Lucene search
K

10 matches found

RedHat Linux
RedHat Linux
added 2026/05/26 6:6 a.m.6 views

kernel: can: raw: fix ro->uniq use-after-free in raw_rcv()

A flaw was found in the Linux kernel's Controller Area Network CAN raw socket implementation. A use-after-free vulnerability can occur due to a timing window during the unregistration of CAN receive filters, allowing a freed memory region to be accessed. This could lead to system instability or a...

7.8CVSS5.8AI score0.00016EPSS
Exploits0References5
OSV
OSV
added 2026/05/25 8:53 p.m.4 views

CLSA-2026-1779200965 Fix CVE(s): CVE-2026-31532, CVE-2026-46300, CVE-2026-46333

CVE-2026-46333 - ptrace: require CAPSYSPTRACE when task has no mm CVE-2026-46300 - net: skbuff: propagate shared-frag marker through copy/coalesce/gro/shift paths CVE-2026-31532 - can: raw: fix ro-uniq use-after-free in rawrcv CVE-2026-31532...

7.8CVSS5.8AI score0.00254EPSS
Exploits12References1
RedHat Linux
RedHat Linux
added 2026/05/20 3:47 p.m.11 views

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

7.8CVSS6.1AI score0.00254EPSS
Exploits12References4
RedHat Linux
RedHat Linux
added 2026/05/20 2:0 p.m.13 views

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

9.8CVSS6.7AI score0.38453EPSS
Exploits39References18
OSV
OSV
added 2026/05/16 11:2 a.m.6 views

CLSA-2026-1778896895 kernel: Fix of 2 CVEs

ptrace: require CAPSYSPTRACE when task has no mm - net: udpoffload: propagate SKBFLSHAREDFRAG in skbgroreceivelist CVE-2026-46300 - can: raw: fix ro-uniq use-after-free in rawrcv CVE-2026-31532...

7.8CVSS6AI score0.00254EPSS
Exploits8References1
RedHat Linux
RedHat Linux
added 2026/05/06 9:19 p.m.4 views

kernel: can: raw: fix ro->uniq use-after-free in raw_rcv()

A flaw was found in the Linux kernel's Controller Area Network CAN raw socket implementation. A use-after-free vulnerability can occur due to a timing window during the unregistration of CAN receive filters, allowing a freed memory region to be accessed. This could lead to system instability or a...

7.8CVSS5.8AI score0.00016EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2026/04/24 1:29 a.m.3 views

SUSE CVE-2026-31532

In the Linux kernel, the following vulnerability has been resolved: can: raw: fix ro-uniq use-after-free in rawrcv rawrelease unregisters raw CAN receive filters via canrxunregister, but receiver deletion is deferred with callrcu. This leaves a window where rawrcv may still be running in an RCU...

6.4CVSS5.7AI score0.00016EPSS
Exploits0References5
NVD
NVD
added 2026/04/23 12:17 p.m.1 views

CVE-2026-31532

In the Linux kernel, the following vulnerability has been resolved: can: raw: fix ro-uniq use-after-free in rawrcv rawrelease unregisters raw CAN receive filters via canrxunregister, but receiver deletion is deferred with callrcu. This leaves a window where rawrcv may still be running in an RCU...

7.8CVSS0.00016EPSS
Exploits0References9
CNNVD
CNNVD
added 2026/04/23 12:0 a.m.5 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the reuse of a freed resource after the release of the ro-uniq operation in rawrcv. This could le...

7.8CVSS5.8AI score0.00016EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2024/08/06 2:0 a.m.5 views

SUSE CVE-2024-42076

In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: Initialize unused data in j1939sendone syzbot reported kernel-infoleak in rawrecvmsg 1. j1939sendone creates full frame including unused data, but it doesn't initialize it. This causes the kernel-infoleak issue...

5.5CVSS6.3AI score0.00021EPSS
Exploits0References13
Rows per page
Query Builder