25507 matches found
CVE-2025-48539
In SendPacketToPeer of aclarbiter.cc, there is a possible out of bounds read due to a use after free. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48539
In SendPacketToPeer of aclarbiter.cc, there is a possible out of bounds read due to a use after free. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48539
CVE-2025-48539: In SendPacketToPeer of acl_arbiter.cc there is a possible out-of-bounds read due to a use-after-free, which could enable remote code execution with no additional privileges and no user interaction. Connected documents identify this as an Android System component issue with high se...
Exploit for Out-of-bounds Write in Vmware Cloud_Foundation
CVE-2021-21974 Vulnerability Detector A Python-based security...
UBUNTU-CVE-2025-38723
In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Fix jump offset calculation in tailcall The extra pass of bpfintjitcompile skips JIT context initialization which essentially skips offset calculation leaving outoffset = -1, so the jmpoffset in emitbpftailcall is...
CVE-2025-38723
CVE-2025-38723 concerns the Linux kernel, specifically LoongArch BPF tailcall handling. The issue arises in the tailcall jump offset calculation when bpf_int_jit_compile() fails to initialize the JIT context, leaving out_offset = -1. Consequently, the computed jmp_offset = (out_offset - cur_offse...
CVE-2025-38718
CVE-2025-38718 affects the Linux kernel SCTP implementation. The issue arises when cloning head skbs with fraglists, causing use-after-likes from sharing frag skbs and leading to uninitialized-value bugs (KMSAN) in sctp_inq_pop and related code paths. The fix patches sctp_rcv() to linearize clone...
bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
...
bpf: copy_verifier_state() should copy 'loop_entry' field
...
bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
...
wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band
...
bpf: Disable migration in nf_hook_run_bpf().
...
vsock/vmci: Clear the vmci transport packet properly when initializing it
...
net/packet: fix a race in packet_set_ring() and packet_notifier()
...
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call.
...
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an *udp_packet_handler call.
...
bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
...
bpf: Prevent tail call between progs attached to different hooks
...