Lucene search
K

1161 matches found

OSV
OSV
added 2025/05/08 7:15 a.m.1 views

DEBIAN-CVE-2025-37813

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix invalid pointer dereference in Etron workaround This check is performed before preparetransfer and preparering, so enqueue can already point at the final link TRB of a segment. And indeed it will, some 0.4% of time...

5.5CVSS5.6AI score0.00065EPSS
Exploits0References1
OSV
OSV
added 2025/05/08 7:15 a.m.0 views

UBUNTU-CVE-2025-37813

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix invalid pointer dereference in Etron workaround This check is performed before preparetransfer and preparering, so enqueue can already point at the final link TRB of a segment. And indeed it will, some 0.4% of time...

5.5CVSS6.2AI score0.00065EPSS
Exploits0References22
CVE
CVE
added 2025/05/08 6:26 a.m.88 views

CVE-2025-37813

CVE-2025-37813 concerns the Linux kernel USB xHCI Etron workaround. The vulnerability arises in the enqueue path during the Etron workaround where code can dereference a pointer after enqueuing to the final link TRB, and then access pointer + 1, which can crash the kernel or cause a NOOP in the l...

5.5CVSS6.7AI score0.00065EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2025/05/08 6:26 a.m.12 views

CVE-2025-37813 usb: xhci: Fix invalid pointer dereference in Etron workaround

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix invalid pointer dereference in Etron workaround This check is performed before preparetransfer and preparering, so enqueue can already point at the final link TRB of a segment. And indeed it will, some 0.4% of time...

0.00065EPSS
Exploits0References4
OSV
OSV
added 2025/05/08 6:26 a.m.5 views

CVE-2025-37813 usb: xhci: Fix invalid pointer dereference in Etron workaround

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix invalid pointer dereference in Etron workaround This check is performed before preparetransfer and preparering, so enqueue can already point at the final link TRB of a segment. And indeed it will, some 0.4% of time...

5.5CVSS6.5AI score0.00065EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/05/08 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an invalid pointer dereference that could cause the kernel to crash...

5.5CVSS7AI score0.00065EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2018-14609

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in delrelocroot in fs/btrfs/relocation.c when mounting a...

7.1CVSS6.7AI score0.00308EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2020-27545

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object. CVE-2020-275...

6.5CVSS6.5AI score0.00113EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/02/10 12:0 a.m.6 views

Azure Linux 3.0 Security Update: kernel (CVE-2024-47705)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47705 advisory. - In the Linux kernel, the following vulnerability has been resolved: block: fix potential invalid pointer...

5.5CVSS6.2AI score0.00013EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/01/21 4:24 p.m.8 views

CVE-2024-57935

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix accessing invalid dipctx during destroying QP If it fails to modify QP to RTR, dipctx will not be attached. And during detroying QP, the invalid dipctx pointer will be accessed...

5.5CVSS6.8AI score0.00019EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/01/20 3:48 a.m.3 views

SUSE CVE-2024-57929

In the Linux kernel, the following vulnerability has been resolved: dm array: fix releasing a faulty array block twice in dmarraycursorend When dmbmreadlock fails due to locking or checksum errors, it releases the faulty block implicitly while leaving an invalid output pointer behind. The caller ...

6.7CVSS7.7AI score0.00022EPSS
Exploits0References15
OSV
OSV
added 2025/01/19 12:15 p.m.1 views

DEBIAN-CVE-2024-57929

In the Linux kernel, the following vulnerability has been resolved: dm array: fix releasing a faulty array block twice in dmarraycursorend When dmbmreadlock fails due to locking or checksum errors, it releases the faulty block implicitly while leaving an invalid output pointer behind. The caller ...

7.1CVSS5.7AI score0.00022EPSS
Exploits0References1
NVD
NVD
added 2025/01/19 12:15 p.m.5 views

CVE-2024-57929

In the Linux kernel, the following vulnerability has been resolved: dm array: fix releasing a faulty array block twice in dmarraycursorend When dmbmreadlock fails due to locking or checksum errors, it releases the faulty block implicitly while leaving an invalid output pointer behind. The caller ...

7.1CVSS0.00022EPSS
Exploits0References10
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.1 views

PT-2025-30870

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the ipmi create user function within the IPMI message handler. An invalid pointer in the "intf" list iterator can occur if the correct "intf-intf num"...

7.8CVSS7.1AI score0.00083EPSS
Exploits0
Cvelist
Cvelist
added 2024/12/27 3:2 p.m.16 views

CVE-2024-56649 net: enetc: Do not configure preemptible TCs if SIs do not support

In the Linux kernel, the following vulnerability has been resolved: net: enetc: Do not configure preemptible TCs if SIs do not support Both ENETC PF and VF drivers share enetcsetuptcmqprio to configure MQPRIO. And enetcsetuptcmqprio calls enetcchangepreemptibletcs to configure preemptible TCs...

0.00019EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2024/11/19 12:0 a.m.21 views

Oracle Linux 9 : openssl / and / openssl-fips-provider (ELSA-2024-9333)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9333 advisory. - Fix CVE-2024-6119: Possible denial of service in X.509 name checks Resolves: RHEL-55339 - Fix CVE-2024-5535: SSLselectnextproto buffer overread...

9.1CVSS7.4AI score0.91789EPSS
Exploits7References5
Microsoft CVE
Microsoft CVE
added 2024/11/09 8:0 a.m.3 views

block: fix potential invalid pointer dereference in blk_add_partition

...

5.5CVSS7AI score0.00013EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2024/10/24 9:15 p.m.13 views

CVE-2024-48425

A segmentation fault SEGV was detected in the Assimp::SplitLargeMeshesProcessTriangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer. The crash occurs due to a read access violation at address 0x000000000460, which points to the zero page, indicating a...

5.5CVSS6.7AI score0.00075EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/10/24 12:0 a.m.14 views

CVE-2024-48425

A segmentation fault SEGV was detected in the Assimp::SplitLargeMeshesProcessTriangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer. The crash occurs due to a read access violation at address 0x000000000460, which points to the zero page, indicating a...

6.6AI score0.00075EPSS
Exploits1References1
SUSE CVE
SUSE CVE
added 2024/10/21 3:47 p.m.2 views

SUSE CVE-2024-47705

In the Linux kernel, the following vulnerability has been resolved: block: fix potential invalid pointer dereference in blkaddpartition The blkaddpartition function initially used a single if-condition ISERRpart to check for errors when adding a partition. This was modified to handle the specific...

5.5CVSS6.4AI score0.00013EPSS
Exploits0References19
Rows per page
Query Builder