Lucene search
K

4304 matches found

UbuntuCve
UbuntuCve
added 2026/02/04 5:16 p.m.4 views

CVE-2026-23103

In the Linux kernel, the following vulnerability has been resolved: ipvlan: Make the addrslock be per port Make the addrslock be per port, not per ipvlan dev. Initial code seems to be written in the assumption, that any address change must occur under RTNL. But it is not so for the case of IPv6. ...

7.8CVSS6AI score0.00107EPSS
Exploits0References25
Cvelist
Cvelist
added 2026/02/04 4:0 p.m.26 views

CVE-2026-23045 net/ena: fix missing lock when update devlink params

In the Linux kernel, the following vulnerability has been resolved: net/ena: fix missing lock when update devlink params Fix assert lock warning while calling devlparamdriverinitvalueset in ena. WARNING: net/devlink/core.c:261 at devlassertlocked+0x62/0x90, CPU0: kworker/0:0/9 CPU: 0 UID: 0 PID: ...

0.00151EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/02/03 9:18 a.m.5 views

CVE-2026-20415

In imgsys, there is a possible memory corruption due to improper locking. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10363254; Issue ID: MSV-5617...

5.5CVSS5.4AI score0.00053EPSS
Exploits0References1
Redos
Redos
added 2026/02/03 12:0 a.m.3 views

ROS-20260203-73-0034

Vulnerability in kernel-lt related to incorrect resource locking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

5.5CVSS5.5AI score0.00127EPSS
Exploits0
Redos
Redos
added 2026/02/03 12:0 a.m.3 views

ROS-20260203-73-0033

A vulnerability in the drivers/usb/typec/ucsi/ components of the Linux operating system kernel is related to thread locking errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

5.5CVSS5.5AI score0.00117EPSS
Exploits0
NVD
NVD
added 2026/02/02 9:15 a.m.4 views

CVE-2026-20415

In imgsys, there is a possible memory corruption due to improper locking. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10363254; Issue ID: MSV-5617...

5.5CVSS0.00053EPSS
Exploits0References1
OSV
OSV
added 2026/02/02 9:15 a.m.2 views

CVE-2026-20415

In imgsys, there is a possible memory corruption due to improper locking. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10363254; Issue ID: MSV-5617...

5.5CVSS5.8AI score0.00053EPSS
Exploits0References1
Veracode
Veracode
added 2026/02/02 8:34 a.m.4 views

Race Condition

node-tar is vulnerable to a Race Condition Vulnerability. The vulnerability is due to improper handling of Unicode path collisions in the PathReservations locking mechanism on normalization-insensitive or case-insensitive filesystems, which allows an attacker to exploit race conditions using...

8.8CVSS5.8AI score0.00153EPSS
Exploits1References3Affected Software2
Vulnrichment
Vulnrichment
added 2026/02/02 8:15 a.m.3 views

CVE-2026-20415

In imgsys, there is a possible memory corruption due to improper locking. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10363254; Issue ID: MSV-5617...

5.4AI score0.00053EPSS
Exploits0References1
EUVD
EUVD
added 2026/02/02 8:15 a.m.5 views

EUVD-2026-5139

In imgsys, there is a possible memory corruption due to improper locking. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10363254; Issue ID: MSV-5617...

5.5CVSS5.4AI score0.00053EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/02 8:15 a.m.4 views

CVE-2026-20415

In imgsys, there is a possible memory corruption due to improper locking. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10363254; Issue ID: MSV-5617...

5.5CVSS5.4AI score0.00053EPSS
Exploits0References2
CVE
CVE
added 2026/02/02 8:15 a.m.16 views

CVE-2026-20415

CVE-2026-20415 affects imgsys with memory corruption due to improper locking. The issue can lead to a local denial of service if an attacker already has System privileges; exploitation requires no user interaction. The publicly cited information does not specify exploit vectors beyond the local a...

5.5CVSS5.4AI score0.00053EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/02/02 8:15 a.m.26 views

CVE-2026-20415

In imgsys, there is a possible memory corruption due to improper locking. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10363254; Issue ID: MSV-5617...

0.00053EPSS
Exploits0References1
Redos
Redos
added 2026/02/02 12:0 a.m.3 views

ROS-20260202-73-0056

A vulnerability in the bpftrace.c component of the Linux operating system kernel is related to thread locking errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

5.5CVSS5.5AI score0.00167EPSS
Exploits0
CNNVD
CNNVD
added 2026/02/02 12:0 a.m.5 views

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a series of chips developed by MediaTek Corporation in China. The MediaTek Chipsets contain security vulnerabilities, which stem from improper locking mechanisms in the imgsys component, potentially leading to local denial-of-service attacks...

5.5CVSS5.8AI score0.00053EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/02/02 12:0 a.m.8 views

PT-2026-5638

In imgsys, there is a possible memory corruption due to improper locking. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10363254; Issue ID: MSV-5617...

5.4AI score0.00053EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2026/02/01 12:24 a.m.4 views

SUSE CVE-2026-23018

In the Linux kernel, the following vulnerability has been resolved: btrfs: release path before initializing extent tree in btrfsreadlockedinode In btrfsreadlockedinode we are calling btrfsinitfileextenttree while holding a path with a read locked leaf from a subvolume tree, and...

4.7CVSS5.8AI score0.001EPSS
Exploits0References7
SUSE CVE
SUSE CVE
added 2026/02/01 12:23 a.m.10 views

SUSE CVE-2026-23036

In the Linux kernel, the following vulnerability has been resolved: btrfs: release path before igetfailed in btrfsreadlockedinode In btrfsreadlockedinode if we fail to lookup the inode, we jump to the 'out' label with a path that has a read locked leaf and then we call igetfailed. This can result...

5.8AI score0.00194EPSS
Exploits0References3
NVD
NVD
added 2026/01/31 12:16 p.m.6 views

CVE-2026-23018

In the Linux kernel, the following vulnerability has been resolved: btrfs: release path before initializing extent tree in btrfsreadlockedinode In btrfsreadlockedinode we are calling btrfsinitfileextenttree while holding a path with a read locked leaf from a subvolume tree, and...

5.5CVSS0.001EPSS
Exploits0References2
OSV
OSV
added 2026/01/31 12:16 p.m.3 views

UBUNTU-CVE-2026-23036

In the Linux kernel, the following vulnerability has been resolved: btrfs: release path before igetfailed in btrfsreadlockedinode In btrfsreadlockedinode if we fail to lookup the inode, we jump to the 'out' label with a path that has a read locked leaf and then we call igetfailed. This can result...

5.7AI score0.00194EPSS
Exploits0References5
Rows per page
Query Builder