Lucene search
+L

948 matches found

Tenable Nessus
Tenable Nessus
•added 2026/04/21 12:00 a.m.•14 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011166)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011166 advisory. In the Linux kernel, the following vulnerability has been resolved: RISC-V: Make port I/O string accessors actually work Fix port I/O string accessors such as insb',...

5.9AI score0.00205EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/04/21 12:00 a.m.•12 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013151)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013151 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Use VMMAP instead of VMALLOC for ringbuf After commit 2fd3fb0be1d1 kasan, vmalloc: unpoison...

7.1CVSS5.9AI score0.00238EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/04/20 7:22 p.m.•18 views

CVE-2026-40572

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. In versions prior to 0.24, Syscall 15 MemoryMapRange allows Ring 3 user-mode processes to map arbitrary virtual address ranges into their address space without validating against forbidden regions, including critical...

9CVSS5.8AI score0.00181EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/04/18 12:16 a.m.•50 views

CVE-2026-40572 NovumOS has Arbitrary Memory Mapping via Syscall 15 (MemoryMapRange)

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. In versions prior to 0.24, Syscall 15 MemoryMapRange allows Ring 3 user-mode processes to map arbitrary virtual address ranges into their address space without validating against forbidden regions, including critical...

9CVSS0.00181EPSS
SaveExploits1References2
EUVD
EUVD
•added 2026/04/18 12:16 a.m.•19 views

EUVD-2026-23640

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. In versions prior to 0.24, Syscall 15 MemoryMapRange allows Ring 3 user-mode processes to map arbitrary virtual address ranges into their address space without validating against forbidden regions, including critical...

9CVSS5.8AI score0.00181EPSS
SaveExploits1References2
CVE
CVE
•added 2026/04/18 12:16 a.m.•40 views

CVE-2026-40572

NovumOS vulnerability CVE-2026-40572: In versions prior to 0.24, Syscall 15 (MemoryMapRange) lets Ring-3 user processes map arbitrary virtual ranges into their address space without validating against forbidden regions, including kernel structures (IDT, GDT, TSS, page tables). This can allow a lo...

9CVSS5.8AI score0.00181EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/04/18 12:00 a.m.•33 views

PT-2026-33549

Name of the Vulnerable Software and Affected Versions NovumOS versions prior to 0.24 Description Syscall 15 'MemoryMapRange' allows Ring 3 user-mode processes to map arbitrary virtual address ranges into their address space without validating against forbidden regions. This includes critical kern...

9CVSS5.9AI score0.00181EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2026/04/10 1:22 a.m.•20 views

CVE-2026-29923

The pstrip64.sys driver in EnTech Taiwan PowerStrip =3.90.736 allows local users to escalate privileges to SYSTEM via a crafted IOCTL request enabling unprivileged users to map arbitrary physical memory into their address space and modify critical kernel structures...

7.8CVSS6AI score0.0014EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/04/09 9:31 p.m.•22 views

EUVD-2026-21014

The pstrip64.sys driver in EnTech Taiwan PowerStrip =3.90.736 allows local users to escalate privileges to SYSTEM via a crafted IOCTL request enabling unprivileged users to map arbitrary physical memory into their address space and modify critical kernel structures...

6AI score0.0014EPSS
SaveExploits1References3
CVE
CVE
•added 2026/04/09 12:00 a.m.•134 views

CVE-2026-29923

The pstrip64.sys driver in EnTech Taiwan PowerStrip (versions ≤ 3.90.736) contains a local privilege escalation vulnerability. An unprivileged user-mode process can exploit the 0x80002008 IOCTL request to map arbitrary physical memory into its virtual address space by abusing ZwMapViewOfSection v...

7.8CVSS7.4AI score0.0014EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2026/04/07 10:20 a.m.•13 views

CVE-2026-23401

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component. A local attacker with privileges on the host system could exploit a vulnerability in how KVM handles shadow page table entries SPTEs during memory-mapped I/O MMIO operations. By manipulating guest page table entrie...

8.1CVSS6AI score0.00184EPSS
SaveExploits0References4
Packet Storm News
Packet Storm News
•added 2026/04/06 12:00 a.m.•19 views

pstrip64.sys Privilege Escalation

The pstrip64.sys kernel driver exposes an IOCTL that allows low-privileged users to map arbitrary ranges of physical memory into their own virtual address space. This primitive allows full read/write access to the system's physical RAM, enabling attackers to modify critical kernel structures and...

6.1AI score0.0014EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2026/04/06 12:00 a.m.•13 views

The vulnerabilities of the `perf mmap()` and `perf mmap close()` functions in the Linux operating system’s kernel allow a hacker to trigger a service failure.

The vulnerability of the perf mmap and perf mmap close functions in Linux kernel relates to a violation of the count of references to pages stored in memory. Exploiting this vulnerability can allow an attacker to trigger a service failure...

5.5CVSS7.1AI score0.0012EPSS
SaveExploits0References5Affected Software3
GithubExploit
GithubExploit
•added 2026/03/27 7:03 p.m.•235 views

Exploit for Access of Memory Location Before Start of Buffer in Apple Ipados

CVE-2024-27840 — Kernel Memory Protection Bypass First publ...

7.5CVSS6.3AI score0.0025EPSS
SaveExploits1
EUVD
EUVD
•added 2026/03/25 12:30 p.m.•16 views

EUVD-2026-15372

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix WARNON in tracingbuffersmmapclose When a process forks, the child process copies the parent's VMAs but the usermapped reference count is not incremented. As a result, when both the parent and child processes exit,...

5.6AI score0.00114EPSS
SaveExploits0References5
OSV
OSV
•added 2026/03/25 11:16 a.m.•20 views

UBUNTU-CVE-2026-23380

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix WARNON in tracingbuffersmmapclose When a process forks, the child process copies the parent's VMAs but the usermapped reference count is not incremented. As a result, when both the parent and child processes exit,...

5.5CVSS5.7AI score0.00114EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/03/04 12:00 a.m.•24 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an error in the mapping of physical blocks by the checkswapactivate function, potentially leading...

7.8CVSS7AI score0.00162EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2026/02/17 12:24 a.m.•22 views

SUSE CVE-2026-23133

In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: fix dmafreecoherent pointer dmaalloccoherent allocates a DMA mapped buffer and stores the addresses in XXXunaligned fields. Those should be reused when freeing the buffer rather than the aligned addresses...

4.7CVSS6AI score0.0013EPSS
SaveExploits0References19
EUVD
EUVD
•added 2026/02/14 4:27 p.m.•16 views

EUVD-2026-5865

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: handle changing device dma map requirements The initial state of dmaneedsunmap may be false, but change to true while mapping the data iterator. Enabling swiotlb is one such case that can change the result. The nvme...

5.2AI score0.00165EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/02/05 12:24 a.m.•13 views

SUSE CVE-2026-23093

In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbd: fix dmaunmapsg nents The dmaunmapsg functions should be called with the same nents as the dmamapsg, not the value the map function returned...

5.5CVSS5.9AI score0.00143EPSS
SaveExploits0References3
Rows per page
Query Builder