Lucene search
K

1717 matches found

OSV
OSV
added 2025/04/16 3:16 p.m.7 views

AZL-69551 CVE-2025-22090 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Fix VMPAT handling when fork fails in copypagerange If trackpfncopy fails, we already added the dst VMA to the maple tree. As fork fails, we'll cleanup the maple tree, and stumble over the dst VMA for which we neither...

5.5CVSS6.6AI score0.00024EPSS
Exploits0References1
OSV
OSV
added 2025/04/16 3:16 p.m.0 views

UBUNTU-CVE-2025-22090

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Fix VMPAT handling when fork fails in copypagerange If trackpfncopy fails, we already added the dst VMA to the maple tree. As fork fails, we'll cleanup the maple tree, and stumble over the dst VMA for which we neither...

5.5CVSS6.1AI score0.00024EPSS
Exploits0References25
CVE
CVE
added 2025/04/16 2:12 p.m.122 views

CVE-2025-22090

CVE-2025-22090 affects the Linux kernel x86 PAT handling in fork() paths (copy_page_range). When track_pfn_copy() fails, the code previously could stumble over a dst VMA with no reservation or copied pages, causing untrack_pfn() to read PAT info from an unmapped page table. The documented fix: se...

5.5CVSS6AI score0.00024EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2025/04/16 2:12 p.m.12 views

CVE-2025-22090 x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range()

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Fix VMPAT handling when fork fails in copypagerange If trackpfncopy fails, we already added the dst VMA to the maple tree. As fork fails, we'll cleanup the maple tree, and stumble over the dst VMA for which we neither...

0.00024EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2025/04/16 2:12 p.m.7 views

CVE-2025-22090

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Fix VMPAT handling when fork fails in copypagerange If trackpfncopy fails, we already added the dst VMA to the maple tree. As fork fails, we'll cleanup the maple tree, and stumble over the dst VMA for which we neither...

5.5CVSS5.6AI score0.00024EPSS
Exploits0
OSV
OSV
added 2025/04/16 2:12 p.m.8 views

CVE-2025-22090 x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range()

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Fix VMPAT handling when fork fails in copypagerange If trackpfncopy fails, we already added the dst VMA to the maple tree. As fork fails, we'll cleanup the maple tree, and stumble over the dst VMA for which we neither...

5.5CVSS6.1AI score0.00024EPSS
Exploits0References9
CNNVD
CNNVD
added 2025/04/16 12:0 a.m.2 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from improper handling of VMPAT on fork failure in copypagerange, which could lead to a resource leak...

5.5CVSS6.5AI score0.00024EPSS
Exploits0References5
Fedora
Fedora
added 2025/04/09 1:53 a.m.11 views

[SECURITY] Fedora 41 Update: mariadb10.11-10.11.11-1.fc41

MariaDB is a community developed fork from MySQL - a multi-user, multi-thread ed SQL database server. It is a client/server implementation consisting of a server daemon mariadbd and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs...

4.9CVSS7.5AI score0.00445EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2025/04/02 1:29 p.m.1 views

SUSE CVE-2025-3032

Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks. This vulnerability was fixed in Firefox 137 and Thunderbird 137...

7.4CVSS6.7AI score0.00192EPSS
Exploits0References4
AlpineLinux
AlpineLinux
added 2025/04/01 1:15 p.m.1 views

CVE-2025-3032

Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks. This vulnerability affects Firefox 137 and Thunderbird 137...

7.4CVSS6.2AI score0.00192EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2025/04/01 1:15 p.m.1 views

CVE-2025-3032

Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks. This vulnerability affects Firefox 137 and Thunderbird 137...

7.4CVSS5.8AI score0.00192EPSS
Exploits0References4
OSV
OSV
added 2025/04/01 1:15 p.m.0 views

CVE-2025-3032

Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks. This vulnerability affects Firefox 137 and Thunderbird 137...

7.4CVSS5.8AI score0.00192EPSS
Exploits0References3
OSV
OSV
added 2025/04/01 1:15 p.m.0 views

UBUNTU-CVE-2025-3032

Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks. This vulnerability was fixed in Firefox 137 and Thunderbird 137...

7.4CVSS6.8AI score0.00192EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/04/01 12:0 a.m.1 views

PT-2025-14107

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 137 Thunderbird versions prior to 137 Description The issue involves the leaking of file descriptors from the fork server to web content processes, which could allow for privilege escalation attacks. Recommendations F...

9.8CVSS7.6AI score0.19171EPSS
Exploits3References146
CNNVD
CNNVD
added 2025/04/01 12:0 a.m.1 views

Mozilla Firefox和Mozilla Thunderbird 安全漏洞

Mozilla Firefox and Mozilla Thunderbird are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Thunderbird is a separate set of Mozilla Application Suite from the Email client software. The software supports IMAP, POP mail protocols, and HTML...

7.4CVSS6.3AI score0.00192EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/03/29 5:39 p.m.8 views

CVE-2022-49744

In the Linux kernel, the following vulnerability has been resolved: mm/uffd: fix pte marker when fork without fork event Patch series "mm: Fixes on pte markers". Patch 1 resolves the syzkiller report from Pengfei. Patch 2 further harden pte markers when used with the recent swapin error markers...

5.5CVSS7AI score0.00042EPSS
Exploits0References4
OSV
OSV
added 2025/03/28 4:15 p.m.3 views

DEBIAN-CVE-2025-2713

Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file access permissions, which allowed unprivileged users to access restricted files. This occurred because the process initially ran with root-like permissions until the first fork...

7.8CVSS5.2AI score0.00033EPSS
Exploits0References1
OSV
OSV
added 2025/03/28 4:15 p.m.1 views

UBUNTU-CVE-2025-2713

Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file access permissions, which allowed unprivileged users to access restricted files. This occurred because the process initially ran with root-like permissions until the first fork...

7.8CVSS5.8AI score0.00033EPSS
Exploits0References3
Snyk
Snyk
added 2025/03/28 3:47 p.m.1 views

Incorrect Privilege Assignment

Overview Affected versions of this package are vulnerable to Incorrect Privilege Assignment in the runsc process, which has "root-like" permissions. An attacker can expose files on the underlying filesystem by escalating privileges before a project is forked. Remediation Upgrade...

7.8CVSS6.9AI score0.00033EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2025/03/28 3:40 a.m.1 views

SUSE CVE-2022-49744

In the Linux kernel, the following vulnerability has been resolved: mm/uffd: fix pte marker when fork without fork event Patch series "mm: Fixes on pte markers". Patch 1 resolves the syzkiller report from Pengfei. Patch 2 further harden pte markers when used with the recent swapin error markers...

5.5CVSS5.7AI score0.00042EPSS
Exploits0References3
Rows per page
Query Builder