1255 matches found
CVE-2025-23135 RISC-V: KVM: Teardown riscv specific bits after kvm_exit
In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Teardown riscv specific bits after kvmexit During a module removal, kvmexit invokes arch specific disable call which disables AIA. However, we invoke aiaexit before kvmexit resulting in the following warning. KVM...
The vulnerability of the function cm3_helper_translate_curve_toHW_format() in the AMD Display driver’s kernel module /drivers/gpu/drm/amd/display/dc/dcn30/dcn30_cm_common.c, which can be exploited by attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the cm3helpertranslatecurvetohwformat function in the AMD Display driver’s kernel module /drivers/gpu/drm/amd/display/dc/dcn30/dcn30cmcommon.c in the Linux kernel is related to the copying of buffers without checking their size a classic buffer overflow attack. Exploiting thi...
PT-2025-16332
The anti-theft protection mechanism can be bypassed by attackers due to weak response generation algorithms for the head unit. It is possible to reveal all 32 corresponding responses by sniffing CAN traffic or by pre-calculating the values, which allow to bypass the protection. First identified o...
Vulnerability of the efx_ef10pci_sriov_disable() function in the drivers/net/ethernet/sfc/ef10_sriov.c module – a driver for supporting Solarflare Ethernet network adapters in Linux kernel. This vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the efxef10pcisriovdisable function in the drivers/net/ethernet/sfc/ef10sriov.c module – the driver for Solarflare Ethernet network adapters in Linux operating systems – is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an...
The vulnerability of the smb2_send_interim_resp() function in the fs/ksmbd/smb2pdu.c module of the Linux file system support module allows a attacker to compromise the integrity of protected information or cause service failures.
The vulnerability of the smb2sendinterimresp function in the fs/ksmbd/smb2pdu.c module of the Linux file system support module is related to the use of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the integrity of protected information or cause service...
CVE-2025-31173
Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-31173
Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-31172
Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-31172
Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-31172
Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-31171
CVE-2025-31171 describes a file read permission bypass in the kernel file system module, affecting Huawei HarmonyOS. The vulnerability allows bypass of read permissions within the kernel file system component, with potential impact to service confidentiality (local exploitation; low attack comple...
The vulnerabilities of the functions dbAdjTree() and dbFindLeaf() in the kernel module fs/jfs/jfs_dmap.c of the Linux operating system allow a hacker to cause a service failure.
The vulnerability of the functions dbAdjTree and dbFindLeaf in the kernel module fs/jfs/jfsdmap.c of the Linux operating system is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the amd_pstate_epp_cpu_exit() function in the drivers/cpufreq/amd-pstate.c module of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the amdpstateeppcpuexit function in the drivers/cpufreq/amd-pstate.c module of the Linux operating system is related to improper memory release before deleting the last reference „memory leak“. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the ice_reset VF() function in the drivers/net/ethernet/intel/ice/ice VF_lib.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the icereset VF function in the drivers/net/ethernet/intel/ice/ice VFlib.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the `cs_amp_get_efi_variable()` function in the `sound/soc/codecs/cs-amp-lib.c` kernel module of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the csampgetefivariable function in the sound/soc/codecs/cs-amp-lib.c kernel module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the xe_devcoredump_read() function in the drivers/gpu/drm/xe/xe_devcoredump.c kernel module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the xedevcoredumpread function in the drivers/gpu/drm/xe/xedevcoredump.c kernel module of the Linux operating system is related to the assignment of pointers. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the perf_event_cpu_offline() function in the drivers/dma/idxd/perfmon.c kernel module of the Linux operating system, which allows a hacker to trigger a service failure
The vulnerability of the perfeventcpuoffline function in the drivers/dma/idxd/perfmon.c kernel module of the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
Vulnerability of the function dcn30_apply_idle_power_optimizations() in the drivers/gpu/drm/amd/display/dc/dcn30/dcn30HWSeq.c module of the Linux operating system, which allows a hacker to trigger a service failure
The vulnerability of the dcn30applyidlepoweroptimizations function in the drivers/gpu/drm/amd/display/dc/dcn30/dcn30HWSeq.c module of the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the `ks_pcie_setup_rc_app regs()` function in the drivers/pci/controller/dwc/pci-keystone.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the kspciesetuprcapp regs function in the drivers/pci/controller/dwc/pci-keystone.c kernel module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the bind_rdev_to_array() function in the drivers/md/md.c kernel module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the bindrdevtoarray function in the drivers/md/md.c kernel module of the Linux operating system is related to a resource leak. Exploiting this vulnerability could allow an attacker to cause a service failure...