Lucene search
+L

12 matches found

Github Security Blog
Github Security Blog
added 2026/07/31 4:53 p.m.8 views

re2: Out-of-bounds heap read in `exec`/`test`/`match` via attacker-influenced `lastIndex` on a non-ASCII subject → uncatchable process crash (DoS)

Summary re2 validates the user-settable lastIndex against the subject's UTF-8 byte length but then uses it as a UTF-16 code-unit count to walk the subject buffer, with no bounds check. For any non-ASCII subject, the byte length is larger than the true character count, so a lastIndex between those...

5.7CVSS5.7AI score0.00121EPSS
SaveExploits0References5Affected Software1
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.5 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: iommufd: Fixed the issue where pages were unpinned when an access was present. syzkaller discovered that the calculation of batchlastindex should use ‘startindex’, because when this function is called, the batch is either empt...

5.5CVSS6.7AI score0.00173EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/22 3:31 p.m.7 views

EUVD-2026-24786

In the Linux kernel, the following vulnerability has been resolved: ext4: validate pidx bounds in ext4extcorrectindexes ext4extcorrectindexes walks up the extent tree correcting index entries when the first extent in a leaf is modified. Before accessing pathk.pidx-eiblock, there is no validation...

5.6AI score0.00135EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2025/10/08 11:31 p.m.7 views

SUSE CVE-2023-53630

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix unpinning of pages when an access is present syzkaller found that the calculation of batchlastindex should use 'startindex' since at input to this function the batch is either empty or it has already been adjusted to...

5.5CVSS6.2AI score0.00173EPSS
SaveExploits0References3
OSV
OSV
added 2025/10/07 4:15 p.m.5 views

UBUNTU-CVE-2023-53630

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix unpinning of pages when an access is present syzkaller found that the calculation of batchlastindex should use 'startindex' since at input to this function the batch is either empty or it has already been adjusted to...

8.8CVSS5.4AI score0.00173EPSS
SaveExploits0References5
CVE
CVE
added 2025/10/07 3:19 p.m.26 views

CVE-2023-53630

CVE-2023-53630 is a Linux kernel issue in the IOMMU driver (iommufd) where unpinning pages during unmapping could corrupt pages that were never mapped. The provided reports describe that the bug stems from an incorrect calculation of batch_last_index in iopt_area_unfill_domain, which should be dr...

8.8CVSS5.8AI score0.00173EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2025/10/07 3:19 p.m.8 views

CVE-2023-53630 iommufd: Fix unpinning of pages when an access is present

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix unpinning of pages when an access is present syzkaller found that the calculation of batchlastindex should use 'startindex' since at input to this function the batch is either empty or it has already been adjusted to...

8.8CVSS6.2AI score
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 3:19 p.m.6 views

EUVD-2025-32777

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix unpinning of pages when an access is present syzkaller found that the calculation of batchlastindex should use 'startindex' since at input to this function the batch is either empty or it has already been adjusted to...

5.7AI score0.00173EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/10/07 3:19 p.m.18 views

CVE-2023-53630 iommufd: Fix unpinning of pages when an access is present

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix unpinning of pages when an access is present syzkaller found that the calculation of batchlastindex should use 'startindex' since at input to this function the batch is either empty or it has already been adjusted to...

8.8CVSS0.00173EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2024/09/17 2:50 a.m.4 views

SUSE CVE-2024-46701

In the Linux kernel, the following vulnerability has been resolved: libfs: fix infinite directory reads for offset dir After we switch tmpfs dir operations from simplediroperations to simpleoffsetdiroperations, every rename happened will fill new dentry to dest dir's maple...

5.5CVSS7.8AI score0.00188EPSS
SaveExploits0References3
OSV
OSV
added 2024/09/13 7:15 a.m.11 views

AZL-49318 CVE-2024-46701 affecting package kernel 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved: libfs: fix infinite directory reads for offset dir After we switch tmpfs dir operations from simplediroperations to simpleoffsetdiroperations, every rename happened will fill new dentry to dest dir's maple...

5.5CVSS6.6AI score0.00188EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/13 7:15 a.m.6 views

UBUNTU-CVE-2024-46701

In the Linux kernel, the following vulnerability has been resolved: libfs: fix infinite directory reads for offset dir After we switch tmpfs dir operations from simplediroperations to simpleoffsetdiroperations, every rename happened will fill new dentry to dest dir's maple...

5.5CVSS5.7AI score0.00188EPSS
SaveExploits0References10
Rows per page
Query Builder