Lucene search
+L

1512 matches found

RedhatCVE
RedhatCVE
added 2026/08/24 11:23 a.m.2 views

CVE-2026-74717

A flaw was found in the Linux kernel's net/mlx5 component. This vulnerability occurs because the firmware tracer fwtracer does not properly handle error return values, specifically when ERRPTR is returned instead of NULL. An attacker could potentially trigger a kernel panic by exploiting this...

5.5CVSS5.4AI score0.0022EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/24 10:02 a.m.4 views

CVE-2026-74712

A flaw was found in the Linux kernel's vdpa/mlx5 driver. This vulnerability occurs due to an incorrect calculation of buffer length within the createdirectkeys function, causing the system to read beyond its allocated memory boundaries. A local attacker could exploit this memory corruption to...

5.5CVSS5.8AI score0.00209EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/22 4:16 p.m.10 views

CVE-2026-74717

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fwtracer, return NULL on create error Tracer creation can fail by returning either NULL or ERRPTR. The return value is stored without a check on the device, and users treat ERRPTR and NULL the same way. This also causes...

0.0022EPSS
SaveExploits0References8
NVD
NVD
added 2026/08/22 4:16 p.m.11 views

CVE-2026-74709

In the Linux kernel, the following vulnerability has been resolved: xsk: clear metadata pointer when no timestamp is requested User space can change metadata flags after request processing. Rereading them during completion can therefore make the kernel write a timestamp that was not requested whe...

0.00206EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/22 4:16 p.m.12 views

CVE-2026-74712

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix buffer length in createdirectkeys We have seen in our CI the following KASAN message: BUG: KASAN: slab-out-of-bounds in cmdexec+0x550/0xca0 mlx5core Read of size 272 at addr 0000000176795020 by task...

0.00209EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/22 3:33 p.m.5 views

CVE-2026-74717 net/mlx5: fw_tracer, return NULL on create error

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fwtracer, return NULL on create error Tracer creation can fail by returning either NULL or ERRPTR. The return value is stored without a check on the device, and users treat ERRPTR and NULL the same way. This also causes...

5.8AI score
SaveExploits0References11
EUVD
EUVD
added 2026/08/22 3:33 p.m.8 views

EUVD-2026-64404

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fwtracer, return NULL on create error Tracer creation can fail by returning either NULL or ERRPTR. The return value is stored without a check on the device, and users treat ERRPTR and NULL the same way. This also causes...

5.7AI score0.0022EPSS
SaveExploits0References8
CVE
CVE
added 2026/08/22 3:33 p.m.10 views

CVE-2026-74717

CVE-2026-74717 is a NULL pointer dereference in the Linux kernel's mlx5_core driver (Mellanox ConnectX network adapter), specifically in the fw_tracer subsystem. The root cause is inconsistent error handling: tracer creation could return either NULL or ERR_PTR on failure, but the core dump logic ...

5.7AI score0.0022EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/08/22 3:33 p.m.9 views

EUVD-2026-64399

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix buffer length in createdirectkeys We have seen in our CI the following KASAN message: BUG: KASAN: slab-out-of-bounds in cmdexec+0x550/0xca0 mlx5core Read of size 272 at addr 0000000176795020 by task...

5.8AI score0.00209EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/22 3:33 p.m.12 views

CVE-2026-74712

CVE-2026-74712 is a slab-out-of-bounds read in the Linux kernel mlx5_vdpa driver, specifically in the create_direct_keys() function. The root cause is a size calculation mismatch: the input buffer length passed to cmd_exec includes the full structure size (out + in + mtt[]), but the pointer point...

5.8AI score0.00209EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/22 3:33 p.m.23 views

CVE-2026-74712 vdpa/mlx5: Fix buffer length in create_direct_keys()

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix buffer length in createdirectkeys We have seen in our CI the following KASAN message: BUG: KASAN: slab-out-of-bounds in cmdexec+0x550/0xca0 mlx5core Read of size 272 at addr 0000000176795020 by task...

0.00209EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/22 3:33 p.m.8 views

EUVD-2026-64396

In the Linux kernel, the following vulnerability has been resolved: xsk: clear metadata pointer when no timestamp is requested User space can change metadata flags after request processing. Rereading them during completion can therefore make the kernel write a timestamp that was not requested whe...

5.5AI score0.00206EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.11 views

PT-2026-79717

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix buffer length in create direct keys We have seen in our CI the following KASAN message: BUG: KASAN: slab-out-of-bounds in cmd exec+0x550/0xca0 mlx5 core Read of size 272 at addr 0000000176795020 by task...

5.7AI score0.00209EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.11 views

PT-2026-79722

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fw tracer, return NULL on create error Tracer creation can fail by returning either NULL or ERR PTR. The return value is stored without a check on the device, and users treat ERR PTR and NULL the same way. This also...

5.6AI score0.0022EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.10 views

PT-2026-79714

In the Linux kernel, the following vulnerability has been resolved: xsk: clear metadata pointer when no timestamp is requested User space can change metadata flags after request processing. Rereading them during completion can therefore make the kernel write a timestamp that was not requested whe...

5.3AI score0.00206EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/20 3:37 p.m.6 views

CVE-2026-74297

A flaw was found in the Linux kernel's RDMA/mlx5 subsystem. Insufficient validation of a user-provided input, rqwqeshift, in the setrqsize function can lead to an integer overflow. This overflow results in an undefined shift operation, which may cause system instability or a denial of service...

7.8CVSS5.5AI score0.00129EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/20 3:37 p.m.8 views

CVE-2026-74296

A flaw was found in the RDMA/mlx5 component of the Linux kernel. This vulnerability occurs due to an incorrect User Access Register UAR index release, where the software-provided index is freed instead of the hardware-provided one. This improper resource management could potentially lead to...

7.8CVSS5.4AI score0.00129EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/19 5:39 p.m.5 views

CVE-2026-72345

A flaw was found in the Linux kernel's mlx5 LAG Link Aggregation Group driver. An off-by-one error in the mlx5lagcreatesinglefdb function's error rollback mechanism can lead to operations on uninitialized memory or a double-free condition. This could result in system instability or a denial of...

7.8CVSS5.4AI score0.00165EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/19 5:08 p.m.6 views

CVE-2026-72341

A flaw was found in the Linux kernel's net/mlx5e component. A local attacker could exploit a race condition during the publication of channel statistics. On weakly-ordered architectures, this could lead to a null pointer dereference, causing a system crash and a denial of service...

5.5CVSS5.3AI score0.00207EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/19 4:56 a.m.4 views

CVE-2026-72032

A flaw was found in the Linux kernel's net/mlx5 HWS Hardware Steering component. This vulnerability occurs when the hwsbwcmatchermove function attempts to resize a matcher, and the mlx5hwsmatcherresizesettarget operation fails. In such a scenario, a replacement matcher is allocated but not proper...

5.5CVSS5.4AI score0.002EPSS
SaveExploits0References4
Rows per page
Query Builder