Lucene search
K

826 matches found

CNNVD
CNNVD
added 2024/05/26 12:0 a.m.2 views

MarvinTest Solutions HW.exe 安全漏洞

MarvinTest Solutions HW.exe is a driver file from MarvinTest Solutions, USA. A security vulnerability exists in MarvinTest Solutions HW.exe versions prior to 5.0.5.0, which stems from a vulnerability that allows arbitrary mapping of physical memory, which can lead to NT AUTHORITYSYSTEM privilege...

5.4CVSS6.6AI score0.00223EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/05/26 12:0 a.m.4 views

PT-2024-26868 · Unknown · Marvin Test Hw.Exe

Name of the Vulnerable Software and Affected Versions: Marvin Test HW.exe versions prior to 5.0.5.0 Description: The issue allows unprivileged user-mode processes to arbitrarily map physical memory with read/write access via the MmMapIoSpace API, leading to a denial of service BSOD. The...

5.5CVSS7AI score0.00138EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/05/26 12:0 a.m.4 views

PT-2024-26869 · Unknown +1 · Marvin Test Hw.Exe +1

Name of the Vulnerable Software and Affected Versions: Marvin Test HW.exe versions prior to 5.0.5.0 Description: The issue allows unprivileged user-mode processes to arbitrarily map physical memory, leading to NT AUTHORITYSYSTEM privilege escalation. This is achieved via IOCTL 0x9c406490, which...

5.4CVSS7AI score0.00223EPSS
Exploits0References4
NVD
NVD
added 2024/05/24 3:15 p.m.9 views

CVE-2021-47544

In the Linux kernel, the following vulnerability has been resolved: tcp: fix page frag corruption on page fault Steffen reported a TCP stream corruption for HTTP requests served by the apache web-server using a cifs mount-point and memory mapping the relevant file. The root cause is quite similar...

5.9CVSS6.9AI score0.00744EPSS
Exploits0References3
OSV
OSV
added 2024/05/24 3:15 p.m.15 views

CVE-2021-47544

In the Linux kernel, the following vulnerability has been resolved: tcp: fix page frag corruption on page fault Steffen reported a TCP stream corruption for HTTP requests served by the apache web-server using a cifs mount-point and memory mapping the relevant file. The root cause is quite similar...

5.9CVSS7.7AI score
Exploits0References3
UbuntuCve
UbuntuCve
added 2024/05/24 3:15 p.m.18 views

CVE-2021-47544

In the Linux kernel, the following vulnerability has been resolved: tcp: fix page frag corruption on page fault Steffen reported a TCP stream corruption for HTTP requests served by the apache web-server using a cifs mount-point and memory mapping the relevant file. The root cause is quite similar...

5.9CVSS6.4AI score0.00744EPSS
Exploits0References5
OSV
OSV
added 2024/05/24 3:15 p.m.1 views

UBUNTU-CVE-2021-47544

In the Linux kernel, the following vulnerability has been resolved: tcp: fix page frag corruption on page fault Steffen reported a TCP stream corruption for HTTP requests served by the apache web-server using a cifs mount-point and memory mapping the relevant file. The root cause is quite similar...

5.9CVSS6.4AI score0.00744EPSS
Exploits0References6
Cvelist
Cvelist
added 2024/05/24 3:9 p.m.25 views

CVE-2021-47544 tcp: fix page frag corruption on page fault

In the Linux kernel, the following vulnerability has been resolved: tcp: fix page frag corruption on page fault Steffen reported a TCP stream corruption for HTTP requests served by the apache web-server using a cifs mount-point and memory mapping the relevant file. The root cause is quite similar...

6.8AI score0.00744EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/05/24 3:9 p.m.15 views

CVE-2021-47544 tcp: fix page frag corruption on page fault

In the Linux kernel, the following vulnerability has been resolved: tcp: fix page frag corruption on page fault Steffen reported a TCP stream corruption for HTTP requests served by the apache web-server using a cifs mount-point and memory mapping the relevant file. The root cause is quite similar...

7.2AI score0.00744EPSS
Exploits0References3
CVE
CVE
added 2024/05/24 3:9 p.m.148 views

CVE-2021-47544

CVE-2021-47544 affects the Linux kernel TCP path, specifically the page frag allocation in sk_page_frag() during a page fault on an mmapped user buffer from CIFS. The nested memory access triggers page-frag modifications that corrupt the TCP stream, observed in HTTP transfers served by Apache ove...

5.9CVSS7.1AI score0.00744EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2024/05/21 3:15 p.m.1 views

UBUNTU-CVE-2021-47315

In the Linux kernel, the following vulnerability has been resolved: memory: fslifc: fix leak of IO mapping on probe failure On probe error the driver should unmap the IO memory. Smatch reports: drivers/memory/fslifc.c:298 fslifcctrlprobe warn: 'fslifcctrldev-gregs' not released on lines: 298...

5.5CVSS5.8AI score0.00252EPSS
Exploits0References13
OSV
OSV
added 2024/05/20 10:15 a.m.3 views

UBUNTU-CVE-2024-35987

In the Linux kernel, the following vulnerability has been resolved: riscv: Fix loading 64-bit NOMMU kernels past the start of RAM commit 3335068f8721 "riscv: Use PUD/P4D/PGD pages for the linear mapping" added logic to allow using RAM below the kernel load address. However, this does not work for...

5.5CVSS6.5AI score0.0021EPSS
Exploits0References11
OSV
OSV
added 2024/05/19 9:15 a.m.0 views

UBUNTU-CVE-2024-35880

In the Linux kernel, the following vulnerability has been resolved: iouring/kbuf: hold iobufferlist reference over mmap If we look up the kbuf, ensure that it doesn't get unregistered until after we're done with it. Since we're inside mmap, we cannot safely use the iouring lock. Rely on the fact...

5.5CVSS6.8AI score0.00654EPSS
Exploits0References10
UbuntuCve
UbuntuCve
added 2024/05/17 2:15 p.m.33 views

CVE-2024-35802

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

5.9AI score
Exploits0References7
CVE
CVE
added 2024/05/17 1:23 p.m.51 views

CVE-2024-35802

CVE-2024-35802 entry rejected by its CVE Numbering Authority.

6.8AI score
Exploits0
RedhatCVE
RedhatCVE
added 2024/05/01 4:40 p.m.23 views

CVE-2024-26947

A flaw was found in the Linux kernel’s ARM memory management functionality, where certain memory layouts cause a kernel panic. This flaw allows an attacker who can specify or alter memory layouts to cause a denial of service...

5.5CVSS7.6AI score0.0023EPSS
Exploits0References4
OSV
OSV
added 2024/05/01 6:15 a.m.5 views

AZL-67481 CVE-2024-26947 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses Since commit a4d5613c4dc6 "arm: extend pfnvalid to take into account freed memory map alignment" changes the semantics of pfnvalid to check presence of t...

5.5CVSS6.1AI score0.0023EPSS
Exploits0References1
OSV
OSV
added 2024/05/01 6:15 a.m.3 views

DEBIAN-CVE-2024-26947

In the Linux kernel, the following vulnerability has been resolved: ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses Since commit a4d5613c4dc6 "arm: extend pfnvalid to take into account freed memory map alignment" changes the semantics of pfnvalid to check presence of t...

5.5CVSS5.3AI score0.0023EPSS
Exploits0References1
OSV
OSV
added 2024/05/01 6:15 a.m.1 views

UBUNTU-CVE-2024-26977

In the Linux kernel, the following vulnerability has been resolved: pciiounmap: Fix MMIO mapping leak The ifdef ARCHHASGENERICIOPORTMAP accidentally also guards iounmap, which means MMIO mappings are leaked. Move the guard so we call iounmap for MMIO mappings...

5.5CVSS6.1AI score0.00226EPSS
Exploits0References22
Debian CVE
Debian CVE
added 2024/05/01 5:18 a.m.23 views

CVE-2024-26947

In the Linux kernel, the following vulnerability has been resolved: ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses Since commit a4d5613c4dc6 "arm: extend pfnvalid to take into account freed memory map alignment" changes the semantics of pfnvalid to check presence of t...

5.5CVSS7.4AI score0.0023EPSS
Exploits0
Rows per page
Query Builder