Lucene search
+L

800 matches found

Positive Technologies
Positive Technologies
added 2025/04/03 12:00 a.m.21 views

PT-2025-14593 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel. The problem occurs when a large folio needs to be dropped due to EOF End Of File and the correct number of references is no...

7.8CVSS6.2AI score0.67588EPSS
SaveExploits3References437
RedhatCVE
RedhatCVE
added 2025/03/29 5:49 p.m.18 views

CVE-2023-53008

In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential memory leaks in session setup Make sure to free cifsses::authkey.response before allocating it as we might end up leaking memory in reconnect or mounting...

5.5CVSS7.2AI score0.00171EPSS
SaveExploits0References4
OSV
OSV
added 2025/03/27 5:15 p.m.4 views

DEBIAN-CVE-2023-53000

In the Linux kernel, the following vulnerability has been resolved: netlink: prevent potential spectre v1 gadgets Most netlink attributes are parsed and validated from nlavalidateparse or validatenla u16 type = nlatypenla; if type == 0 || type maxtype / error or continue / @type is then used as a...

7.8CVSS5.4AI score0.00212EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/27 5:15 p.m.14 views

CVE-2023-52996

In the Linux kernel, the following vulnerability has been resolved: ipv4: prevent potential spectre v1 gadget in fibmetricsmatch if !type continue; if type RTAXMAX return false; ... fival = fi-fibmetrics-metricstype - 1; @type being used as an array index, we need to prevent cpu speculation or ri...

5.5CVSS0.00263EPSS
SaveExploits0References5
CVE
CVE
added 2025/03/27 4:43 p.m.145 views

CVE-2023-52997

CVE-2023-52997 is a Linux kernel vulnerability affecting ipv4: ip_metrics_convert() where an attacker could exploit speculative execution to leak kernel memory content. The issue arises from using a value as an array index (type) without sufficient protection, allowing a spectre v1 gadget. The de...

5.5CVSS6.5AI score0.00264EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2025/03/27 4:43 p.m.10 views

CVE-2023-52997 ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()

In the Linux kernel, the following vulnerability has been resolved: ipv4: prevent potential spectre v1 gadget in ipmetricsconvert if !type continue; if type RTAXMAX return -EINVAL; ... metricstype - 1 = val; @type being used as an array index, we need to prevent cpu speculation or risk leaking...

5.9AI score
SaveExploits0References9
Vulnrichment
Vulnrichment
added 2025/03/27 4:37 p.m.3 views

CVE-2023-52936 kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup()

In the Linux kernel, the following vulnerability has been resolved: kernel/irq/irqdomain.c: fix memory leak with using debugfslookup When calling debugfslookup the result must have dput called on it, otherwise the memory will leak over time. To make things simpler, just call debugfslookupandremov...

6.2AI score0.00245EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/03/26 12:00 a.m.13 views

PT-2025-27974

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the wifi: ath12k module. The issue occurs due to multiple allocations of rx stats when the same station is...

7.8CVSS6.8AI score0.00485EPSS
SaveExploits0References214
BDU FSTEC
BDU FSTEC
added 2025/03/19 12:00 a.m.11 views

The vulnerability of the msft_add_address_filter_sync() function in the net/bluetooth/msft.c module of the Linux kernel’s Bluetooth subsystem allows a malicious actor to cause a service failure.

The vulnerability of the msftaddaddressfiltersync function in the net/bluetooth/msft.c module of the Linux kernel’s Bluetooth subsystem is related to improper memory release before deleting the last reference „memory leak“. Exploiting this vulnerability could allow a attacker to cause a service...

7.5CVSS5.9AI score0.00225EPSS
SaveExploits0References14Affected Software3
RedHat Linux
RedHat Linux
added 2025/03/10 10:52 a.m.11 views

kernel: HID: core: zero-initialize the report buffer

A vulnerability was found in the Linux kernel's driver for Human Interface Devices. This flaw allows an attacker to use a malicious input device to read information from the report buffer. This could be used to leak kernel memory, enabling the exploitation of additional vulnerabilities...

5.5CVSS7.2AI score0.00811EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2025-21683

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bpfskselectreuseport memory leak As pointed out in the original comment, lookup in...

5.5CVSS5.7AI score0.00224EPSS
SaveExploits0References3
CNVD
CNVD
added 2025/03/05 12:00 a.m.36 views

Linux kernel suffers from a memory leak vulnerability (CNVD-2025-05995)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a memory leak vulnerability that stems from apple-aic not handling node reference counting correctly during initialization, which can be exploited by ...

5.5CVSS6.9AI score0.00218EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2021-47473

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Fix a memory leak in an error path of qla2x00processels Commit 8c0eb596baa5 SCSI qla2xxx: Fix a memory leak in an error path of qla2x00processels...

5.5CVSS5.3AI score0.0021EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.15 views

Linux Distros Unpatched Vulnerability : CVE-2022-2652

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to th...

7.3CVSS6.7AI score0.00334EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.18 views

Linux Distros Unpatched Vulnerability : CVE-2022-49556

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak For some sev ioct...

7.1CVSS5.5AI score0.0027EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2022-48699

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sched/debug: fix dentry leak in updatescheddomaindebugfs Kuyo reports that the pattern of using debugfsremovedebugfslookup leaks a dentry and with a hotplug...

5.5CVSS5.8AI score0.00237EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.21 views

Linux Distros Unpatched Vulnerability : CVE-2022-42896

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2capcore.c's l2capconnect and l2capleconnectreq functions which may allow code...

8.8CVSS7.3AI score0.021EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2022-48975

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpiolib: fix memory leak in gpiochipsetupdev Here is a backtrace report about memory leak detected in gpiochipsetupdev: unreferenced object 0xffff88810b406400...

5.5CVSS6.7AI score0.00245EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2022-48724

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix potential memory leak in intelsetupirqremapping After commit e3beca48a45b...

5.5CVSS5.5AI score0.00236EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2017-17741

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The KVM implementation in the Linux kernel through 4.14.7 allows attackers to obtain potentially sensitive information from kernel memory, aka a writemmio...

6.5CVSS6.7AI score0.0047EPSS
SaveExploits0References3
Rows per page
Query Builder