Lucene search
+L

635 matches found

Positive Technologies
Positive Technologies
•added 2021/11/14 12:00 a.m.•5 views

PT-2021-30649

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15 Description A reference count leak was discovered in the kfree at end function of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

5.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/10/28 12:00 a.m.•4 views

PT-2021-26342

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.15 Description: A reference count leak was discovered in the kfree at end function of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

5.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/10/28 12:00 a.m.•4 views

PT-2021-30337

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.14.15 Description A reference count leak was discovered in the kfree at end function of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

5.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/09/29 12:00 a.m.•3 views

PT-2024-11416

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential memory leak has been identified in the Linux kernel, specifically in the drm/amdkfd module. The issue arises from the allocation of memory for ttm-sg by kmalloc in kfd mem...

5.5CVSS0.00194EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/09/09 12:00 a.m.•3 views

PT-2024-11461

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is a reference count leak in the kfree at end function of the Linux kernel. This occurs when the kunit alloc and get resource function is invoked, causing the returned resource...

5.3CVSS0.00489EPSS
SaveExploits0
Talos
Talos
•added 2021/04/13 12:00 a.m.•33 views

Microsoft Azure Sphere Kernel pwm_ioctl_apply_state kfree() code execution vulnerability

Summary A code execution vulnerability exists in the kernel pwmioctlapplystate functionality of Microsoft Azure Sphere 21.01. A specially crafted ioctl can lead to arbitrary kfree. An attacker can issue an ioctl to trigger this vulnerability. Tested Versions Microsoft Azure Sphere 21.01 Product...

8.1CVSS8.2AI score0.0048EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2021/03/09 12:00 a.m.•62 views

RHEL 8 : kernel (RHSA-2021:0765)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0765 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: bad kfree in auditfilter.c may...

7.8CVSS7.3AI score0.06692EPSS
SaveExploits4References12
RedHat Linux
RedHat Linux
•added 2021/03/03 11:46 a.m.•138 views

Important: Red Hat Security Advisory: kpatch-patch security update

An update is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

7.8CVSS6.7AI score0.0112EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
•added 2021/02/12 12:00 a.m.•58 views

SUSE SLES15 Security Update : kernel (SUSE-SU-2021:0438-1)

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2021-3348: Fixed a use-after-free in nbdaddsocket that could be triggered by local attackers with access to the nbd device via an I/O request at a certain point...

9.8CVSS7.2AI score0.06642EPSS
SaveExploits14References112
Tenable Nessus
Tenable Nessus
•added 2021/01/14 12:00 a.m.•67 views

SUSE SLES15 Security Update : kernel (SUSE-SU-2021:0108-1)

The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver bsc1180559. CVE-2020-27825: Fixed a race in the traceopen and buffer resi...

9.8CVSS6.9AI score0.02305EPSS
SaveExploits6References129
Mend
Mend
•added 2020/12/14 9:50 p.m.•3 views

CVE-2020-0444

In auditfreelsmfield of auditfilter.c, there is a possible bad kfree due to a logic error in auditdatatoentry. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

8.5CVSS0.00219EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/14 12:00 a.m.•7 views

CVE-2020-0444: Release of Invalid Pointer or Reference

In auditfreelsmfield of auditfilter.c, there is a possible bad kfree due to a logic error in auditdatatoentry. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

7.8CVSS5.8AI score0.00219EPSS
SaveExploits0References2
osv_asb
osv_asb
•added 2020/12/01 12:00 a.m.•95 views

ASB-A-150693166

In auditfreelsmfield of auditfilter.c, there is a possible bad kfree due to a logic error in auditdatatoentry. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.9AI score0.00219EPSS
SaveExploits0References2
NVD
NVD
•added 2020/03/24 6:15 p.m.•37 views

CVE-2020-10841

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 Exynos 9610 chipsets software. There is an arbitrary kfree in the vipx and vertex drivers. The Samsung ID is SVE-2019-16294 February 2020...

7.8CVSS7.7AI score0.00136EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2020/03/24 6:15 p.m.•26 views

CVE-2020-10841

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 Exynos 9610 chipsets software. There is an arbitrary kfree in the vipx and vertex drivers. The Samsung ID is SVE-2019-16294 February 2020...

7.8CVSS7.2AI score0.00136EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/03/24 5:24 p.m.•52 views

CVE-2020-10841

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 Exynos 9610 chipsets software. There is an arbitrary kfree in the vipx and vertex drivers. The Samsung ID is SVE-2019-16294 February 2020...

7.8AI score0.00136EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/24 12:00 a.m.•9 views

CVE-2020-10841: Undefined Security Weakness

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 Exynos 9610 chipsets software. There is an arbitrary kfree in the vipx and vertex drivers. The Samsung ID is SVE-2019-16294 February 2020...

7.8CVSS7.4AI score0.00136EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/03/24 12:00 a.m.•11 views

PT-2020-12364

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with P9.0 and Q10.0 software Description An issue was discovered on Samsung mobile devices, where there is an arbitrary kfree in the vipx and vertex drivers. Recommendations For Samsung mobile devices with P9.0 software,...

7.8CVSS0.00136EPSS
SaveExploits0References3
Prion
Prion
•added 2018/12/07 9:29 a.m.•28 views

Null pointer dereference

The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p-oss as used in Mi A2 Lite and RedMi6 pro devices through 2018-08-27 has a NULL pointer dereference in kfree after a kmalloc failure in gtpreadColor in drivers/input/touchscreen/gt917d/gt9xx.c...

5CVSS7.6AI score0.01278EPSS
SaveExploits0References1Affected Software2
CVE
CVE
•added 2018/12/07 9:00 a.m.•59 views

CVE-2018-19939

The CVE-2018-19939 entry concerns the Goodix GT9xx touchscreen driver used in Xiaomi Mi A2 Lite and RedMi6 pro on custom Linux kernels up to 2018-08-27. Root cause: NULL pointer dereference in kfree following a kmalloc failure in gtp_read_Color within drivers/input/touchscreen/gt917d/gt9xx.c. Imp...

7.5CVSS7.5AI score0.01278EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder