Lucene search
+L

4634 matches found

NVD
NVD
added 2026/08/22 4:16 p.m.11 views

CVE-2026-74690

In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during ismdevexit A ism interrupt handler can be active in parallel with ismdevexit, accessing freed data structures. No new interrupts will be generated after unregisterieq. Drain ongoing interru...

0.00206EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/22 4:16 p.m.8 views

CVE-2026-74653

In the Linux kernel, the following vulnerability has been resolved: serial: 8250of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART PORTLPC3220 can latch an RX character-timeout interrupt while the RX FIFO is empty: IIR reports UARTIIRRXTIMEOUT 0x0c but LSR.DR is clear. A...

0.00206EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/22 4:16 p.m.7 views

CVE-2026-74629

In the Linux kernel, the following vulnerability has been resolved: net/dibs: Correct freeing of dmbclientidarr A dibs device interrupt handler can be active after dibsdevdel and may still access dmbclientidarr. UAF In case of a failure in dibsdevadd being called by dibslodevprobe dmbclientidarr ...

0.00206EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/22 4:16 p.m.8 views

CVE-2026-74617

In the Linux kernel, the following vulnerability has been resolved: dibs: initialise dibs-lock in dibsdevalloc dibs-lock is initialised by dibsdevadd, but a dibs device can already take interrupts before that call: ismprobe runs ismdevinit, and hence requestirq, before it calls dibsdevadd. No...

0.00206EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/22 3:32 p.m.10 views

CVE-2026-74690

CVE-2026-74690 is a Use-After-Free vulnerability in the Linux kernel 's s390/ism (Interrupt Sharing Module) subsystem. An ISM interrupt handler can remain active in parallel with ism_dev_exit(), accessing already-freed sba and ieq data structures. The fix ensures that after unregister_ieq() no ne...

5.4AI score0.00206EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/22 3:32 p.m.11 views

EUVD-2026-64377

In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during ismdevexit A ism interrupt handler can be active in parallel with ismdevexit, accessing freed data structures. No new interrupts will be generated after unregisterieq. Drain ongoing interru...

5.4AI score0.00206EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/22 3:32 p.m.23 views

CVE-2026-74690 s390/ism: Fix UAF of sba and ieq during ism_dev_exit()

In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during ismdevexit A ism interrupt handler can be active in parallel with ismdevexit, accessing freed data structures. No new interrupts will be generated after unregisterieq. Drain ongoing interru...

0.00206EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/22 3:32 p.m.6 views

CVE-2026-74690 s390/ism: Fix UAF of sba and ieq during ism_dev_exit()

In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during ismdevexit A ism interrupt handler can be active in parallel with ismdevexit, accessing freed data structures. No new interrupts will be generated after unregisterieq. Drain ongoing interru...

5.6AI score
SaveExploits0References6
OSV
OSV
added 2026/08/22 3:32 p.m.5 views

CVE-2026-74653 serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx

In the Linux kernel, the following vulnerability has been resolved: serial: 8250of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART PORTLPC3220 can latch an RX character-timeout interrupt while the RX FIFO is empty: IIR reports UARTIIRRXTIMEOUT 0x0c but LSR.DR is clear. A...

5.7AI score
SaveExploits0References6
EUVD
EUVD
added 2026/08/22 3:32 p.m.9 views

EUVD-2026-64590

In the Linux kernel, the following vulnerability has been resolved: serial: 8250of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART PORTLPC3220 can latch an RX character-timeout interrupt while the RX FIFO is empty: IIR reports UARTIIRRXTIMEOUT 0x0c but LSR.DR is clear. A...

5.6AI score0.00206EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/22 3:32 p.m.20 views

CVE-2026-74653 serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx

In the Linux kernel, the following vulnerability has been resolved: serial: 8250of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART PORTLPC3220 can latch an RX character-timeout interrupt while the RX FIFO is empty: IIR reports UARTIIRRXTIMEOUT 0x0c but LSR.DR is clear. A...

0.00206EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/22 3:32 p.m.10 views

CVE-2026-74653

CVE-2026-74653 affects the Linux kernel 8250_of serial driver on NXP LPC32xx (PORT_LPC3220) hardware. The UART can latch an RX character-timeout interrupt while the RX FIFO is empty; because the interrupt is level-triggered and re-fires immediately, it causes an interrupt storm that livelocks the...

5.6AI score0.00206EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/22 3:32 p.m.9 views

EUVD-2026-64566

In the Linux kernel, the following vulnerability has been resolved: net/dibs: Correct freeing of dmbclientidarr A dibs device interrupt handler can be active after dibsdevdel and may still access dmbclientidarr. UAF In case of a failure in dibsdevadd being called by dibslodevprobe dmbclientidarr ...

5.4AI score0.00206EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/22 3:32 p.m.10 views

CVE-2026-74629

CVE-2026-74629 affects the Linux kernel in the net/dibs subsystem. Two memory management flaws exist: a use-after-free occurs because a dibs device interrupt handler can remain active after dibs_dev_del() and still access dmb_clientid_arr, and a double free occurs when dibs_dev_add() fails during...

5.4AI score0.00206EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/22 3:32 p.m.6 views

CVE-2026-74617 dibs: initialise dibs->lock in dibs_dev_alloc()

In the Linux kernel, the following vulnerability has been resolved: dibs: initialise dibs-lock in dibsdevalloc dibs-lock is initialised by dibsdevadd, but a dibs device can already take interrupts before that call: ismprobe runs ismdevinit, and hence requestirq, before it calls dibsdevadd. No...

5.7AI score
SaveExploits0References6
CVE
CVE
added 2026/08/22 3:32 p.m.10 views

CVE-2026-74617

CVE-2026-74617 is a Linux kernel vulnerability in the DIBS (Distributed Interface Bus System) driver. The root cause is that dibs->lock was initialized in dibs_dev_add(), but the interrupt handler ism_handle_irq() could fire earlier—after request_irq() in ism_dev_init()—and unconditionally acq...

5.6AI score0.00206EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/22 3:32 p.m.25 views

CVE-2026-74617 dibs: initialise dibs->lock in dibs_dev_alloc()

In the Linux kernel, the following vulnerability has been resolved: dibs: initialise dibs-lock in dibsdevalloc dibs-lock is initialised by dibsdevadd, but a dibs device can already take interrupts before that call: ismprobe runs ismdevinit, and hence requestirq, before it calls dibsdevadd. No...

0.00206EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/22 3:32 p.m.8 views

EUVD-2026-64554

In the Linux kernel, the following vulnerability has been resolved: dibs: initialise dibs-lock in dibsdevalloc dibs-lock is initialised by dibsdevadd, but a dibs device can already take interrupts before that call: ismprobe runs ismdevinit, and hence requestirq, before it calls dibsdevadd. No...

5.6AI score0.00206EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.13 views

PT-2026-79622

In the Linux kernel, the following vulnerability has been resolved: dibs: initialise dibs-lock in dibs dev alloc dibs-lock is initialised by dibs dev add, but a dibs device can already take interrupts before that call: ism probe runs ism dev init, and hence request irq, before it calls dibs dev...

5.4AI score0.00206EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.9 views

PT-2026-79695

In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during ism dev exit A ism interrupt handler can be active in parallel with ism dev exit, accessing freed data structures. No new interrupts will be generated after unregister ieq. Drain ongoing...

5.3AI score0.00206EPSS
SaveExploits0References4
Rows per page
Query Builder