Lucene search
K

1045 matches found

OSV
OSV
added 2025/03/27 2:57 p.m.3 views

CVE-2025-21886 RDMA/mlx5: Fix implicit ODP hang on parent deregistration

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix implicit ODP hang on parent deregistration Fix the destroyunusedimplicitchildmr to prevent hanging during parent deregistration as of below 1. Upon entering destroyunusedimplicitchildmr, the reference count for the...

5.5CVSS6.2AI score0.00014EPSS
Exploits0References6
Cvelist
Cvelist
added 2025/03/27 2:57 p.m.7 views

CVE-2025-21886 RDMA/mlx5: Fix implicit ODP hang on parent deregistration

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix implicit ODP hang on parent deregistration Fix the destroyunusedimplicitchildmr to prevent hanging during parent deregistration as of below 1. Upon entering destroyunusedimplicitchildmr, the reference count for the...

0.00014EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2025/03/27 2:57 p.m.6 views

CVE-2025-21886

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix implicit ODP hang on parent deregistration Fix the destroyunusedimplicitchildmr to prevent hanging during parent deregistration as of below 1. Upon entering destroyunusedimplicitchildmr, the reference count for the...

5.5CVSS5.7AI score0.00014EPSS
Exploits0
CNNVD
CNNVD
added 2025/03/27 12:0 a.m.2 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from mlx5 not properly handling implicit ODP parent logoffs, which could lead to task hangs...

5.5CVSS6.5AI score0.00014EPSS
Exploits0References5
NVD
NVD
added 2025/03/06 5:15 a.m.4 views

CVE-2025-20909

Use of implicit intent for sensitive communication in Settings prior to SMR Mar-2025 Release 1 allows local attackers to access sensitive information...

5.5CVSS0.00055EPSS
Exploits0References1
OSV
OSV
added 2025/03/06 5:15 a.m.2 views

CVE-2025-20909

Use of implicit intent for sensitive communication in Settings prior to SMR Mar-2025 Release 1 allows local attackers to access sensitive information...

5.5CVSS5.8AI score0.00055EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/06 5:4 a.m.4 views

CVE-2025-20909

Use of implicit intent for sensitive communication in Settings prior to SMR Mar-2025 Release 1 allows local attackers to access sensitive information...

4CVSS6.8AI score0.00055EPSS
Exploits0References1
CVE
CVE
added 2025/03/06 5:4 a.m.44 views

CVE-2025-20909

CVE-2025-20909 affects Samsung Settings (Settings service) prior to SMR Mar-2025 Release 1, where use of implicit intents for sensitive communication enables local attackers to access sensitive information. Root cause is implicit handling of sensitive data via intents within Settings, leading to ...

5.5CVSS6.8AI score0.00055EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2023-52762

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtio-blk: fix implicit overflow on virtiomaxdmasize The following codes have an implicit conversion from sizet to u32: u32maxsize = sizetvirtiomaxdmasizevdev...

5.5CVSS6.7AI score0.0001EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/02/28 2:22 a.m.1 views

SUSE CVE-2025-21706

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only set fullmesh for subflow endp With the in-kernel path-manager, it is possible to change the 'fullmesh' flag. The code in mptcppmnlfullmesh expects to change it only on 'subflow' endpoints, to recreate more or less...

5.5CVSS7.7AI score0.00013EPSS
Exploits0References15
SUSE CVE
SUSE CVE
added 2025/02/28 2:22 a.m.1 views

SUSE CVE-2025-21714

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix implicit ODP use after free Prevent double queueing of implicit ODP mr destroy work by using xacmpxchg to make sure this is the only time we are destroying this specific mr. Without this change, we could try to...

5.5CVSS6.7AI score0.00026EPSS
Exploits0References16
OSV
OSV
added 2025/02/27 2:15 a.m.3 views

AZL-59034 CVE-2025-21714 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix implicit ODP use after free Prevent double queueing of implicit ODP mr destroy work by using xacmpxchg to make sure this is the only time we are destroying this specific mr. Without this change, we could try to...

7.8CVSS6.7AI score0.00026EPSS
Exploits0References1
NVD
NVD
added 2025/02/27 2:15 a.m.10 views

CVE-2025-21714

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix implicit ODP use after free Prevent double queueing of implicit ODP mr destroy work by using xacmpxchg to make sure this is the only time we are destroying this specific mr. Without this change, we could try to...

7.8CVSS0.00026EPSS
Exploits0References3
OSV
OSV
added 2025/02/27 2:15 a.m.1 views

DEBIAN-CVE-2025-21714

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix implicit ODP use after free Prevent double queueing of implicit ODP mr destroy work by using xacmpxchg to make sure this is the only time we are destroying this specific mr. Without this change, we could try to...

7.8CVSS6AI score0.00026EPSS
Exploits0References1
OSV
OSV
added 2025/02/27 2:15 a.m.1 views

DEBIAN-CVE-2025-21706

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only set fullmesh for subflow endp With the in-kernel path-manager, it is possible to change the 'fullmesh' flag. The code in mptcppmnlfullmesh expects to change it only on 'subflow' endpoints, to recreate more or less...

5.5CVSS5.7AI score0.00013EPSS
Exploits0References1
OSV
OSV
added 2025/02/27 2:15 a.m.1 views

UBUNTU-CVE-2025-21706

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only set fullmesh for subflow endp With the in-kernel path-manager, it is possible to change the 'fullmesh' flag. The code in mptcppmnlfullmesh expects to change it only on 'subflow' endpoints, to recreate more or less...

5.5CVSS6.5AI score0.00013EPSS
Exploits0References17
OSV
OSV
added 2025/02/27 2:15 a.m.1 views

UBUNTU-CVE-2025-21714

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix implicit ODP use after free Prevent double queueing of implicit ODP mr destroy work by using xacmpxchg to make sure this is the only time we are destroying this specific mr. Without this change, we could try to...

7.8CVSS6.5AI score0.00026EPSS
Exploits0References15
CVE
CVE
added 2025/02/27 2:7 a.m.116 views

CVE-2025-21714

CVE-2025-21714 : Linux kernel RDMA/mlx5: fix implicit ODP use after free. The issue could lead to invalidating the MR twice, queuing MR destroy work twice, and a race where the second work runs after the first freed MR, causing a user-after-free and refcount underflow. The fix uses __xa_cmpxchg()...

7.8CVSS6.6AI score0.00026EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2025/02/27 2:7 a.m.8 views

CVE-2025-21714 RDMA/mlx5: Fix implicit ODP use after free

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix implicit ODP use after free Prevent double queueing of implicit ODP mr destroy work by using xacmpxchg to make sure this is the only time we are destroying this specific mr. Without this change, we could try to...

0.00026EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/02/06 12:39 a.m.4 views

CVE-2022-30756

Implicit Intent hijacking vulnerability in Finder prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege of Finder...

8.5CVSS6.8AI score0.00039EPSS
Exploits0References1
Rows per page
Query Builder