Linux kernel bind_rdev_to_array buffer overflow DoS

The vulnerability of the bindrdevtoarray function in the drivers/md/md.c kernel module of the Linux operating system is related to a resource leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the mlx5eswipsecrestoredestuplink function in the drivers/net/ethernet/mellanox/mlx5/core/esw/ipsecfs.c module of the Linux kernel is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

Linux RISC-V Kernel kprobe_fault_handler Heap Buffer Overflow DoS

The vulnerability of the kprobefaulthandler function in the arch/riscv/kernel/probes/kprobes.c file of the module for the Linux operating system’s RISC-V architecture-based kernel involves incorrect input validation. Exploiting this vulnerability could allow an attacker to trigger a service failu...

CVE-2024-58060 bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject structops registration that uses module ptr and the module btfid is missing There is a UAF report in the bpfstructops when CONFIGMODULES=n. In particular, the report is on tcpcongestionops that has a "struct module...

Linux Distros Unpatched Vulnerability : CVE-2024-53219

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtiofs: use pages instead of pointer for kernel direct IO When trying to insert a 10MB kernel module kept in a virtio-fs with cache disabled, the following...

Linux Distros Unpatched Vulnerability : CVE-2022-49350

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: mdio: unexport init-annotated mdiobusinit EXPORTSYMBOL and init is a bad combination...

Linux Distros Unpatched Vulnerability : CVE-2021-46934

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: i2c: validate user data in compat ioctl Wrong user data may cause warning in i2ctransfer, ex...

Linux Distros Unpatched Vulnerability : CVE-2024-26846

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-fc: do not wait in vain when unloading module The module exit path has race between deleting all controllers and freeing 'left over IDs'. To prevent double...

Linux Distros Unpatched Vulnerability : CVE-2020-10781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the...

Linux Distros Unpatched Vulnerability : CVE-2014-9645

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The addprobe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel modules via a / slash...

Linux Distros Unpatched Vulnerability : CVE-2020-12656

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gssmechfree in net/sunrpc/authgss/gssmechswitch.c in the rpcsecgsskrb5 implementation in the Linux kernel through 5.6.10 lacks certain domainrelease calls,...

CVE-2024-41339

An issue in the CGI endpoint used to upload configurations in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigo...

DEBIAN-CVE-2025-21744

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix NULL pointer dereference in brcmftxfinalize On removal of the device or unloading of the kernel module a potential NULL pointer dereference occurs. The following sequence deletes the interface: brcmfdetach...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the miscalculation of the space available in the GSP cmdq buffer in nvkm...

CVE-2024-41339: Unrestricted Upload of File with Dangerous Type

An issue in the CGI endpoint used to upload configurations in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigo...

CVE

It is an offensive tool for Linux. This repository contains a pr...

SUSE CVE-2022-2196

A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines or IBPB after running L2 due to KVM L0 advertising eIBRS support to L1. An attacker at L2 with code...

Linux mm/filemap.c Heap Buffer Overflow DoS

The vulnerability of the folioseekholedata function in the mm/filemap.c module of Linux operating systems is related to the execution of a loop with an unreachable exit condition due to numerical truncation. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-21692

In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ets qdisc OOB Indexing Haowei Yan found that etsclassfromarg can index an Out-Of-Bound class in etsclassfromarg when passed clid of 0. The overflow may cause local privilege escalation. 18.852298 ------------ cut...

CVE-2022-24352

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 prior to 211210 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetUSB.ko kernel module. The issue results from the...