Lucene search
K

437 matches found

OSV
OSV
added 2025/07/25 2:15 p.m.0 views

UBUNTU-CVE-2025-38408

In the Linux kernel, the following vulnerability has been resolved: genirq/irqsim: Initialize work context pointers properly Initialize ops member's pointers properly by using kzalloc instead of kmalloc when allocating the simulation work context. Otherwise the pointers contain random content...

5.5CVSS5.7AI score0.00147EPSS
Exploits0References41
ATTACKERKB
ATTACKERKB
added 2025/07/25 1:20 p.m.4 views

CVE-2025-38408

In the Linux kernel, the following vulnerability has been resolved: genirq/irqsim: Initialize work context pointers properly Initialize ops member's pointers properly by using kzalloc instead of kmalloc when allocating the simulation work context. Otherwise the pointers contain random content...

5.5CVSS5.2AI score0.00147EPSS
Exploits0References7Affected Software1
CVE
CVE
added 2025/07/25 1:20 p.m.51 views

CVE-2025-38408

CVE-2025-38408 resolves a Linux kernel issue in genirq/irq_sim where the simulation work context pointers were not initialized safely. The root cause is using kmalloc() to allocate the simulation work context, which could leave pointers with random content and lead to invalid dereferences. The fi...

5.5CVSS6.4AI score0.00147EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2025/07/25 1:15 p.m.5 views

DEBIAN-CVE-2025-38363

In the Linux kernel, the following vulnerability has been resolved: drm/tegra: Fix a possible null pointer dereference In tegracrtcreset, new memory is allocated with kzalloc, but no check is performed. Before calling drmatomichelpercrtcreset, state should be checked to prevent possible null...

5.5CVSS5.4AI score0.00156EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/07/25 12:0 a.m.3 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a call to kzalloc during umemmutex locking that could result in a deadlock...

5.5CVSS6.8AI score0.00105EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2025/07/03 12:0 a.m.3 views

Vulnerabilities of functions rtk_usb3phy_probe() and devm_kzalloc() in the Linux operating system, allowing attackers to cause service failures

The vulnerabilities of the rtkusb3phyprobe and devmkzalloc functions in the Linux operating system are related to pointer arithmetic errors. Exploiting these vulnerabilities can allow an attacker to cause a service failure...

5.5CVSS6.6AI score0.00212EPSS
Exploits0References9Affected Software3
RedhatCVE
RedhatCVE
added 2025/06/20 10:16 a.m.7 views

CVE-2022-50226

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak For some sev ioctl interfaces, input may be passed that is less than or equal to SEVFWBLOBMAXSIZE, but larger than the data that PSP firmware return...

5.5CVSS7.4AI score0.00189EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/06/19 3:38 a.m.1 views

SUSE CVE-2022-50226

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak For some sev ioctl interfaces, input may be passed that is less than or equal to SEVFWBLOBMAXSIZE, but larger than the data that PSP firmware return...

5.5CVSS6.4AI score0.00189EPSS
Exploits0References10
SUSE CVE
SUSE CVE
added 2025/06/19 3:14 a.m.0 views

SUSE CVE-2025-38070

In the Linux kernel, the following vulnerability has been resolved: ASoC: sma1307: Add NULL check in sma1307settingloaded All varibale allocated by kzalloc and devmkzalloc could be NULL. Multiple pointer checks and their cleanup are added. This issue is found by our static analysis tool...

5.5CVSS6.5AI score0.00127EPSS
Exploits0References3
NVD
NVD
added 2025/06/18 11:15 a.m.4 views

CVE-2022-50226

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak For some sev ioctl interfaces, input may be passed that is less than or equal to SEVFWBLOBMAXSIZE, but larger than the data that PSP firmware return...

5.5CVSS0.00189EPSS
Exploits0References5
OSV
OSV
added 2025/06/18 11:15 a.m.1 views

DEBIAN-CVE-2022-50222

In the Linux kernel, the following vulnerability has been resolved: tty: vt: initialize unicode screen buffer syzbot reports kernel infoleak at vcsread 1, for buffer can be read immediately after resize operation. Initialize buffer using kzalloc. ---------- include include include include int...

5.5CVSS5.5AI score0.00191EPSS
Exploits0References1
OSV
OSV
added 2025/06/18 11:15 a.m.0 views

UBUNTU-CVE-2022-50222

In the Linux kernel, the following vulnerability has been resolved: tty: vt: initialize unicode screen buffer syzbot reports kernel infoleak at vcsread 1, for buffer can be read immediately after resize operation. Initialize buffer using kzalloc. ---------- include include include include int...

5.5CVSS6.2AI score0.00191EPSS
Exploits0References9
CVE
CVE
added 2025/06/18 11:3 a.m.70 views

CVE-2022-50226

CVE-2022-50226 affects the Linux kernel crypto: ccp subsystem, where sev ioctl interfaces could allocate memory with kmalloc to handle input up to SEV_FW_BLOB_MAX_SIZE but were not fully overwritten by PSP firmware, risking uninitialized slab memory. The issue is resolved by changing ioctl memory...

5.5CVSS6.6AI score0.00189EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2025/06/18 11:3 a.m.4 views

CVE-2022-50226 crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak For some sev ioctl interfaces, input may be passed that is less than or equal to SEVFWBLOBMAXSIZE, but larger than the data that PSP firmware return...

5.5CVSS6.1AI score0.00189EPSS
Exploits0References8
CNNVD
CNNVD
added 2025/06/18 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from ccp sev ioctl using kmalloc instead of kzalloc, which could lead to a kernel memory leak...

5.5CVSS6.3AI score0.00189EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/06/18 12:0 a.m.2 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from unchecked kzalloc and devmkzalloc return values, which could lead to a null pointer dereference...

5.5CVSS7.9AI score0.00127EPSS
Exploits0References3
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.3 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: sched: A potential NULL pointer dereferencing in the GRED scheduler has been addressed. If kzalloc in gredinit returns a NULL pointer, the code follows the error handling path and invokes greddestroy. This, in turn, calls...

5.5CVSS5.7AI score0.00156EPSS
Exploits0References3
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.1 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net: phy: leds: fix memory leak A network restart test on a router caused an out-of-memory condition, which was traced to a memory leak in the PHY LED trigger code. The root cause is the misuse of the devm API. The registration...

5.5CVSS5.8AI score0.00155EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/06/16 12:0 a.m.3 views

PT-2025-30773

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential deadlock can occur in the IB/mlx5 module during Memory Region MR deregistration. This issue arises when kzalloc is invoked while holding the umem mutex or any lock acquired...

6CVSS6.5AI score0.00105EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2025/05/28 3:30 a.m.0 views

kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak

In the Linux kernel, the following vulnerability has been resolved: dosysnametohandle: use kzalloc to fix kernel-infoleak syzbot identified a kernel information leak vulnerability in dosysnametohandle and issued the following report 1. 1 "BUG: KMSAN: kernel-infoleak in instrumentcopytouser...

5.5CVSS6.5AI score0.00828EPSS
Exploits0References5
Rows per page
Query Builder