the threadstruct of the associated task. These pointers are initially copied on fork...

0.00064EPSS
Exploits0References6
OSV
OSV
added 2025/06/18 11:0 a.m.2 views

CVE-2022-49990 s390: fix double free of GS and RI CBs on fork() failure

In the Linux kernel, the following vulnerability has been resolved: s390: fix double free of GS and RI CBs on fork failure The pointers for guarded storage and runtime instrumentation control blocks are stored in the threadstruct of the associated task. These pointers are initially copied on fork...

7.8CVSS6AI score0.00064EPSS
Exploits0References9
Debian CVE
Debian CVE
added 2025/06/18 11:0 a.m.5 views

CVE-2022-49990

In the Linux kernel, the following vulnerability has been resolved: s390: fix double free of GS and RI CBs on fork failure The pointers for guarded storage and runtime instrumentation control blocks are stored in the threadstruct of the associated task. These pointers are initially copied on fork...

7.8CVSS5.4AI score0.00064EPSS
Exploits0
CVE
CVE
added 2025/06/18 11:0 a.m.87 views

CVE-2022-49990

CVE-2022-49990 affects the Linux kernel (s390) where guarded storage and runtime instrumentation control blocks stored in thread_struct are copied during fork via arch_dup_task_struct() and then cleared in copy_thread(). If fork() fails after the initial task dup and before copy_thread(), free_ta...

7.8CVSS6.3AI score0.00064EPSS
Exploits0References6Affected Software1
CNNVD
CNNVD
added 2025/06/18 12:0 a.m.2 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a double release of GS and RI CBs on fork failure, which could lead to memory corruption...

7.8CVSS6.3AI score0.00064EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2025/05/23 5:39 a.m.2 views

CVE-2023-0485

An issue has been discovered in GitLab affecting all versions starting from 13.11 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. It was possible that a project member demoted to a user role to read project updates by doing a diff wit...

6.5CVSS6.2AI score0.02453EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:39 a.m.1 views

CVE-2023-26493

Cocos Engine is an open-source framework for building 2D & 3D real-time rendering and interactive content. In the github repo for Cocos Engine the web-interface-check.yml was subject to command injection. The web-interface-check.yml was triggered when a pull request was opened or updated and...

8.8CVSS7.3AI score0.11068EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:10 a.m.5 views

CVE-2023-3920

An issue has been discovered in GitLab affecting all versions starting from 11.2 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. It was possible that a maintainer to create a fork relationship between existing projects contrary to the...

4.3CVSS6.4AI score0.00319EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:57 a.m.2 views

CVE-2023-0989

An information disclosure issue in GitLab CE/EE affecting all versions starting from 13.11 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows an attacker to extract non-protected CI/CD variables by tricking a user to visit a fork with a malicious CI/CD configuration...

5.7CVSS6.2AI score0.00065EPSS
Exploits0References1
Rows per page
Query Builder