Lucene search
+L

42 matches found

Positive Technologies
Positive Technologies
•added 2025/07/22 12:00 a.m.•23 views

PT-2025-33784

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw in the ARM64 BPF JIT related to frame pointer FP initialization for exception boundaries. Specifically, when a BPF program acts as an exception boundar...

7.8CVSS6.1AI score0.00176EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/05/03 2:50 a.m.•15 views

SUSE CVE-2023-53135

In the Linux kernel, the following vulnerability has been resolved: riscv: Use READONCENOCHECK in imprecise unwinding stack mode When CONFIGFRAMEPOINTER is unset, the stack unwinding function walkstackframe randomly reads the stack and then, when KASAN is enabled, it can lead to the following...

7.1CVSS6.5AI score0.00193EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2025/05/02 4:15 p.m.•10 views

DEBIAN-CVE-2023-53135

In the Linux kernel, the following vulnerability has been resolved: riscv: Use READONCENOCHECK in imprecise unwinding stack mode When CONFIGFRAMEPOINTER is unset, the stack unwinding function walkstackframe randomly reads the stack and then, when KASAN is enabled, it can lead to the following...

7.1CVSS6.7AI score0.00193EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/05/02 4:15 p.m.•18 views

UBUNTU-CVE-2023-53135

In the Linux kernel, the following vulnerability has been resolved: riscv: Use READONCENOCHECK in imprecise unwinding stack mode When CONFIGFRAMEPOINTER is unset, the stack unwinding function walkstackframe randomly reads the stack and then, when KASAN is enabled, it can lead to the following...

7.1CVSS6.7AI score0.00193EPSS
SaveExploits0References9
osv_debian
osv_debian
•added 2025/04/16 3:16 p.m.•13 views

DEBIAN-CVE-2025-22069

In the Linux kernel, the following vulnerability has been resolved: riscv: fgraph: Fix stack layout to match archftraceregs argument of ftracereturntohandler Naresh Kamboju reported a "Bad frame pointer" kernel warning while running LTP trace ftracestresstest.sh in riscv. We can reproduce the sam...

7.8CVSS6.2AI score0.00212EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/04/16 3:16 p.m.•28 views

UBUNTU-CVE-2025-22069

In the Linux kernel, the following vulnerability has been resolved: riscv: fgraph: Fix stack layout to match archftraceregs argument of ftracereturntohandler Naresh Kamboju reported a "Bad frame pointer" kernel warning while running LTP trace ftracestresstest.sh in riscv. We can reproduce the sam...

7.8CVSS6.2AI score0.00212EPSS
SaveExploits0References8
osv_cve
osv_cve
•added 2025/04/16 2:12 p.m.•24 views

CVE-2025-22069 riscv: fgraph: Fix stack layout to match __arch_ftrace_regs argument of ftrace_return_to_handler

In the Linux kernel, the following vulnerability has been resolved: riscv: fgraph: Fix stack layout to match archftraceregs argument of ftracereturntohandler Naresh Kamboju reported a "Bad frame pointer" kernel warning while running LTP trace ftracestresstest.sh in riscv. We can reproduce the sam...

7.8CVSS6AI score0.00212EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2025/04/16 2:12 p.m.•41 views

CVE-2025-22069 riscv: fgraph: Fix stack layout to match __arch_ftrace_regs argument of ftrace_return_to_handler

In the Linux kernel, the following vulnerability has been resolved: riscv: fgraph: Fix stack layout to match archftraceregs argument of ftracereturntohandler Naresh Kamboju reported a "Bad frame pointer" kernel warning while running LTP trace ftracestresstest.sh in riscv. We can reproduce the sam...

7.8CVSS0.00212EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•19 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a stack layout mismatch that could lead to a frame pointer error...

6.2AI score0.00212EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/16 12:00 a.m.•4 views

CVE-2025-22069: Exposure of Resource to Wrong Sphere

In the Linux kernel, the following vulnerability has been resolved: riscv: fgraph: Fix stack layout to match archftraceregs argument of ftracereturntohandler Naresh Kamboju reported a "Bad frame pointer" kernel warning while running LTP trace ftracestresstest.sh in riscv. We can reproduce the sam...

7.8CVSS6AI score0.00212EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2024/08/22 2:15 a.m.•28 views

DEBIAN-CVE-2022-48922

In the Linux kernel, the following vulnerability has been resolved: riscv: fix oops caused by irqsoff latency tracer The tracehardirqson,off require the caller to setup frame pointer properly. This because these two functions use macro 'CALLERADDR1' aka. builtinreturnaddress1 to acquire caller...

5.5CVSS5.8AI score0.00207EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/08/22 12:00 a.m.•19 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the tracehardirqson,off function not setting the frame pointer correctly...

5.5CVSS5.8AI score0.00207EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2023/02/15 5:11 a.m.•10 views

SUSE CVE-2015-8722

epan/dissectors/packet-sctp.c in the SCTP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the frame pointer, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted packet...

5.5CVSS6.7AI score0.01709EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2022/02/24 12:00 a.m.•18 views

PT-2022-7630 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.17.0-rc1-00233-g9a20c48d1ed2 Description: The issue is related to the riscv component of the Linux kernel, where the trace hardirqs on,off functions require the caller to set up the frame pointer properly. If...

5.5CVSS6.5AI score0.00207EPSS
SaveExploits0References21
osv_cve
osv_cve
•added 2019/07/22 6:15 p.m.•44 views

CVE-2019-1010220

tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: "NDPRINTndo, "%s", buf;", in function named "printprefix", in "print-hncp.c". The attack vector is: The victim must open a...

3.3CVSS6.5AI score
SaveExploits0References11
Debian CVE
Debian CVE
•added 2019/07/22 5:30 p.m.•77 views

CVE-2019-1010220

tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: "NDPRINTndo, "%s", buf;", in function named "printprefix", in "print-hncp.c". The attack vector is: The victim must open a...

4.3CVSS5.2AI score0.01342EPSS
SaveExploits0
CNVD
CNVD
•added 2016/12/05 12:00 a.m.•49 views

BlueZ buffer overflow vulnerability (CNVD-2016-11954)

BlueZ is an official Bluetooth stack for Linux. A buffer overflow vulnerability exists in the 'commandsdump' function in the original 'tools/parser/csr.c' file in BlueZ version 5.42, which stems from the lack of a buffer boundary check for the The vulnerability stems from a lack of buffer bounds...

5.3CVSS9AI score0.02523EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2016/12/03 6:59 a.m.•13 views

UBUNTU-CVE-2016-9804

In BlueZ 5.42, a buffer overflow was observed in "commandsdump" function in "tools/parser/csr.c" source file. The issue exists because "commands" array is overflowed by supplied parameter due to lack of boundary checks on size of the buffer from frame "frm-ptr" parameter. This issue can be...

5.3CVSS7AI score0.02523EPSS
SaveExploits1References3
osv_debian
osv_debian
•added 2016/01/04 5:59 a.m.•12 views

DEBIAN-CVE-2015-8722

epan/dissectors/packet-sctp.c in the SCTP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the frame pointer, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted packet...

5.5CVSS7.2AI score0.01709EPSS
SaveExploits0References1
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•17 views

Passlog Daemon 0.1 SL_Parse Remote Buffer Overflow Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/7261/info It has been reported that passlogd does not properly handle some types of input. Because of this, an attacker may be able to gain unauthorized access to hosts running the vulnerable software. / Title: Remote...

7.1AI score
SaveExploits0
Rows per page
Query Builder