Lucene search
+L

327 matches found

AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.2 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ublk: Make sure that ubq-canceling is set when the queue is frozen. Now, the ublk driver relies on ubq-canceling to determine whether a request can be dispatched via uringcmd and iouringcmdcompleteintask. Once ubq-canceling is se...

7.8CVSS6.4AI score0.00193EPSS
SaveExploits0References3
Amazon
Amazon
added 2025/06/10 12:0 a.m.10 views

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: bpf: track changespktdata property for global functions CVE-2024-58098 In the Linux kernel, the following vulnerability has been resolved: bpf: check changespktdata property for extension programs CVE-2024-58100 I...

7.8CVSS6.6AI score0.00278EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2025/06/10 12:0 a.m.5 views

PT-2025-27692

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A use-after-free vulnerability has been identified in the Linux kernel, specifically in the io uring subsystem. The issue arises when the sq-thread is released while being used in...

7.8CVSS8.3AI score0.03133EPSS
SaveExploits11References1840
Positive Technologies
Positive Technologies
added 2025/06/06 12:0 a.m.8 views

PT-2025-24275

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns a problem with reading SQE fields in the Linux kernel when the ring is being resized simultaneously. This is related to the io uring/fdinfo functionality, specifically...

7.8CVSS7.4AI score0.11039EPSS
SaveExploits5References321
OSV
OSV
added 2025/05/20 2:33 p.m.13 views

USN-7522-1 linux-azure-nvidia vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - RISC-V architecture; - x86 architecture; - Block layer subsystem; - Compute Acceleration Framework; - ACPI drivers;...

8.1CVSS6.4AI score0.0075EPSS
SaveExploits2References137
OSV
OSV
added 2025/05/16 4:23 p.m.12 views

USN-7513-1 linux, linux-aws, linux-aws-6.8, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - RISC-V architecture; - x86 architecture; - Block layer subsystem; - Compute Acceleration Framework; - ACPI drivers;...

8.1CVSS6.4AI score0.0075EPSS
SaveExploits2References134
OSV
OSV
added 2025/05/08 7:15 a.m.12 views

CVE-2025-37804

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

5.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/08 12:0 a.m.10 views

PT-2025-20333

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data-race issue has been identified in the Linux kernel related to io uring. The issue arises when the request owner changes other flag bits, causing KCSAN to complain. The problem...

4.3CVSS5.7AI score
SaveExploits0
OSV
OSV
added 2025/05/01 1:15 p.m.3 views

DEBIAN-CVE-2025-37759

In the Linux kernel, the following vulnerability has been resolved: ublk: fix handling recovery & reissue in ublkabortqueue Commit 8284066946e6 "ublk: grab request reference when the request is handled by userspace" doesn't grab request reference in case of recovery reissue. Then the request can ...

5.5CVSS5.8AI score0.00164EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/01 12:0 a.m.7 views

PT-2025-18508 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A issue in the Linux kernel has been resolved, related to io uring, where a multishot accept request leak occurred. Having REQ F POLLED set does not guarantee that the request is...

5.1AI score0.00148EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2025/04/18 12:0 a.m.10 views

PT-2025-17296 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, specifically in the io uring component. The issue is related to the io req prep async function, which can import provided buffers...

7.8CVSS7.3AI score0.0129EPSS
SaveExploits1References168
OSV
OSV
added 2025/04/16 3:16 p.m.3 views

UBUNTU-CVE-2025-22068

In the Linux kernel, the following vulnerability has been resolved: ublk: make sure ubq-canceling is set when queue is frozen Now ublk driver depends on ubq-canceling for deciding if the request can be dispatched via uringcmd & iouringcmdcompleteintask. Once ubq-canceling is set, the uringcmd can...

7.8CVSS6.3AI score0.00193EPSS
SaveExploits0References24
Vulnrichment
Vulnrichment
added 2025/04/16 2:12 p.m.2 views

CVE-2025-22068 ublk: make sure ubq->canceling is set when queue is frozen

In the Linux kernel, the following vulnerability has been resolved: ublk: make sure ubq-canceling is set when queue is frozen Now ublk driver depends on ubq-canceling for deciding if the request can be dispatched via uringcmd & iouringcmdcompleteintask. Once ubq-canceling is set, the uringcmd can...

7.6AI score0.00193EPSS
SaveExploits0References4
OSV
OSV
added 2025/04/03 1:9 p.m.22 views

USN-7413-1 linux-iot vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. CVE-2022-38096 Ye Zhang and Nicolas Wu discovered th...

9.1CVSS6.9AI score0.03558EPSS
SaveExploits4References317
Cvelist
Cvelist
added 2025/03/07 9:9 a.m.15 views

CVE-2025-21837

...

SaveExploits0
CVE
CVE
added 2025/03/07 9:9 a.m.129 views

CVE-2025-21836

CVE-2025-21836 affects the Linux kernel io_uring/kbuf component. The issue arises when upgrading, where IORING_REGISTER_PBUF_RING can re-use an old io_buffer_list previously published for a legacy buffer, potentially breaking the requirement that most fields stay stable after publish. The fix is ...

5.5CVSS7.5AI score0.0022EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/03/07 12:0 a.m.7 views

PT-2025-10069

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the io uring/uring cmd in the Linux kernel, where SQE data is accessed after prep has been done, potentially leading to data corruption if the application reuses...

7.8CVSS7.8AI score0.12727EPSS
SaveExploits3References2071
SUSE CVE
SUSE CVE
added 2025/02/27 3:11 a.m.4 views

SUSE CVE-2022-49144

In the Linux kernel, the following vulnerability has been resolved: iouring: fix memory leak of uid in files registration When there are no files for iosqefilesscm to process in the range, it'll free everything and return. However, it forgets to put uid...

5.5CVSS6.9AI score0.00249EPSS
SaveExploits0References5
OSV
OSV
added 2025/02/26 1:42 p.m.19 views

USN-7291-1 linux-gcp, linux-gcp-5.15, linux-gke vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - x86 architecture; - Block layer subsystem; - ACPI drivers; - GPU drivers; - HID subsystem; -...

7.8CVSS6.7AI score0.03301EPSS
SaveExploits2References104
OSV
OSV
added 2025/02/26 1:55 a.m.12 views

CVE-2022-49144 io_uring: fix memory leak of uid in files registration

In the Linux kernel, the following vulnerability has been resolved: iouring: fix memory leak of uid in files registration When there are no files for iosqefilesscm to process in the range, it'll free everything and return. However, it forgets to put uid...

5.5CVSS5.3AI score0.00249EPSS
SaveExploits0References8
Rows per page
Query Builder