Lucene search
+L

1589 matches found

Zero Day Initiative
Zero Day Initiative
•added 2026/06/03 12:00 a.m.•26 views

Docker Desktop grpcfuse Kernel Module Uncontrolled Recursion Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Docker Desktop. An attacker must first obtain the ability to execute low-privileged code within a container on the target system in order to exploit this vulnerability. The specific flaw...

6.5CVSS5.9AI score0.00149EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/06/03 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2026-45878

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: Fix watchid bounds checking in debug address watch v2 The address watch clear code receives watchid as an unsigned value u32, but some helper...

7.8CVSS6.4AI score0.00182EPSS
SaveExploits0References3
NVD
NVD
•added 2026/06/02 10:16 p.m.•35 views

CVE-2026-8936

Fixed a VM panic caused by unbounded recursion in the grpcfuse kernel module when a container created deeply nested directories on a bind-mounted host folder and triggered a dentry invalidation event. This issue has been fixed in Docker Desktop 4.76.0...

8.2CVSS0.00149EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/02 9:09 p.m.•29 views

CVE-2026-8936 Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM

Fixed a VM panic caused by unbounded recursion in the grpcfuse kernel module when a container created deeply nested directories on a bind-mounted host folder and triggered a dentry invalidation event. This issue has been fixed in Docker Desktop 4.76.0...

8.2CVSS6.5AI score0.00149EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/02 12:00 a.m.•8 views

CVE-2026-8936: Uncontrolled Recursion

Fixed a VM panic caused by unbounded recursion in the grpcfuse kernel module when a container created deeply nested directories on a bind-mounted host folder and triggered a dentry invalidation event. This issue has been fixed in Docker Desktop 4.76.0...

8.2CVSS6.5AI score0.00149EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/28 9:35 a.m.•119 views

CVE-2026-46117

CVE-2026-46117 affects the Linux kernel RDMA/mana component. The issue arises when a user can configure Work Queues to share the same Completion Queue via the uAPI, which triggers a user-writable WARN_ON() and can lead to kernel corruption. The vulnerability has been resolved by removing the trig...

7.8CVSS5.7AI score0.00187EPSS
SaveExploits0References13Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/05/28 12:00 a.m.•23 views

Linux Distros Unpatched Vulnerability : CVE-2026-24199

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memor...

4.7CVSS5.5AI score0.00092EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/05/27 8:13 p.m.•29 views

CVE-2026-24199

NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A successful exploit of this vulnerability might lead to denial of service...

4.7CVSS5.8AI score0.00092EPSS
SaveExploits0References1
CVE
CVE
•added 2026/05/27 12:18 p.m.•61 views

CVE-2026-45962

The CVE affects the Linux kernel ublk driver, where ublk_ctrl_cmd_dump() could access (header *)sqe->cmd before checking IO_URING_F_SQE128, enabling out-of-bounds memory access. The mitigation is to check the SQE128 flag earlier in ublk_ctrl_uring_cmd() and return -EINVAL if not set. Several s...

5.5CVSS5.8AI score0.00162EPSS
SaveExploits0References6Affected Software1
CVE
CVE
•added 2026/05/27 12:15 p.m.•114 views

CVE-2026-45852

Summary of CVE-2026-45852 (Linux kernel RDMA/rxe): A double-free vulnerability exists in the rxe_srq_from_init path of the RDMA subsystem. The queue pointer is temporarily assigned to srq->rq.queue before copy_to_user(), so if copy_to_user() fails, cleanup frees the same memory twice when the ...

7.8CVSS6.4AI score0.00175EPSS
SaveExploits0References21Affected Software1
NVD
NVD
•added 2026/05/26 6:16 p.m.•33 views

CVE-2026-24199

NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A successful exploit of this vulnerability might lead to denial of service...

4.7CVSS0.00092EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/05/26 5:18 p.m.•37 views

EUVD-2026-31925

NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A successful exploit of this vulnerability might lead to denial of service...

4.7CVSS5.8AI score0.00092EPSS
SaveExploits0References3
CVE
CVE
•added 2026/05/26 5:18 p.m.•91 views

CVE-2026-24199

NVIDIA Display Driver for Linux contains a race-condition vulnerability in a kernel module (CVE-2026-24199) that could allow a local attacker to trigger a denial-of-service. The issue is addressed in the NVIDIA security bulletin and corresponding driver updates; Linux branch R595 includes CVE-202...

4.7CVSS5.7AI score0.00092EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2026/05/26 5:18 p.m.•30 views

CVE-2026-24199

NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A successful exploit of this vulnerability might lead to denial of service...

4.7CVSS5.7AI score0.00092EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/05/26 5:18 p.m.•21 views

CVE-2026-24199

NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A successful exploit of this vulnerability might lead to denial of service...

4.7CVSS5.8AI score0.00092EPSS
SaveExploits0References4Affected Software3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/26 12:00 a.m.•4 views

CVE-2026-24199: Concurrent Execution using Shared Resource with Improper Synchronization

NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A successful exploit of this vulnerability might lead to denial of service...

4.7CVSS5.5AI score0.00092EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/05/26 12:00 a.m.•26 views

NVIDIA Display Driver 竞争条件问题漏洞

NVIDIA Display Driver is a graphics driver developed by NVIDIA Corporation. NVIDIA Display Driver has a race condition vulnerability, which arises from user-side reorders in the kernel module that may lead to race conditions through compiler or processor memory instructions, potentially causing...

4.7CVSS5.8AI score0.00092EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/05/20 11:40 p.m.•61 views

kernel: proc: fix UAF in proc_get_inode()

A flaw was found in the Linux kernel. A race condition between unloading a kernel module and accessing its entry in the proc filesystem leads to a use-after-free vulnerability, where the kernel accesses memory that has already been released. A local user could exploit this timing issue during...

7.8CVSS6.6AI score0.00228EPSS
SaveExploits0References5
AstraLinux
AstraLinux
•added 2026/05/20 5:53 a.m.•16 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: drm/amdkfd: Fixed error handling in kfdprocessdeviceinitvm It is necessary to only destroy the ibmem and let the process cleanup worker free the outstanding BOs. Reset the pointer in the pdd-qpd structure to avoid NULL pointer...

5.5CVSS6AI score0.00216EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
•added 2026/05/20 12:00 a.m.•30 views

FreeBSD Security Advisory - FreeBSD-SA-26:20.fusefs

FreeBSD Security Advisory - When a fusefs file system implements extended attributes, the kernel may send a FUSELISTXATTR message to the userspace daemon to retrieve the list of extended attributes for a given file. The FUSE protocol requires the daemon to return a packed list of NUL-terminated...

5.5CVSS6AI score0.00437EPSS
SaveExploits0
Rows per page
Query Builder