Lucene search
+L

5863 matches found

OSV
OSV
added 2025/07/10 8:15 a.m.23 views

AZL-72832 CVE-2025-38300 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce-cipher - fix error handling in sun8icecipherprepare Fix two DMA cleanup issues on the error path in sun8icecipherprepare: 1 If dmamapsg fails for areq-dst, the device driver would try to free DMA memory it has no...

5.5CVSS5.7AI score0.00149EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/10 8:15 a.m.7 views

DEBIAN-CVE-2025-38300

In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce-cipher - fix error handling in sun8icecipherprepare Fix two DMA cleanup issues on the error path in sun8icecipherprepare: 1 If dmamapsg fails for areq-dst, the device driver would try to free DMA memory it has no...

5.5CVSS5.5AI score0.00149EPSS
SaveExploits0References1
NVD
NVD
added 2025/07/10 8:15 a.m.11 views

CVE-2025-38267

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not trigger WARNON due to a commitoverrun When reading a memory mapped buffer the reader page is just swapped out with the last page written in the write buffer. If the reader page is the same as the commit buffer...

7.8CVSS0.00177EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2025/07/10 8:15 a.m.24 views

CVE-2025-38341

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: avoid double free when failing to DMA-map FW msg The semantics are that caller of fbnicmbxmapmsg retains the ownership of the message on error. All existing callers dutifully free the page...

7.8CVSS6.2AI score0.00154EPSS
SaveExploits0
CVE
CVE
added 2025/07/10 8:15 a.m.71 views

CVE-2025-38341

CVE-2025-38341 pertains to the Linux kernel fbnic driver. The issue is described as a double-free scenario when DMA-mapping a FW message fails within fbnic_mbx_map_msg(), with the documented behavior that the caller retains ownership of the message on error and the page is freed by existing calle...

7.8CVSS6.6AI score0.00154EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2025/07/10 8:15 a.m.12 views

UBUNTU-CVE-2025-38300

In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce-cipher - fix error handling in sun8icecipherprepare Fix two DMA cleanup issues on the error path in sun8icecipherprepare: 1 If dmamapsg fails for areq-dst, the device driver would try to free DMA memory it has no...

5.5CVSS6AI score0.00149EPSS
SaveExploits0References31
Packet Storm News
Packet Storm News
added 2025/07/10 12:00 a.m.11 views

GPUHammer: Rowhammer Attacks on GPU Memories Are Practical

Rowhammer is a read disturbance vulnerability in modern DRAM that causes bit-flips, compromising security and reliability. While extensively studied on Intel and AMD CPUs with DDR and LPDDR memories, its impact on GPUs using GDDR memories, critical for emerging machine learning applications,...

6.7AI score
SaveExploits0
Debian CVE
Debian CVE
added 2025/07/09 10:42 a.m.17 views

CVE-2025-38247

In the Linux kernel, the following vulnerability has been resolved: userns and mntidmap leak in opentreeattr2 Once wantmountsetattr has returned a positive, it does require finishmountkattr to release -mntuserns. Failing domountsetattr does not change that. As the result, we can end up leaking...

5.5CVSS5.5AI score0.00123EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2025/07/07 11:23 p.m.8 views

SUSE CVE-2025-38226

In the Linux kernel, the following vulnerability has been resolved: media: vivid: Change the siize of the composing syzkaller found a bug: BUG: KASAN: vmalloc-out-of-bounds in tpgfillplanepattern drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2608 inline BUG: KASAN: vmalloc-out-of-bounds in...

7.8CVSS6.6AI score0.00162EPSS
SaveExploits0References23
SUSE CVE
SUSE CVE
added 2025/07/04 2:38 p.m.7 views

SUSE CVE-2025-38163

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on sbi-totalvalidblockcount syzbot reported a f2fs bug as below: ------------ cut here ------------ kernel BUG at fs/f2fs/f2fs.h:2521! RIP: 0010:decvalidblockcount+0x3b2/0x3c0 fs/f2fs/f2fs.h:2521 Call...

5.5CVSS6.3AI score0.00154EPSS
SaveExploits0References3
OSV
OSV
added 2025/07/04 2:15 p.m.11 views

AZL-64689 CVE-2025-38226 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: media: vivid: Change the siize of the composing syzkaller found a bug: BUG: KASAN: vmalloc-out-of-bounds in tpgfillplanepattern drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2608 inline BUG: KASAN: vmalloc-out-of-bounds in...

7.8CVSS6.4AI score0.00162EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/03 9:15 a.m.4 views

DEBIAN-CVE-2025-38172

In the Linux kernel, the following vulnerability has been resolved: erofs: avoid using multiple devices with different type For multiple devices, both primary and extra devices should be the same type. erofsinitdevice has already guaranteed that if the primary is a file-backed device, extra devic...

7.8CVSS6.1AI score0.00148EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/03 9:15 a.m.12 views

AZL-64574 CVE-2025-38163 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on sbi-totalvalidblockcount syzbot reported a f2fs bug as below: ------------ cut here ------------ kernel BUG at fs/f2fs/f2fs.h:2521! RIP: 0010:decvalidblockcount+0x3b2/0x3c0 fs/f2fs/f2fs.h:2521 Call...

5.5CVSS6.8AI score0.00154EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/03 9:15 a.m.3 views

DEBIAN-CVE-2025-38135

In the Linux kernel, the following vulnerability has been resolved: serial: Fix potential null-ptr-deref in mlbusioprobe devmioremap can return NULL on error. Currently, mlbusioprobe does not check for this case, which could result in a NULL pointer dereference. Add NULL check after devmioremap t...

5.5CVSS5.4AI score0.00176EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/07/03 12:00 a.m.7 views

The vulnerability of the arm64/kvm/mmio.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the arm64/kvm/mmio.c component in the Linux operating system is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow an attacker to cause a service failure...

6.6CVSS6.7AI score0.00222EPSS
SaveExploits0References12Affected Software4
SUSE CVE
SUSE CVE
added 2025/06/30 11:31 p.m.11 views

SUSE CVE-2025-38084

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: unshare page tables during VMA split, not before Currently, splitvma triggers hugetlb page table unsharing through vmops-maysplit. This happens before the VMA lock and rmap locks are taken - which is too early, it...

5.8CVSS6.4AI score0.0017EPSS
SaveExploits0References25
NVD
NVD
added 2025/06/30 8:15 a.m.12 views

CVE-2025-38088

In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap memtrace mmap issue has an out of bounds issue. This patch fixes the by checking that the requested mapping region size should stay within the allocated region si...

7.1CVSS0.00151EPSS
SaveExploits0References7
OSV
OSV
added 2025/06/30 8:15 a.m.6 views

DEBIAN-CVE-2025-38088

In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap memtrace mmap issue has an out of bounds issue. This patch fixes the by checking that the requested mapping region size should stay within the allocated region si...

7.1CVSS5.7AI score0.00151EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/06/29 7:26 p.m.5 views

Malicious code in trace-mapping (npm)

The package communicates with a domain associated with malicious activity...

7AI score
SaveExploits0
OSV
OSV
added 2025/06/29 7:26 p.m.4 views

MAL-2025-5469 Malicious code in trace-mapping (npm)

The package communicates with a domain associated with malicious activity...

7.1AI score
SaveExploits0
Rows per page
Query Builder