Lucene search
K

17 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.4 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: media: iris: Add the buffer to the list only after a successful allocation. We moved the listaddtail function to after dmaalloc attrs succeeds when creating internal buffers. Previously, the buffer was enqueued into buffers-list...

5.5CVSS5.8AI score0.00013EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2026/05/09 2:42 a.m.5 views

SUSE CVE-2026-43142

In the Linux kernel, the following vulnerability has been resolved: media: iris: gen1: Destroy internal buffers after FW releases After the firmware releases internal buffers, the driver was not destroying them. This left stale allocations that were no longer used, especially across resolution...

5.8AI score0.00013EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2026/05/09 2:40 a.m.3 views

SUSE CVE-2026-43235

In the Linux kernel, the following vulnerability has been resolved: media: iris: Add missing platform data entries for SM8750 Two platform-data fields for SM8750 were missed: - getvpubuffersize = irisvpu33bufsize Without this, the driver fails to allocate the required internal buffers, leading to...

5.7AI score0.00013EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2026/05/07 2:17 a.m.4 views

SUSE CVE-2026-43146

In the Linux kernel, the following vulnerability has been resolved: media: iris: Add buffer to list only after successful allocation Move listaddtail to after dmaallocattrs succeeds when creating internal buffers. Previously, the buffer was enqueued in buffers-list before the DMA allocation. If t...

5.9AI score0.00013EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2026/05/06 11:28 a.m.2 views

CVE-2026-43235

In the Linux kernel, the following vulnerability has been resolved: media: iris: Add missing platform data entries for SM8750 Two platform-data fields for SM8750 were missed: - getvpubuffersize = irisvpu33bufsize Without this, the driver fails to allocate the required internal buffers, leading to...

5.5CVSS5.7AI score0.00013EPSS
Exploits0
ATTACKERKB
ATTACKERKB
added 2026/05/06 11:27 a.m.2 views

CVE-2026-43146

In the Linux kernel, the following vulnerability has been resolved: media: iris: Add buffer to list only after successful allocation Move listaddtail to after dmaallocattrs succeeds when creating internal buffers. Previously, the buffer was enqueued in buffers-list before the DMA allocation. If t...

5.8AI score0.00013EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2026/05/06 11:27 a.m.23 views

CVE-2026-43142 media: iris: gen1: Destroy internal buffers after FW releases

In the Linux kernel, the following vulnerability has been resolved: media: iris: gen1: Destroy internal buffers after FW releases After the firmware releases internal buffers, the driver was not destroying them. This left stale allocations that were no longer used, especially across resolution...

0.00013EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/01/13 3:29 p.m.18 views

CVE-2025-68812

...

0.00027EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2025/11/14 12:23 a.m.1 views

SUSE CVE-2025-40208

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix module removal if firmware download failed Fix remove if firmware failed to load: qcom-iris aa00000.video-codec: Direct firmware load for qcom/vpu/vpu33p4.mbn failed with error -2 qcom-iris aa00000.video-codec:...

6.5AI score0.00026EPSS
Exploits0References3
OSV
OSV
added 2025/11/12 10:15 p.m.2 views

UBUNTU-CVE-2025-40208

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix module removal if firmware download failed Fix remove if firmware failed to load: qcom-iris aa00000.video-codec: Direct firmware load for qcom/vpu/vpu33p4.mbn failed with error -2 qcom-iris aa00000.video-codec:...

5.7AI score0.00026EPSS
Exploits0References10
OSV
OSV
added 2025/10/20 4:15 p.m.0 views

UBUNTU-CVE-2025-40017

In the Linux kernel, the following vulnerability has been resolved: media: iris: Fix memory leak by freeing untracked persist buffer One internal buffer which is allocated only once per session was not being freed during session close because it was not being tracked as part of internal buffer li...

5.9AI score0.00029EPSS
Exploits0References6
Cvelist
Cvelist
added 2025/10/20 3:30 p.m.7 views

CVE-2025-40017 media: iris: Fix memory leak by freeing untracked persist buffer

In the Linux kernel, the following vulnerability has been resolved: media: iris: Fix memory leak by freeing untracked persist buffer One internal buffer which is allocated only once per session was not being freed during session close because it was not being tracked as part of internal buffer li...

0.00029EPSS
Exploits0References3
OSV
OSV
added 2025/10/20 3:30 p.m.3 views

CVE-2025-40017 media: iris: Fix memory leak by freeing untracked persist buffer

In the Linux kernel, the following vulnerability has been resolved: media: iris: Fix memory leak by freeing untracked persist buffer One internal buffer which is allocated only once per session was not being freed during session close because it was not being tracked as part of internal buffer li...

6.6AI score0.00029EPSS
Exploits0References6
NVD
NVD
added 2025/09/05 6:15 p.m.4 views

CVE-2025-39708

In the Linux kernel, the following vulnerability has been resolved: media: iris: Fix NULL pointer dereference A warning reported by smatch indicated a possible null pointer dereference where one of the arguments to API "irishfigen2handlesystemerror" could sometimes be null. To fix this, add a che...

5.5CVSS0.00027EPSS
Exploits0References2
OSV
OSV
added 2025/09/05 6:15 p.m.1 views

UBUNTU-CVE-2025-39708

In the Linux kernel, the following vulnerability has been resolved: media: iris: Fix NULL pointer dereference A warning reported by smatch indicated a possible null pointer dereference where one of the arguments to API "irishfigen2handlesystemerror" could sometimes be null. To fix this, add a che...

5.5CVSS5.7AI score0.00027EPSS
Exploits0References5
CVE
CVE
added 2025/09/05 5:21 p.m.13 views

CVE-2025-39708

CVE-2025-39708 affects the Linux kernel media: iris component; the issue is a potential NULL pointer dereference in iris_hfi_gen2_handle_system_error where an argument could be null. The fix adds a null check before accessing members. Base CVSS v3.1 is 5.5 (MEDIUM), with local attack vector and l...

5.5CVSS5.8AI score0.00027EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2025/09/05 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a NULL pointer dereference in the media/iris module...

5.5CVSS6.2AI score0.00027EPSS
Exploits0References2
Rows per page
Query Builder