Lucene search
+L

102 matches found

SUSE CVE
SUSE CVE
added 2025/05/03 2:51 a.m.7 views

SUSE CVE-2023-53039

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: ipc: Fix potential use-after-free in work function When a reset notify IPC message is received, the ISR schedules a work function and passes the ISHTP device to it via a global pointer ishtpdev. If ishprobe...

6.7CVSS6.2AI score0.00193EPSS
SaveExploits0References13
ATTACKERKB
ATTACKERKB
added 2025/05/02 4:15 p.m.10 views

CVE-2023-53039

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: ipc: Fix potential use-after-free in work function When a reset notify IPC message is received, the ISR schedules a work function and passes the ISHTP device to it via a global pointer ishtpdev. If ishprobe...

7.8CVSS6.3AI score0.00193EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2025/05/02 4:15 p.m.10 views

CVE-2023-53039

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: ipc: Fix potential use-after-free in work function When a reset notify IPC message is received, the ISR schedules a work function and passes the ISHTP device to it via a global pointer ishtpdev. If ishprobe...

7.8CVSS0.00193EPSS
SaveExploits0References4
OSV
OSV
added 2025/05/02 4:15 p.m.4 views

DEBIAN-CVE-2023-53039

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: ipc: Fix potential use-after-free in work function When a reset notify IPC message is received, the ISR schedules a work function and passes the ISHTP device to it via a global pointer ishtpdev. If ishprobe...

7.8CVSS5.6AI score0.00193EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/02 3:54 p.m.149 views

CVE-2023-53039

CVE-2023-53039 : In the Linux kernel, the intel-ish-hid IPC path had a use-after-free when a reset-notify IPC message schedules a work function that uses a global ishtp_dev; if ish_probe() fails, resources are freed but the scheduled work is not cancelled. The fix uses devm_work_autocancel() so t...

7.8CVSS6.5AI score0.00193EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2025/05/02 3:54 p.m.25 views

CVE-2023-53039 HID: intel-ish-hid: ipc: Fix potential use-after-free in work function

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: ipc: Fix potential use-after-free in work function When a reset notify IPC message is received, the ISR schedules a work function and passes the ISHTP device to it via a global pointer ishtpdev. If ishprobe...

7.8CVSS0.00193EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/05/02 12:00 a.m.11 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the intel-ish-hid driver not properly canceling a work queue, which could lead to reuse after release...

7.8CVSS6.4AI score0.00193EPSS
SaveExploits0References4
OSV
OSV
added 2025/04/01 4:15 p.m.1 views

DEBIAN-CVE-2025-21928

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in ishtphidremove The system can experience a random crash a few minutes after the driver is removed. This issue occurs due to improper handling of memory freeing in the ishtphidremove...

7.8CVSS6AI score0.00215EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/01 4:15 p.m.8 views

CVE-2025-21929

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in hidishtpclremove During the rmmod operation for the intelishtphid driver, a use-after-free issue can occur in the hidishtpclremove function. The function hidishtpcldeinit is called...

7.8CVSS0.00197EPSS
SaveExploits0References3
OSV
OSV
added 2025/04/01 4:15 p.m.8 views

UBUNTU-CVE-2025-21929

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in hidishtpclremove During the rmmod operation for the intelishtphid driver, a use-after-free issue can occur in the hidishtpclremove function. The function hidishtpcldeinit is called...

7.8CVSS6.3AI score0.00197EPSS
SaveExploits0References24
Debian CVE
Debian CVE
added 2025/04/01 3:40 p.m.10 views

CVE-2025-21929

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in hidishtpclremove During the rmmod operation for the intelishtphid driver, a use-after-free issue can occur in the hidishtpclremove function. The function hidishtpcldeinit is called...

7.8CVSS5.9AI score0.00197EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2025/04/01 3:40 p.m.9 views

CVE-2025-21928

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in ishtphidremove The system can experience a random crash a few minutes after the driver is removed. This issue occurs due to improper handling of memory freeing in the ishtphidremove...

7.8CVSS6AI score0.00215EPSS
SaveExploits0
CVE
CVE
added 2025/04/01 3:40 p.m.120 views

CVE-2025-21929

The CVE-2025-21929 item concerns a Linux kernel use-after-free in the intel-ish-hid driver during module removal. The affected component is the HID intel-ish-hid stack (intel_ishtp_hid) where hid_ishtp_cl_remove() frees resources before ishtp_hid_remove() would, leading to potential access of fre...

7.8CVSS7.2AI score0.00197EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2024/08/26 6:43 p.m.29 views

CVE-2024-43806 `rustix::fs::Dir` iterator with the `linux_raw` backend can cause memory explosion

Rustix is a set of safe Rust bindings to POSIX-ish APIs. When using rustix::fs::Dir using the linuxraw backend, it's possible for the iterator to "get stuck" when an IO error is encountered. Combined with a memory over-allocation issue in rustix::fs::Dir::readmore, this can cause quick and...

6.5CVSS0.00476EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/08/14 1:45 p.m.13 views

CVE-2024-23974

Incorrect default permissions in some IntelR ISH software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS7.2AI score0.00134EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/14 1:45 p.m.29 views

CVE-2024-23974

Incorrect default permissions in some IntelR ISH software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS0.00134EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/14 1:45 p.m.57 views

CVE-2024-23974

CVE-2024-23974 affects Intel® ISH software installers. The root cause is Incorrect default permissions in the installers, allowing an authenticated user to potentially escalate privileges via local access. Intel lists affected ISH software for 11th Gen Core, 12th Gen Core, and certain NUC kits, w...

6.7CVSS7.2AI score0.00134EPSS
SaveExploits0References1
Lenovo
Lenovo
added 2024/08/13 5:53 p.m.8 views

Intel ISH Software Installer Advisory - Lenovo Support US

No description provided...

7.3AI score
SaveExploits0
Intel
Intel
added 2024/08/13 12:00 a.m.10 views

Intel®  ISH Software Installer Advisory

Summary: A potential security vulnerability in some Intel® Integrated Sensor Hub ISH software installers may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-23974 Description: Incorrect default...

6.7CVSS7.2AI score0.00134EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2024/04/29 4:15 a.m.99 views

CVE-2024-1874

In PHP versions 8.1. before 8.1.28, 8.2. before 8.2.18, 8.3. before 8.3.5, when using procopen command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would execute arbitrary commands ...

9.4CVSS6.6AI score0.32568EPSS
SaveExploits2References3
Rows per page
Query Builder