Lucene search
+L

6097 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/08 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-43359

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: fix transaction abort on set received ioctl due to item overflow If the set received ioctl fails due to an item overflow when attempting to add the...

5.5CVSS6.7AI score0.00123EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/08 12:0 a.m.13 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a project overflow when ioctl commands are received, leading to transaction termination and...

5.5CVSS5.9AI score0.00123EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/08 12:0 a.m.15 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of upper-bound checks on user input in the amdgpuuserqwaitioctl function. This...

5.5CVSS5.8AI score0.00126EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/05/07 12:36 a.m.16 views

CVE-2026-43280

A flaw was found in the Linux kernel's drm/xe module. A local user can exploit this vulnerability by providing a malformed patindex value through the madvise IOCTL. This allows the xepatindexgetcohmode function to perform an out-of-bounds read from the xe-pat.table array, leading to information...

7.1CVSS5.8AI score0.00118EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/05/07 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-43280

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/xe: Add bounds check on patindex to prevent OOB kernel read in madvise When user provide...

7.1CVSS6AI score0.00118EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/05/06 10:50 p.m.9 views

CVE-2026-43237

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. Incorrect management of graphics memory dmafence references within the amdgpugemvaioctl function can lead to a reference count underflow and a use-after-after-free condition. A local attacker could exploit this vulnerability to trigger...

7.8CVSS5.8AI score0.00124EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/06 11:29 a.m.7 views

CVE-2026-43280

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Add bounds check on patindex to prevent OOB kernel read in madvise When user provides a bogus patindex value through the madvise IOCTL, the xepatindexgetcohmode function performs an array access without validating bounds...

5.7AI score0.00118EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2026/05/06 11:29 a.m.8 views

CVE-2026-43280 drm/xe: Add bounds check on pat_index to prevent OOB kernel read in madvise

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Add bounds check on patindex to prevent OOB kernel read in madvise When user provides a bogus patindex value through the madvise IOCTL, the xepatindexgetcohmode function performs an array access without validating bounds...

7.1CVSS6.4AI score
SaveExploits0References6
OSV
OSV
added 2026/05/06 11:28 a.m.5 views

CVE-2026-43237 drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Refactor amdgpugemvaioctl for Handling Last Fence Update and Timeline Management v4 This commit simplifies the amdgpugemvaioctl function, key updates include: - Moved the logic for managing the last update fence...

7.8CVSS6.5AI score
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2026/05/06 1:42 a.m.17 views

SUSE CVE-2026-31769

In the Linux kernel, the following vulnerability has been resolved: gpib: fix use-after-free in IO ioctl handlers The IBRD, IBWRT, IBCMD, and IBWAIT ioctl handlers use a gpibdescriptor pointer after board-biggpibmutex has been released. A concurrent IBCLOSEDEV ioctl can free the descriptor via...

7.8CVSS5.7AI score0.00131EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/06 1:42 a.m.18 views

SUSE CVE-2026-31781

In the Linux kernel, the following vulnerability has been resolved: drm/ioc32: stop speculation on the drmcompatioctl path The drm compat ioctl path takes a user controlled pointer, and then dereferences it into a table of function pointers, the signature method of spectre problems. Fix this up b...

5.5CVSS5.7AI score0.00123EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/05/06 12:0 a.m.14 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from premature fence selection and improper reference management in the amdgpugemvaioctl function. Thi...

7.8CVSS5.8AI score0.00124EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/05/05 6:57 p.m.14 views

EUVD-2026-27436

Sandboxie is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, a local denial of service vulnerability exists in the Sandboxie kernel driver. An unprivileged process running inside a Standard Sandbox can send a malformed IOCTL to the...

8.2CVSS5.7AI score0.00152EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/05/05 6:57 p.m.45 views

CVE-2026-32603 Sandboxie kernel driver denial of service via malformed IOCTL from sandboxed process

Sandboxie is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, a local denial of service vulnerability exists in the Sandboxie kernel driver. An unprivileged process running inside a Standard Sandbox can send a malformed IOCTL to the...

8.2CVSS0.00152EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/05/05 6:57 p.m.11 views

CVE-2026-32603 Sandboxie kernel driver denial of service via malformed IOCTL from sandboxed process

Sandboxie is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, a local denial of service vulnerability exists in the Sandboxie kernel driver. An unprivileged process running inside a Standard Sandbox can send a malformed IOCTL to the...

8.2CVSS5.7AI score0.00152EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/05/05 12:0 a.m.6 views

CVE-2026-36355

The rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x Jungle SDK all known versions through v3.4.14B does not perform any access control checks on the writemem ioctl 0x89F5 and readmem ioctl 0x89F6 debug handlers, which are compiled into production builds via the unconditionally defined...

5.8AI score0.00669EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2026/05/04 4:43 p.m.4 views

CVE-2026-25266

Memory corruption while processing IOCTL command when device is in power-save state...

5.5CVSS5.8AI score0.00071EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/05/04 4:43 p.m.7 views

CVE-2025-47408 Untrusted Pointer Dereference in Power Optimization Firmware

Memory corruption when another driver calls an IOCTL with invalid input/output buffer...

7.8CVSS5.8AI score0.00075EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/05/04 4:43 p.m.6 views

CVE-2025-47406 Buffer Over-read in DSP Service

Information Disclosure while processing IOCTL handler callbacks without verifying buffer size...

6.1CVSS5.9AI score0.00074EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/04 12:0 a.m.23 views

PT-2026-36849

CVE-2026-25266 Memory corruption while processing IOCTL command when device is in power-save state. https://t.co/jBvDx6qfre...

5.5CVSS5.8AI score0.00071EPSS
SaveExploits0References3
Rows per page
Query Builder