Lucene search
+L

676 matches found

OSV
OSV
added 2025/05/02 4:15 p.m.4 views

DEBIAN-CVE-2023-53039

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: ipc: Fix potential use-after-free in work function When a reset notify IPC message is received, the ISR schedules a work function and passes the ISHTP device to it via a global pointer ishtpdev. If ishprobe...

7.8CVSS5.6AI score0.00193EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/02 4:15 p.m.3 views

UBUNTU-CVE-2023-53039

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: ipc: Fix potential use-after-free in work function When a reset notify IPC message is received, the ISR schedules a work function and passes the ISHTP device to it via a global pointer ishtpdev. If ishprobe...

7.8CVSS6.1AI score0.00193EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2025/05/02 2:2 a.m.8 views

SUSE CVE-2025-37786

In the Linux kernel, the following vulnerability has been resolved: net: dsa: free routing table on probe failure If complete = true in dsatreesetup, it means that we are the last switch of the tree which is successfully probing, and we should be setting up all switches from our probe path. After...

5.5CVSS7.9AI score0.00182EPSS
SaveExploits0References16
OSV
OSV
added 2025/05/01 3:16 p.m.4 views

DEBIAN-CVE-2022-49887

In the Linux kernel, the following vulnerability has been resolved: media: meson: vdec: fix possible refcount leak in vdecprobe v4l2deviceunregister need to be called to put the refcount got by v4l2deviceregister when vdecprobe fails or vdecremove is called...

5.5CVSS5.5AI score0.00189EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/01 3:16 p.m.17 views

UBUNTU-CVE-2022-49887

In the Linux kernel, the following vulnerability has been resolved: media: meson: vdec: fix possible refcount leak in vdecprobe v4l2deviceunregister need to be called to put the refcount got by v4l2deviceregister when vdecprobe fails or vdecremove is called...

5.5CVSS6.1AI score0.00189EPSS
SaveExploits0References8
OSV
OSV
added 2025/05/01 2:15 p.m.5 views

DEBIAN-CVE-2025-37786

In the Linux kernel, the following vulnerability has been resolved: net: dsa: free routing table on probe failure If complete = true in dsatreesetup, it means that we are the last switch of the tree which is successfully probing, and we should be setting up all switches from our probe path. After...

7.8CVSS5.7AI score0.00182EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/01 2:15 p.m.7 views

UBUNTU-CVE-2025-37786

In the Linux kernel, the following vulnerability has been resolved: net: dsa: free routing table on probe failure If complete = true in dsatreesetup, it means that we are the last switch of the tree which is successfully probing, and we should be setting up all switches from our probe path. After...

7.8CVSS6.2AI score0.00182EPSS
SaveExploits0References36
CVE
CVE
added 2025/05/01 1:7 p.m.134 views

CVE-2025-37786

CVE-2025-37786 affects the Linux kernel's DSA (distributed switch architecture) routing-table handling. When a tree probe completes with complete = true and a later step fails, dst->rtable entries may remain referencing freed ports, causing a use-after-free. The advisory explains that on probe...

7.8CVSS6.5AI score0.00182EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
added 2025/05/01 1:7 p.m.7 views

CVE-2025-37786

In the Linux kernel, the following vulnerability has been resolved: net: dsa: free routing table on probe failure If complete = true in dsatreesetup, it means that we are the last switch of the tree which is successfully probing, and we should be setting up all switches from our probe path. After...

7.8CVSS5.7AI score0.00182EPSS
SaveExploits0
OSV
OSV
added 2025/05/01 1:7 p.m.20 views

CVE-2025-37786 net: dsa: free routing table on probe failure

In the Linux kernel, the following vulnerability has been resolved: net: dsa: free routing table on probe failure If complete = true in dsatreesetup, it means that we are the last switch of the tree which is successfully probing, and we should be setting up all switches from our probe path. After...

6.2AI score
SaveExploits0References9
OSV
OSV
added 2025/03/06 4:15 p.m.3 views

DEBIAN-CVE-2024-58072

In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: remove unused checkbuddypriv Commit 2461c7d60f9f "rtlwifi: Update header file" introduced a global list of private data structures. Later on, commit 26634c4b1868 "rtlwifi Modify existing bits to match vendor versio...

7.8CVSS6.1AI score0.00196EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/06 4:15 p.m.20 views

CVE-2024-58063

In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: fix memory leaks and invalid access at probe error path Deinitialize at reverse order when probe fails. When initswvars fails, rtldeinitcore should not be called, specially now that it destroys the rtlwq workqueue...

5.5CVSS0.002EPSS
SaveExploits0References11
OSV
OSV
added 2025/03/06 4:15 p.m.3 views

UBUNTU-CVE-2024-58072

In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: remove unused checkbuddypriv Commit 2461c7d60f9f "rtlwifi: Update header file" introduced a global list of private data structures. Later on, commit 26634c4b1868 "rtlwifi Modify existing bits to match vendor versio...

7.8CVSS6.5AI score0.00196EPSS
SaveExploits0References50
CVE
CVE
added 2025/03/06 3:54 p.m.62 views

CVE-2024-58059

In CVE-2024-58059, the vulnerability is in the Linux kernel’s media/uvcvideo code. The deadlock could occur when uvc_probe() fails and ends up calling uvc_status_unregister() before uvc_status_init(), risking synchronization issues in the status handling path. The confirmed fix guards against thi...

5.5CVSS7.2AI score0.00117EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2025/03/06 3:54 p.m.11 views

CVE-2024-58059 media: uvcvideo: Fix deadlock during uvc_probe

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix deadlock during uvcprobe If uvcprobe fails, it can end up calling uvcstatusunregister before uvcstatusinit is called. Fix this by checking if dev-status is NULL or not in uvcstatusunregister...

5.5CVSS6.5AI score
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2024-58072

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtlwifi: remove unused checkbuddypriv Commit 2461c7d60f9f rtlwifi: Update header file introduced a global list of private data structures. Later on, commi...

7.8CVSS6.8AI score0.00196EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2024-26607

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/bridge: sii902x: Fix probing race issue A null pointer dereference crash has been observed rarely on TI platforms using sii9022 bridge: 53.271356...

4.7CVSS6AI score0.00232EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2025/03/01 2:52 a.m.7 views

SUSE CVE-2025-21822

In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: Set driver data before its usage If vmclockptpregister fails during probing, vmclockremove is called to clean up the ptp clock and misc device. It uses devgetdrvdata to access the vmclock state. However the driver...

5.5CVSS6.5AI score0.00172EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2025/02/28 2:23 a.m.6 views

SUSE CVE-2024-57985

In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: Cleanup global 'scm' on probe failures If SCM driver fails the probe, it should not leave global 'scm' variable assigned, because external users of this driver will assume the probe finished successfully. For...

5.5CVSS7.6AI score0.00202EPSS
SaveExploits0References3
OSV
OSV
added 2025/02/27 8:16 p.m.15 views

UBUNTU-CVE-2025-21822

In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: Set driver data before its usage If vmclockptpregister fails during probing, vmclockremove is called to clean up the ptp clock and misc device. It uses devgetdrvdata to access the vmclock state. However the driver...

5.5CVSS5.7AI score0.00172EPSS
SaveExploits0References5
Rows per page
Query Builder