Lucene search
+L

12498 matches found

Cvelist
Cvelist
added 5 days ago31 views

CVE-2026-68124 mctp: serial: handle zero-length frames to prevent rx buffer overflow

In the Linux kernel, the following vulnerability has been resolved: mctp: serial: handle zero-length frames to prevent rx buffer overflow The MCTP serial receive state machine reads a frame length byte in mctpserialpushheader case 2 and validates it upper-bound-only: if c MCTPSERIALFRAMEMTU...

9.6CVSS0.00344EPSS
SaveExploits0References5
CVE
CVE
added 5 days ago34 views

CVE-2026-68124

CVE-2026-68124 affects the Linux kernel MCTP serial driver. A zero-length frame could cause an out-of-bounds write in the receive path when rxlen == 0, requiring CAP_NET_ADMIN to attach the MCTP line discipline and bring up the netdev. The fix routes zero-length frames to STATE_TRAILER (instead o...

9.6CVSS5.6AI score0.00344EPSS
SaveExploits0References5
CVE
CVE
added 5 days ago23 views

CVE-2026-68101

CVE-2026-68101 affects the Linux kernel DRM/amdgpu path. The vulnerability arises in amdgpu_hmm_invalidate_gfx where, briefly during alloc/free, the userptr BO is not part of the VM, making bo->vm_bo potentially NULL. The fix keeps a reference to the VM root page directory as the parent of the...

5.3AI score0.00149EPSS
SaveExploits0References1
Cvelist
Cvelist
added 5 days ago31 views

CVE-2026-68093 KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Bump asidgeneration on CPU online to avoid ASID collision after hotplug If a vCPU stays scheduled out or blocked while the last pCPU it ran on goes through a hotplug cycle online-offline-online, and the vCPU then resume...

0.0018EPSS
SaveExploits0References5
AstraLinux
AstraLinux
added 5 days ago11 views

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Clear XSTATEBVi in the guest XSAVE state whenever XFDi=1 When loading the guest XSAVE state via KVMSETXSAVE, and when updating XFD in response to a guest WRMSR, the disabled features are cleared from the saved or to be...

5.5CVSS5.5AI score0.00199EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 5 days ago11 views

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: KVM: Do not corrupt the irqfd routing entry when deassigning an irqfd When deassigning a KVMIRQFD, do not corrupt the irqfd’s copy of the IRQ routing entry. Doing so would break the kvmarchirqbypassdelproducer function on x86...

7.8CVSS5.4AI score0.00124EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 5 days ago9 views

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use vmcb01 in the emulation of VMLOAD/VMSAVE. The commit cc3ed80ae69f states that “KVM: nSVM: always use vmcb01 for vmsave/vmload of guest state”. This commit ensured that KVM always used vmcb01 for the fields...

7.9CVSS6.3AI score0.00128EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 5 days ago12 views

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: MIPS: Workaround for LLVM bugs when gp is used as a global register variable. On MIPS, currentthreadinfo is defined as a global register variable located in $gp, and it is simply reassigned during the kernel relocation. However,...

7.3CVSS5.4AI score0.00128EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/08 12:0 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-68081

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state Put all vmcs12 pages if KVM synthesizes a nested VM-Exit due to invalid guest...

5.5AI score0.00155EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/07 8:30 p.m.12 views

EUVD-2026-54652

A vulnerability was detected in HKUDS nanobot up to 0.2.1. The affected element is the function connectmcpservers of the file nanobot/agent/tools/mcp.py of the component MCP enabledTools Scope Handler. Performing a manipulation results in improper access controls. The attack is possible to be...

5.8CVSS4.7AI score0.00272EPSS
SaveExploits0References10
OSV
OSV
added 2026/08/07 4:42 p.m.8 views

CVE-2026-67585 Atom Exhaustion via _entities Representation Keys in DivvyPayHQ absinthe_federation

Allocation of Resources Without Limits or Throttling vulnerability in DivvyPayHQ absinthefederation allows an unauthenticated remote attacker to abort the Erlang VM via crafted entities representation keys. Every key of every object in the representations argument of the federation-mandated...

8.7CVSS5.4AI score0.00407EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2026/08/07 4:7 p.m.36 views

CVE-2026-17595 Nexus Repository 3 - JEXL Content Selector Sandbox Property-Read Bypass

Nexus Repository 3 did not fully sandbox JEXL expressions used in Content Selectors. An account holding the nexus:selectors:create permission could construct an expression that read Java object properties not intended to be exposed to the expression engine, disclosing internal JVM class metadata...

5.3CVSS0.00287EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/08/07 11:55 a.m.10 views

kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources

A flaw was found in the Linux kernel on ARM processors. A race condition in Translation Lookaside Buffer Invalidation TLBI operations during memory permission changes allows a local attacker to write to memory resources owned by higher privilege levels. This could allow an unprivileged local...

9.1CVSS6.3AI score0.00571EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/08/07 11:55 a.m.9 views

kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O When completing emulation of instruction that generated a userspace exit for I/O, don't recheck L1 intercepts as KVM has already finished that phase of instructi...

7.9CVSS6.5AI score0.00158EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/08/07 11:41 a.m.8 views

kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources

A flaw was found in the Linux kernel on ARM processors. A race condition in Translation Lookaside Buffer Invalidation TLBI operations during memory permission changes allows a local attacker to write to memory resources owned by higher privilege levels. This could allow an unprivileged local...

9.1CVSS6.3AI score0.00571EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/08/07 11:40 a.m.7 views

CVE-2026-12261

A flaw was found in the nltk.downloader component of NLTK. This vulnerability allows for cross-package resource and model poisoning. The downloader extracts package archives into shared namespaces and only validates package integrity after extraction. This design flaw enables one package to...

5.3CVSS5.6AI score0.00192EPSS
SaveExploits0References4
Microsoft CVE
Microsoft CVE
added 2026/08/07 8:8 a.m.9 views

KVM: nVMX: Hide shadow VMCS right after VMCLEAR

...

9.8CVSS5.2AI score0.0012EPSS
SaveExploits0
EUVD
EUVD
added 2026/08/07 6:25 a.m.11 views

EUVD-2026-54393

A vulnerability in nltk.downloader in nltk/nltk versions = 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives into shared namespaces such as corpora/ and taggers/ instead of package-isolated roots, and validates package integrity only after the...

5.3CVSS5.8AI score0.00192EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/08/07 6:25 a.m.5 views

CVE-2026-12261

A vulnerability in nltk.downloader in nltk/nltk versions = 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives into shared namespaces such as corpora/ and taggers/ instead of package-isolated roots, and validates package integrity only after the...

5.3CVSS5.5AI score0.00192EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2026/08/06 11:56 p.m.13 views

SUSE CVE-2026-64562

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Hide shadow VMCS right after VMCLEAR freenested frees the shadow VMCS while vmcs01 still points to it. But because it is asynchronous with respect to loadedvmcsclear, the vCPU might migrate before the pointer is cleare...

8.8CVSS5.5AI score0.0012EPSS
SaveExploits0References4
Rows per page
Query Builder