StackWarp: Breaking AMD SEV-SNP Integrity via Deterministic Stack-Pointer Manipulation through the CPU's Stack Engine

In this paper, the authors present StackWarp, a software-based architectural attack exploiting the stack engine on AMD Zen CPUs to modify the stack pointer within an SEV-SNP guest, fully breaking integrity...

ROS-20260119-7317

A vulnerability in the dm9000drvremove function of the drivers/net/ethernet/davicom/dm9000.c module - driver supporting Ethernet Davicom network adapters of the Linux kernel is related to the reuse of previously freed memory. Exploitation of the vulnerability could allow an attacker to affect the...

ROS-20260119-7319

A vulnerability in the net/rose/rosetimer.c component of the Linux operating system kernel is related to simultaneous execution using a shared resource with improper synchronization. Exploitation of the vulnerability could allow an attacker to gain access to sensitive data, compromise its...

ROS-20260119-7305

A vulnerability in the uvcstatusinit function of the Linux operating system kernel is associated with a memory re-release error. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...

ROS-20260119-7304

A vulnerability in the ppsgpioprobe function of the drivers/pps/clients/pps-gpio.c module of the Linux kernel PPS client support driver is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability...

ROS-20260119-7339

A vulnerability in the phyn.c component of the Linux operating system kernel is related to reading outside the allowed data buffer boundaries. Exploitation of the vulnerability could allow an attacker to gain access to sensitive data, compromise its integrity, and cause a denial of service...

ROS-20260119-7356

A vulnerability in the arpxmitfinish function of the net/ipv4/arp.c module of the Linux kernel IPv4 protocol implementation is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protecte...

ROS-20260119-7366

A vulnerability in the l3mdevl3out function of the include/net/l3mdev.h module of the Linux kernel is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protected information...

ROS-20260119-7376

A vulnerability in the ax25 component of the Linux operating system kernel is related to the use of memory after it has been freed. Exploitation of the vulnerability could allow an attacker to gain access to sensitive data, compromise its integrity, and cause a denial of service...

ROS-20260119-7370

A vulnerability in the tegraemcfindnodebyramcode function of the drivers/memory/tegra/tegra20-emc.c component of the Linux kernel is related to the use of memory after it has been freed. Exploitation of the vulnerability could allow an attacker to gain access to sensitive data, compromise its...

The system’s vulnerability for data collection and automation process control in Delta Electronics DIAView, which is related to the use of a rigidly encrypted cryptographic key, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Delta Electronics DIAView system for data collection and automation process control is related to the use of a rigidly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker operating remotely to compromise the confidentiality, integrity, and...

The vulnerability of Google Chrome’s Digital Credentials component allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of Google Chrome’s Digital Credentials component is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of the Node.js software platform, related to errors in cross-border deletion of critical data, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Node.js software platform is related to errors in cross-border deletion of critical data. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality and integrity of the protected information...

ROS-20260119-7393

A vulnerability in the pcf85063nvmemread function of the drivers/rtc/rtc-pcf85063.c component of the Linux operating system kernel is related to writing beyond buffer boundaries. Exploitation of the vulnerability may allow an attacker to gain access to sensitive data, violate its integrity, and...

ROS-20260119-7326

A vulnerability in the padatafreeshell function of the kernel/padata.c module of the Linux kernel is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...

ROS-20260119-7363

A vulnerability in the cacheinfo component of the Linux operating system kernel is related to reading beyond buffer boundaries in memory. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...

ROS-20260119-7357

A vulnerability in the neighnotify function of the net/core/neighbour.c module of the Linux kernel's network functions support is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of...

ROS-20260119-7325

A vulnerability in the padatareorder function of the kernel/padata.c module of the Linux kernel is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...

ROS-20260119-7328

A vulnerability in the nbddisconnectandput function of the drivers/block/nbd.c module of the Linux kernel block device support driver is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability o...

ROS-20260119-7338

A vulnerability in the net/bluetooth/mgmt.c component of the Linux kernel is related to the use of memory after it has been freed. Exploitation of the vulnerability could allow an attacker to gain access to sensitive data, compromise its integrity, and cause a denial of service...