Lucene search
+L

1040 matches found

CNNVD
CNNVD
•added 2025/04/18 12:00 a.m.•23 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly handling low SPI frequencies, which could lead to out-of-bounds access to arrays...

7.8CVSS6.9AI score0.00233EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•17 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a null pointer dereference when the PCI bus number is depleted...

5.5CVSS6.5AI score0.00253EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2025/04/14 12:00 a.m.•10 views

The vulnerability of Linux operating system kernel components that support vfio/pci allows a hacker to trigger a service failure.

The vulnerability of Linux operating system kernel components that handle vfio/pci interfaces is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS6.9AI score0.00257EPSS
SaveExploits0References19Affected Software8
Microsoft CVE
Microsoft CVE
•added 2025/04/09 7:00 a.m.•9 views

spi: sn-f-ospi: Fix division by zero

...

5.5CVSS7.4AI score0.00221EPSS
SaveExploits0
OSV
OSV
•added 2025/04/01 4:15 p.m.•25 views

AZL-59972 CVE-2025-21951 affecting package kernel for versions less than 5.15.180.1-1

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: pcigeneric: Use pcitryresetfunction to avoid deadlock There are multiple places from where the recovery work gets scheduled asynchronously. Also, there are multiple places where the caller waits synchronously for...

5.5CVSS6.3AI score0.00154EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/03/27 12:00 a.m.•17 views

The vulnerability of the Linux operating system’s kernel PCI component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel PCI component is related to the assignment of the NULL pointer in the kspciequirk function. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00219EPSS
SaveExploits0References16Affected Software8
Microsoft CVE
Microsoft CVE
•added 2025/03/13 7:00 a.m.•10 views

PCI/MSI: Handle lack of irqdomain gracefully

...

5.5CVSS7.4AI score0.00206EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/03/06 3:03 a.m.•7 views

SUSE CVE-2025-1921

Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtain information about a peripheral via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.3AI score0.0033EPSS
SaveExploits0References5
OSV
OSV
•added 2025/03/05 4:15 a.m.•2 views

DEBIAN-CVE-2025-1921

Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtain information about a peripheral via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS7AI score0.0033EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2025/03/05 3:48 a.m.•20 views

CVE-2025-1921

Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtain information about a peripheral via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS7AI score0.0033EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/05 12:00 a.m.•4 views

CVE-2025-1921: Exposure of Sensitive Information Through Metadata

Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtain information about a peripheral via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.6AI score0.0033EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/04 12:00 a.m.•7 views

PT-2025-9741 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 134.0.6998.35 Description: The issue is related to an inappropriate implementation in the Media Stream of Google Chrome, allowing a remote attacker to obtain information about a peripheral via a crafted HTML...

8.8CVSS5.3AI score0.00418EPSS
SaveExploits0References80
SUSE CVE
SUSE CVE
•added 2025/03/01 2:52 a.m.•11 views

SUSE CVE-2025-21804

In the Linux kernel, the following vulnerability has been resolved: PCI: rcar-ep: Fix incorrect variable used when calling devmrequestmemregion The rcarpcieparseoutboundranges uses the devmrequestmemregion macro to request a needed resource. A string variable that lives on the stack is then used ...

5.5CVSS7.5AI score0.00205EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2025/02/27 3:11 a.m.•10 views

SUSE CVE-2022-49157

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix premature hw access after PCI error After a recoverable PCI error has been detected and recovered, qla driver needs to check to see if the error condition still persist and/or wait for the OS to give the resume...

3.3CVSS7.6AI score0.00268EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
•added 2025/02/27 3:11 a.m.•12 views

SUSE CVE-2022-49173

In the Linux kernel, the following vulnerability has been resolved: spi: fsi: Implement a timeout for polling status The data transfer routines must poll the status register to determine when more data can be shifted in or out. If the hardware gets into a bad state, these polling loops may never...

5.5CVSS6.5AI score0.00258EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/02/27 3:06 a.m.•24 views

SUSE CVE-2022-49434

In the Linux kernel, the following vulnerability has been resolved: PCI: Avoid pcidevlock AB/BA deadlock with sriovnumvfsstore The sysfs sriovnumvfsstore path acquires the device lock before the config space access lock: sriovnumvfsstore devicelock A 1 acquire device lock sriovconfigure...

5.5CVSS6.4AI score0.00215EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2025/02/27 3:06 a.m.•8 views

SUSE CVE-2022-49475

In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-qspi: check return value after calling platformgetresourcebyname It will cause null-ptr-deref if platformgetresourcebyname returns NULL, we need check the return value...

5.5CVSS7.8AI score0.00283EPSS
SaveExploits0References9
OSV
OSV
•added 2025/02/26 7:01 a.m.•7 views

DEBIAN-CVE-2022-49434

In the Linux kernel, the following vulnerability has been resolved: PCI: Avoid pcidevlock AB/BA deadlock with sriovnumvfsstore The sysfs sriovnumvfsstore path acquires the device lock before the config space access lock: sriovnumvfsstore devicelock A 1 acquire device lock sriovconfigure...

5.5CVSS5.3AI score0.00215EPSS
SaveExploits0References1
OSV
OSV
•added 2025/02/26 7:00 a.m.•9 views

DEBIAN-CVE-2022-49157

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix premature hw access after PCI error After a recoverable PCI error has been detected and recovered, qla driver needs to check to see if the error condition still persist and/or wait for the OS to give the resume...

5.5CVSS5.6AI score0.00268EPSS
SaveExploits0References1
OSV
OSV
•added 2025/02/26 7:00 a.m.•15 views

DEBIAN-CVE-2022-49115

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix misused goto label Fix a misused goto label jump since that can result in a memory leak...

5.5CVSS5.5AI score0.0028EPSS
SaveExploits0References1
Rows per page
Query Builder