Lucene search
+L

2660 matches found

Kitploit
Kitploit
added 2026/09/19 12:08 a.m.9 views

CVE-2016-2067

EXPLOTACIÓN DE IOMMU DMA EN GPU ADRENO Probado en Nexus 6p google/angler/angler:6.0.1/MMB29M/2431559:user/release-keys Acerca del bug Discutido en 2016 a través de Blackhat EU Acerca del exploit Con las escrituras de iommu dma, vdso.so se sobrescribe con shellcode. Así que después de que /init...

9.3CVSS7.7AI score0.00679EPSS
SaveExploits0
OSV
OSV
added 2026/09/17 5:17 p.m.3 views

AZL-102071 CVE-2026-90388 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: iommu/dma: Check atomic pool allocation result directly The non-blocking, non-coherent allocation path uses dmaallocfrompool, which returns the allocated page and fills cpuaddr only on success. Do not rely on cpuaddr to detect...

7.8CVSS0.0021EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/17 5:17 p.m.5 views

CVE-2026-90388

In the Linux kernel, the following vulnerability has been resolved: iommu/dma: Check atomic pool allocation result directly The non-blocking, non-coherent allocation path uses dmaallocfrompool, which returns the allocated page and fills cpuaddr only on success. Do not rely on cpuaddr to detect...

7.8CVSS0.0021EPSS
SaveExploits0References8
OSV
OSV
added 2026/09/17 5:17 p.m.4 views

DEBIAN-CVE-2026-90388

In the Linux kernel, the following vulnerability has been resolved: iommu/dma: Check atomic pool allocation result directly The non-blocking, non-coherent allocation path uses dmaallocfrompool, which returns the allocated page and fills cpuaddr only on success. Do not rely on cpuaddr to detect...

7.8CVSS0.0021EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/17 5:17 p.m.5 views

CVE-2026-90241

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Tear down scalable-mode context on probe failure intelpasidsetupsmcontext walks a PCI device’s DMA aliases via pciforeachdmaalias and programs a scalable-mode context entry for each RID. For a device with a...

8.2CVSS0.002EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/17 5:17 p.m.6 views

DEBIAN-CVE-2026-90243

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing down copied context entry copiedcontextteardown zeroes the 128-bit context entry with contextclearentry while the Present bit is still set, and only then issues the context-cache and...

8.1CVSS0.002EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/17 5:17 p.m.5 views

DEBIAN-CVE-2026-90244

In the Linux kernel, the following vulnerability has been resolved: iommu/dma: Restore locking around msipagelist Unlike a group's default domain, which is always freshly allocated and privately owned iommugroupallocdefaultdomain, VFIO type1's legacy container merges any newly attached group into...

7.8CVSS0.00198EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/17 5:17 p.m.6 views

DEBIAN-CVE-2026-90241

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Tear down scalable-mode context on probe failure intelpasidsetupsmcontext walks a PCI device’s DMA aliases via pciforeachdmaalias and programs a scalable-mode context entry for each RID. For a device with a...

8.2CVSS0.002EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/17 5:17 p.m.5 views

CVE-2026-90243

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing down copied context entry copiedcontextteardown zeroes the 128-bit context entry with contextclearentry while the Present bit is still set, and only then issues the context-cache and...

8.1CVSS0.002EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/17 5:17 p.m.5 views

DEBIAN-CVE-2026-90240

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush context cache with correct SID when tearing down aliases domaincontextclearone and devicepasidtableteardown are both invoked once per DMA alias of a device. Each function locates the context entry using the...

8.8CVSS0.00198EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/17 5:17 p.m.5 views

CVE-2026-90240

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush context cache with correct SID when tearing down aliases domaincontextclearone and devicepasidtableteardown are both invoked once per DMA alias of a device. Each function locates the context entry using the...

8.8CVSS0.00198EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/17 5:17 p.m.6 views

CVE-2026-90145

In the Linux kernel, the following vulnerability has been resolved: hinic3: Fix skb linearization mismatch and drop skb when skbchecksumhelp failed Previously, hinic3sendoneskb cached the skb fragment count before calling hinic3txoffload. If hinic3txcsum falls back to skbchecksumhelp for...

7.1CVSS0.00198EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/17 5:17 p.m.6 views

DEBIAN-CVE-2026-90145

In the Linux kernel, the following vulnerability has been resolved: hinic3: Fix skb linearization mismatch and drop skb when skbchecksumhelp failed Previously, hinic3sendoneskb cached the skb fragment count before calling hinic3txoffload. If hinic3txcsum falls back to skbchecksumhelp for...

7.1CVSS0.00198EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/17 4:10 p.m.5 views

CVE-2026-92505

CVE-2026-92505 addresses an undefined behavior bug in the Linux kernel's iommu/amd module, specifically in the devid_write debugfs function. The root cause is that when for_each_pci_segment() completes without finding a matching segment, the pci_seg pointer is left pointing to an invalid memory l...

0.00198EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/17 4:10 p.m.4 views

EUVD-2026-82126

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix undefined behavior in devidwrite debugfs function When foreachpcisegment loop completes without finding a matching segment, the pciseg pointer is not NULL but points to an invalid memory location the list head...

0.00198EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/17 4:10 p.m.3 views

CVE-2026-92505 iommu/amd: Fix undefined behavior in devid_write debugfs function

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix undefined behavior in devidwrite debugfs function When foreachpcisegment loop completes without finding a matching segment, the pciseg pointer is not NULL but points to an invalid memory location the list head...

SaveExploits0References6
OSV
OSV
added 2026/09/17 4:09 p.m.4 views

CVE-2026-90388 iommu/dma: Check atomic pool allocation result directly

In the Linux kernel, the following vulnerability has been resolved: iommu/dma: Check atomic pool allocation result directly The non-blocking, non-coherent allocation path uses dmaallocfrompool, which returns the allocated page and fills cpuaddr only on success. Do not rely on cpuaddr to detect...

7.8CVSS
SaveExploits0References11
CVE
CVE
added 2026/09/17 4:09 p.m.14 views

CVE-2026-90388

CVE-2026-90388 is a Linux kernel vulnerability in the iommu/dma subsystem. The non-blocking, non-coherent DMA allocation path calls dma_alloc_from_pool(), which returns the allocated page and fills cpu_addr only on success. The affected code incorrectly relied on cpu_addr to detect allocation fai...

7.8CVSS0.0021EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/09/17 4:09 p.m.36 views

CVE-2026-90388 iommu/dma: Check atomic pool allocation result directly

In the Linux kernel, the following vulnerability has been resolved: iommu/dma: Check atomic pool allocation result directly The non-blocking, non-coherent allocation path uses dmaallocfrompool, which returns the allocated page and fills cpuaddr only on success. Do not rely on cpuaddr to detect...

7.8CVSS0.0021EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/09/17 4:09 p.m.4 views

EUVD-2026-82049

In the Linux kernel, the following vulnerability has been resolved: iommu/dma: Check atomic pool allocation result directly The non-blocking, non-coherent allocation path uses dmaallocfrompool, which returns the allocated page and fills cpuaddr only on success. Do not rely on cpuaddr to detect...

0.0021EPSS
SaveExploits0References8
Rows per page
Query Builder