Lucene search
+L

84 matches found

osv_ubuntu
osv_ubuntu
•added 2026/03/25 11:16 a.m.•28 views

UBUNTU-CVE-2026-23335

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix kernel stack leak in irdmacreateuserah struct irdmacreateahresp // 8 bytes, no padding u32 ahid; // offset 0 - SET uresp.ahid = ah-scah.ahinfo.ahidx u8 rsvd4; // offset 4 - NEVER SET - LEAK ; rsvd4: 4 bytes of sta...

5.5CVSS5.7AI score0.00134EPSS
SaveExploits0References36
osv_cve
osv_cve
•added 2026/03/25 10:28 a.m.•14 views

CVE-2026-23384 RDMA/ionic: Fix kernel stack leak in ionic_create_cq()

In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Fix kernel stack leak in ioniccreatecq struct ioniccqresp resp u32 cqid2; // offset 0 - PARTIALLY SET see below u8 udmamask; // offset 8 - SET resp.udmamask = vcq-udmamask u8 rsvd7; // offset 9 - NEVER SET udmamask &...

5.6AI score0.00117EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/03/25 10:28 a.m.•53 views

CVE-2026-23384 RDMA/ionic: Fix kernel stack leak in ionic_create_cq()

In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Fix kernel stack leak in ioniccreatecq struct ioniccqresp resp u32 cqid2; // offset 0 - PARTIALLY SET see below u8 udmamask; // offset 8 - SET resp.udmamask = vcq-udmamask u8 rsvd7; // offset 9 - NEVER SET udmamask &...

0.00117EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/03/25 10:28 a.m.•23 views

CVE-2026-23384

In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Fix kernel stack leak in ioniccreatecq struct ioniccqresp resp u32 cqid2; // offset 0 - PARTIALLY SET see below u8 udmamask; // offset 8 - SET resp.udmamask = vcq-udmamask u8 rsvd7; // offset 9 - NEVER SET udmamask &...

5.5CVSS5.8AI score0.00117EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/03/25 10:27 a.m.•46 views

CVE-2026-23335 RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix kernel stack leak in irdmacreateuserah struct irdmacreateahresp // 8 bytes, no padding u32 ahid; // offset 0 - SET uresp.ahid = ah-scah.ahinfo.ahidx u8 rsvd4; // offset 4 - NEVER SET - LEAK ; rsvd4: 4 bytes of sta...

0.00134EPSS
SaveExploits0References7
CVE
CVE
•added 2026/03/25 10:27 a.m.•43 views

CVE-2026-23335

CVE-2026-23335: Linux kernel RDMA/irdma create_user_ah() leak resolved. Root cause: the irdma_create_ah_resp struct contained 4 bytes (rsvd) that were never zeroed, leaking stack memory prior to ib_respond_udata(). Affected code paths thus exposed uninitialized stack content (4 bytes) in the resp...

5.5CVSS5.5AI score0.00134EPSS
SaveExploits0References10Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/03/25 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-23335

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/irdma: Fix kernel stack leak in irdmacreateuserah struct irdmacreateahresp // 8 bytes, no padding u32 ahid; // offset 0 - SET uresp.ahid =...

5.5CVSS5.6AI score0.00134EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/01/09 9:52 a.m.•15 views

CVE-2020-10854

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. Kernel stack addresses are leaked to userspace. The Samsung ID is SVE-2019-16161 January 2020...

7.5CVSS7.3AI score0.00413EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•32 views

PT-2026-27700

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel stack leak exists in the irdma create user ah function within the RDMA/irdma component. The rsvd4 member of the irdma create ah resp structure leaks 4 bytes of stack memory...

5.5CVSS5.5AI score0.00134EPSS
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2020-3260

Malware in sbrugna...

7.5CVSS7.3AI score0.00413EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/09 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2019-16921

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel before 4.17, hnsroceallocucontext in drivers/infiniband/hw/hns/hnsrocemain.c does not initialize the resp data structure, which might allow...

7.5CVSS7.1AI score0.01935EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/06 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2018-17972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the procpidstack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the...

5.5CVSS6.5AI score0.00364EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2025/02/26 1:56 a.m.•16 views

CVE-2022-49293

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: initialize registers in nftdochain Initialize registers to avoid stack leak into userspace...

5.5CVSS6AI score0.00288EPSS
SaveExploits0
osv_ubuntu
osv_ubuntu
•added 2024/05/21 3:15 p.m.•22 views

UBUNTU-CVE-2021-47255

In the Linux kernel, the following vulnerability has been resolved: kvm: LAPIC: Restore guard to prevent illegal APIC register access Per the SDM, "any access that touches bytes 4 through 15 of an APIC register may cause undefined behavior and must not be executed." Worse, such an access in...

7.1CVSS6AI score0.00244EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/21 12:00 a.m.•2 views

CVE-2021-47255: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: kvm: LAPIC: Restore guard to prevent illegal APIC register access Per the SDM, "any access that touches bytes 4 through 15 of an APIC register may cause undefined behavior and must not be executed." Worse, such an access in...

7.1CVSS5.9AI score0.00244EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2023/04/04 7:00 a.m.•18 views

A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information when issuing commands to the /dev/infiniband/rdma_cm device node. While this access is unlikely to leak sensitive user information it can be further used to defeat existing kernel protection mechanisms.

...

2.3CVSS7.2AI score0.00199EPSS
SaveExploits0
osv_cve
osv_cve
•added 2023/03/27 9:15 p.m.•22 views

CVE-2021-3923

A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information when issuing commands to the /dev/infiniband/rdmacm device node. While this access is unlikely to leak sensitive user information, it can be...

2.3CVSS7AI score
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2023/03/27 9:15 p.m.•30 views

UBUNTU-CVE-2021-3923

A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information when issuing commands to the /dev/infiniband/rdmacm device node. While this access is unlikely to leak sensitive user information, it can be...

2.3CVSS6.6AI score0.00199EPSS
SaveExploits0References3
Mend
Mend
•added 2023/03/27 12:00 a.m.•8 views

CVE-2021-3923

A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information when issuing commands to the /dev/infiniband/rdmacm device node. While this access is unlikely to leak sensitive user information, it can be...

4.6CVSS0.00199EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2023/02/15 5:55 a.m.•12 views

SUSE CVE-2010-4525

Linux kernel 2.6.33 and 2.6.34.y does not initialize the kvmvcpuevents-interrupt.pad structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via unspecified vectors...

1.9CVSS6.3AI score0.00341EPSS
SaveExploits1References4
Rows per page
Query Builder