Lucene search
+L

1691 matches found

RedhatCVE
RedhatCVE
added 2 days ago5 views

CVE-2026-64099

A flaw was found in the Linux kernel's drm/v3d graphics driver. This vulnerability, a use-after-free error, occurs in the CPU job input/output control ioctl error path. When an error is encountered, the system attempts to access memory that has already been freed, which can lead to system...

7.8CVSS5.8AI score0.00134EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2 days ago10 views

CVE-2026-64069

A flaw was found in the Linux kernel's netfs component. When a direct I/O DIO or single read subrequest fails during preparation, the subrequest may not be properly cancelled. This can lead to resource leaks or unexpected behavior, potentially impacting system stability...

9.8CVSS5.3AI score0.00448EPSS
Exploits0References4
NVD
NVD
added 3 days ago8 views

CVE-2026-64168

In the Linux kernel, the following vulnerability has been resolved: spi: sprd: fix error pointer deref after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to check the dma.enabled flag before trying to release the DMA channels also on late probe...

0.00165EPSS
Exploits0References8
NVD
NVD
added 3 days ago6 views

CVE-2026-63965

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: bmp280: fix stack leak in bmp580 trigger handler bmp580triggerhandler declares its scan buffer on the stack without an initializer and then memcpys 3 bytes of 24-bit sensor data into each 4-byte le32 field. The hig...

0.00198EPSS
Exploits0References3
NVD
NVD
added 3 days ago4 views

CVE-2026-63940

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Ignore Port I/O requests of length '0' Explicitly ignore Port I/O requests of length '0' or count '0', so that setting up the software scratch area and other code doesn't have to worry about underflowing the length, and...

9.3CVSS0.00182EPSS
Exploits0References4
Cvelist
Cvelist
added 3 days ago26 views

CVE-2026-64083 hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 reject short block-read responses in the GPIO accessors adm1266gpioget and adm1266gpiogetmultiple both compose the pin-status word as pinsstatus = readbuf0 + readbuf1 8; right after i2csmbusreadblockdata,...

0.00184EPSS
Exploits0References8
CVE
CVE
added 3 days ago7 views

CVE-2026-64069

The CVE-2026-64069 issue affects the Linux kernel netfs component where cancellation of DIO-read and single-read subrequests could fail during preparation, potentially leaving resources allocated or causing unexpected behavior. The root cause involves subrequests that were already added to the st...

9.8CVSS5.4AI score0.00448EPSS
Exploits0References3
EUVD
EUVD
added 3 days ago8 views

EUVD-2026-45713

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Ignore Port I/O requests of length '0' Explicitly ignore Port I/O requests of length '0' or count '0', so that setting up the software scratch area and other code doesn't have to worry about underflowing the length, and...

5.4AI score0.00182EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 3 days ago7 views

PT-2026-61246

In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Fix DMA fence leak in iio buffer enqueue dmabuf iio buffer enqueue dmabuf allocates a struct iio dma fence 104 bytes, kmalloc-128 via kmalloc obj+dma fence init, which sets the initial kref to 1. It then calls dma re...

5.5AI score0.002EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 3 days ago6 views

PT-2026-61486

In the Linux kernel, the following vulnerability has been resolved: spi: ep93xx: fix error pointer deref after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to the clear the DMA channel pointers on setup failure to avoid dereferencing an error...

5.3AI score0.00156EPSS
Exploits0References5
NVD
NVD
added 5 days ago5 views

CVE-2019-25764

UNSUPPORTED WHEN ASSIGNED Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC driver allows a local user to bypass the driver's verification and invoke arbitrary IOCTLs, resulting in privilege escalation. Refer to the 'End-of-Life Notice and Driver Update for Legacy ASUS Drivers ...

7.3CVSS0.0009EPSS
Exploits0References1
CVE
CVE
added 5 days ago14 views

CVE-2019-25764

CVE-2019-25764 concerns the ASUS AURA SYNC driver, where an exposed IOCTL with insufficient access control enables a local user to bypass verification and invoke arbitrary IOCTLs, leading to privilege escalation. The available connected documents confirm the affected component as the ASUS AURA SY...

7.3CVSS6.2AI score0.0009EPSS
Exploits0References1
EUVD
EUVD
added 5 days ago8 views

EUVD-2019-20200

UNSUPPORTED WHEN ASSIGNED Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC driver allows a local user to bypass the driver's verification and invoke arbitrary IOCTLs, resulting in privilege escalation. Refer to the 'End-of-Life Notice and Driver Update for Legacy ASUS Drivers ...

7.3CVSS5.5AI score0.0009EPSS
Exploits0References1
NVD
NVD
added 6 days ago16 views

CVE-2026-60063

An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption via a crafted IOCTL request, potentially resulting in privilege escalation or system instability...

7.3CVSS0.00107EPSS
Exploits0References3
Cvelist
Cvelist
added 6 days ago31 views

CVE-2026-60140 AutomationDirect Productivity Suite Out-of-bounds Read

An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption by sending a crafted IOCTL request. This can lead to exposing sensitive information or causing the affected product to become unstable or unavailable...

6.9CVSS0.00106EPSS
Exploits0References3
CVE
CVE
added 6 days ago8 views

CVE-2026-61389

Technical details about CVE-2026-61389 are not publicly provided in the supplied documents; no affected product versions, root cause, or remediation details are present beyond the basic description. Monitor for updates.

7.3CVSS6.1AI score0.00107EPSS
Exploits0References3
EUVD
EUVD
added 6 days ago8 views

EUVD-2026-45024

An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption via a crafted IOCTL request, potentially resulting in privilege escalation or system instability...

7.3CVSS6.1AI score0.00107EPSS
Exploits0References3
EUVD
EUVD
added 2026/07/15 2:1 a.m.11 views

EUVD-2026-44587

Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not Removed Before Reuse in the ASUS System Control Interface driver and ASUS Business Manager allow a local administrator to disclose sensitive information via crafted IOCTL requests, which, in severe...

8.2CVSS6AI score0.00114EPSS
Exploits0References1
CVE
CVE
added 2026/07/14 12:52 p.m.41 views

CVE-2026-10577

The CVE-2026-10577 entry concerns the 1715-AENTR EtherNet/IP Adapter, where a network-accessible debug port does not enforce proper privilege controls. This allows unauthenticated remote access to destructive CLI commands, potentially enabling read/delete of files, stopping tasks, memory modifica...

10CVSS6.1AI score0.00253EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.9 views

PT-2026-58060

Name of the Vulnerable Software and Affected Versions Rockwell Automation FLEX 5000 adapters affected versions not specified Description A denial-of-service issue occurs due to improper handling of exceptional conditions when processing crafted CIP Common Industrial Protocol packets sent to the...

8.7CVSS6.1AI score0.00253EPSS
Exploits0References3
Rows per page
Query Builder