Lucene search
+L

5 matches found

OSV
OSV
•added 2026/08/15 5:53 a.m.•41 views

CVE-2026-72138 xen/gntdev: fix error handling in ioctl

In the Linux kernel, the following vulnerability has been resolved: xen/gntdev: fix error handling in ioctl When gntdevioctlmapgrantref fails to copy the operation result back to userspace after successfully adding the mapping to the list, the error path returns -EFAULT without releasing the...

5.6AI score
SaveExploits0References11
Cvelist
Cvelist
•added 2026/08/15 5:53 a.m.•32 views

CVE-2026-72138 xen/gntdev: fix error handling in ioctl

In the Linux kernel, the following vulnerability has been resolved: xen/gntdev: fix error handling in ioctl When gntdevioctlmapgrantref fails to copy the operation result back to userspace after successfully adding the mapping to the list, the error path returns -EFAULT without releasing the...

0.0022EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2026/06/03 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-46211

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/msm/gem: fix error handling in msmioctlgeminfogetmetadata msmioctlgeminfogetmetadata always returns 0 regardless of errors. When copytouser fails or the use...

5.5CVSS5.6AI score0.00162EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/28 9:40 a.m.•73 views

CVE-2026-46211

CVE-2026-46211 affects the Linux kernel drm/msm/gem component. The flaw in msm_ioctl_gem_info_get_metadata() can cause a NULL pointer dereference due to unchecked allocation (kmemdup()) and always returning 0 on errors, making userspace believe success. The issue is fixed by adding a NULL check f...

5.5CVSS5.9AI score0.00162EPSS
SaveExploits0References4Affected Software1
attackerkb
attackerkb
•added 2026/05/28 9:40 a.m.•72 views

CVE-2026-46211

In the Linux kernel, the following vulnerability has been resolved: drm/msm/gem: fix error handling in msmioctlgeminfogetmetadata msmioctlgeminfogetmetadata always returns 0 regardless of errors. When copytouser fails or the user buffer is too small, the error code stored in ret is ignored becaus...

5.9AI score0.00162EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder