Lucene search
+L

3176 matches found

CNNVD
CNNVD
added 2025/07/28 12:0 a.m.12 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from bypassing the hidhwrawrequest validation, which could result in invalid parameters...

7.8CVSS6.5AI score0.002EPSS
SaveExploits0References11
BDU FSTEC
BDU FSTEC
added 2025/07/28 12:0 a.m.13 views

The vulnerability of the uclogic_input_configured() function in the HID component of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the uclogicinputconfigured function in the HID component of the Linux kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

7CVSS6.5AI score0.00162EPSS
SaveExploits0References18Affected Software8
SUSE CVE
SUSE CVE
added 2025/07/26 11:21 p.m.6 views

SUSE CVE-2025-38378

In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix slab use-after-free bug in appletbkbdprobe In probe appletbkbdprobe a "struct appletbkbd kbd" is allocated via devmkzalloc to store touch bar keyboard related data. Later on if backlightdevicegetbyname finds...

7.8CVSS6.5AI score0.00144EPSS
SaveExploits0References3
NVD
NVD
added 2025/07/25 1:15 p.m.7 views

CVE-2025-38378

In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix slab use-after-free bug in appletbkbdprobe In probe appletbkbdprobe a "struct appletbkbd kbd" is allocated via devmkzalloc to store touch bar keyboard related data. Later on if backlightdevicegetbyname finds...

7.8CVSS0.00144EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/07/25 12:53 p.m.7 views

CVE-2025-38394

In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix memory corruption of inputhandlerlist In appletbkbdprobe an input handler is initialised and then registered with input core through inputregisterhandler. When this happens input core will add the input...

7.8CVSS5.7AI score0.00144EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2025/07/25 12:53 p.m.37 views

CVE-2025-38394

The CVE-2025-38394 issue is in the Linux kernel HID path (appletkd/b appletb-kbd) where an input handler is registered to input core and then, if probe fails, freed memory remains in input_handler_list. This creates a use‑after‑free condition (UAF) in input_attach_handler during subsequent device...

7.8CVSS6.3AI score0.00144EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2025/07/25 12:53 p.m.12 views

CVE-2025-38394 HID: appletb-kbd: fix memory corruption of input_handler_list

In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix memory corruption of inputhandlerlist In appletbkbdprobe an input handler is initialised and then registered with input core through inputregisterhandler. When this happens input core will add the input...

0.00144EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/07/25 12:53 p.m.5 views

CVE-2025-38378

In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix slab use-after-free bug in appletbkbdprobe In probe appletbkbdprobe a "struct appletbkbd kbd" is allocated via devmkzalloc to store touch bar keyboard related data. Later on if backlightdevicegetbyname finds...

7.8CVSS5.7AI score0.00144EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2025/07/25 12:0 a.m.6 views

PT-2025-30794 · Pixart +1 · Pixart Hp Usb Optical Mouse +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.16.0-rc2-00321-g2aa6621d Description: A use-after-free UAF vulnerability exists in the Linux kernel's HID Human Interface Device subsystem, specifically within the appletb-kbd driver. The issue occurs when an...

6.4AI score0.00144EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2025/07/25 12:0 a.m.9 views

NewStart CGSL MAIN 7.02 : bluez Vulnerability (NS-SA-2025-0149)

The remote NewStart CGSL host, running version MAIN 7.02, has bluez packages installed that are affected by a vulnerability: - Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports,...

7.1CVSS6.9AI score0.07879EPSS
SaveExploits9References3
Tenable Nessus
Tenable Nessus
added 2025/07/25 12:0 a.m.38 views

NewStart CGSL MAIN 7.02 : kernel Multiple Vulnerabilities (NS-SA-2025-0118)

"The remote NewStart CGSL host, running version MAIN 7.02, has kernel packages installed that are affected by multiple vulnerabilities: - In the Linux kernel, the following vulnerability has been resolved: smack: tcp: ipv4, fix incorrect labeling Currently, Smack mirrors the label of incoming...

9.8CVSS6.7AI score0.03301EPSS
SaveExploits13References1319
OSV
OSV
added 2025/07/24 3:49 p.m.12 views

USN-7651-6 linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - S390 architecture; - Block layer subsystem; - Serial ATA and Parallel ATA drivers; - Driver...

7.8CVSS6.6AI score0.00259EPSS
SaveExploits0References118
OSV
OSV
added 2025/07/24 8:1 a.m.12 views

USN-7651-5 linux-raspi-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - S390 architecture; - Block layer subsystem; - Serial ATA and Parallel ATA drivers; - Driver...

7.8CVSS6.6AI score0.00259EPSS
SaveExploits0References118
Positive Technologies
Positive Technologies
added 2025/07/23 12:0 a.m.9 views

PT-2025-33755

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The HID core is susceptible to a shift-out-of-bounds exception when converting a 32-bit quantity to a 0-bit quantity. This can occur due to buggy devices reporting a report field with ...

7.1CVSS6.4AI score0.00161EPSS
SaveExploits0
OSV
OSV
added 2025/07/22 7:44 a.m.18 views

USN-7654-4 linux-kvm vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PA-RISC architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; -...

9.8CVSS6.4AI score0.01483EPSS
SaveExploits0References140
OSV
OSV
added 2025/07/18 9:43 a.m.21 views

USN-7654-3 linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PA-RISC architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; -...

9.8CVSS6.4AI score0.01483EPSS
SaveExploits0References140
OSV
OSV
added 2025/07/18 9:32 a.m.15 views

USN-7654-2 linux-intel-iot-realtime, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PA-RISC architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; -...

9.8CVSS6.5AI score0.01483EPSS
SaveExploits0References140
OSV
OSV
added 2025/07/18 9:0 a.m.21 views

USN-7654-1 linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx, linux-oracle, linux-oracle-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PA-RISC architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; -...

9.8CVSS6.4AI score0.01483EPSS
SaveExploits0References140
Microsoft CVE
Microsoft CVE
added 2025/07/11 7:0 a.m.4 views

iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid

...

7.8CVSS7.2AI score0.0021EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/07/10 5:18 p.m.4 views

CVE-2025-48816

Integer overflow or wraparound in HID class driver allows an authorized attacker to elevate privileges locally...

7.8CVSS6.3AI score0.00352EPSS
SaveExploits0References1
Rows per page
Query Builder