Lucene search
K

18 matches found

Tenable Nessus
Tenable Nessus
added 2026/06/03 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-45995

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix userstruct uaf iofreerbufring usees a struct userstruct, which iozcrxifqfr...

7.8CVSS6.5AI score0.0012EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/05/27 9:42 p.m.17 views

CVE-2026-45995

A flaw was found in the Linux kernel's iouring/zcrx subsystem. This use-after-free UAF vulnerability occurs because the iofreerbufring function uses a struct userstruct that is prematurely freed by iozcrxifqfree before the ring is destroyed. A local attacker could potentially exploit this flaw to...

7.8CVSS6AI score0.0012EPSS
Exploits0References4
NVD
NVD
added 2026/05/27 2:17 p.m.12 views

CVE-2026-45995

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix userstruct uaf iofreerbufring usees a struct userstruct, which iozcrxifqfree puts it down before destroying the ring...

7.8CVSS0.0012EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.7 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: iouring/zcrx: fixed error handling after opening. Closing a queue does not guarantee that all associated page pools are terminated immediately. Let the refcounting process handle this task instead of releasing the zcrx ctx...

5.5CVSS5.9AI score0.00112EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/05/07 12:0 a.m.20 views

Linux Distros Unpatched Vulnerability : CVE-2026-43121

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/zcrx: fix userref race between scrub and refill paths The iozcrxputniovuref function uses a non-atomic check-then-decrement pattern atomicread followed ...

4.7CVSS6AI score0.00088EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/05/06 5:47 p.m.8 views

CVE-2026-43121

A flaw was found in the iouring/zcrx component of the Linux kernel. This vulnerability involves a race condition where two operations can manipulate the same memory counter simultaneously without proper synchronization. This can lead to a memory object being freed twice, followed by an...

4.7CVSS6AI score0.00088EPSS
Exploits0References4
EUVD
EUVD
added 2026/05/06 12:30 p.m.6 views

EUVD-2026-27682

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix userref race between scrub and refill paths The iozcrxputniovuref function uses a non-atomic check-then-decrement pattern atomicread followed by separate atomicdec to manipulate userrefs. This is serialized...

5.8AI score0.00088EPSS
Exploits0References4
NVD
NVD
added 2026/05/06 12:16 p.m.5 views

CVE-2026-43224

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix sgtable leak on mapping failures In an unlikely case when iopopulateareadma fails, which could only happen on a PAGEPOOL32BITARCHWITH64BITDMA machine, iozcrxmaparea will have an initialised and not freed table. ...

5.5CVSS0.00126EPSS
Exploits0References3
NVD
NVD
added 2026/05/06 12:16 p.m.9 views

CVE-2026-43121

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix userref race between scrub and refill paths The iozcrxputniovuref function uses a non-atomic check-then-decrement pattern atomicread followed by separate atomicdec to manipulate userrefs. This is serialized...

4.7CVSS0.00088EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/06 11:27 a.m.6 views

CVE-2026-43121

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix userref race between scrub and refill paths The iozcrxputniovuref function uses a non-atomic check-then-decrement pattern atomicread followed by separate atomicdec to manipulate userrefs. This is serialized...

5.8AI score0.00088EPSS
Exploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/18 5:41 p.m.2 views

CVE-2026-23263

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix page array leak d9f595b9a65e "iouring/zcrx: fix leaking pages on sg init fail" fixed a page leakage but didn't free the page array, release it as well...

5.7AI score0.001EPSS
Exploits0References3Affected Software1
RedhatCVE
RedhatCVE
added 2025/10/28 8:26 p.m.4 views

CVE-2025-40046

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix overshooting recv limit It's reported that sometimes a zcrx request can receive more than was requested. It's caused by iozcrxrecvskb adjusting desc-count for all received buffers including frag lists, but then...

5.8AI score0.00182EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2025-25094

Malicious code in bioql PyPI...

6.4AI score0.00119EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/08/18 11:27 a.m.12 views

CVE-2025-38504

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix pp destruction warnings With multiple page pools and in some other cases we can have allocated niovs on page pool destruction. Remove a misplaced warning checking that all niovs are returned to zcrx on...

5.5CVSS7.2AI score0.00119EPSS
Exploits0References4
NVD
NVD
added 2025/08/16 11:15 a.m.7 views

CVE-2025-38504

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix pp destruction warnings With multiple page pools and in some other cases we can have allocated niovs on page pool destruction. Remove a misplaced warning checking that all niovs are returned to zcrx on...

5.5CVSS0.00119EPSS
Exploits0References2
OSV
OSV
added 2025/08/16 11:15 a.m.4 views

UBUNTU-CVE-2025-38504

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix pp destruction warnings With multiple page pools and in some other cases we can have allocated niovs on page pool destruction. Remove a misplaced warning checking that all niovs are returned to zcrx on...

5.5CVSS5.7AI score0.00119EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2025/08/16 10:54 a.m.6 views

CVE-2025-38504

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix pp destruction warnings With multiple page pools and in some other cases we can have allocated niovs on page pool destruction. Remove a misplaced warning checking that all niovs are returned to zcrx on...

5.5CVSS5.5AI score0.00119EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/07/07 12:0 a.m.6 views

PT-2025-33547

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contained an issue related to page pool destruction warnings within the io uring/zcrx subsystem. Specifically, the issue involved allocated niovs on page pool...

5.5CVSS6.2AI score0.00119EPSS
Exploits0References17
Rows per page
Query Builder