Lucene search
+L

347 matches found

SUSE CVE
SUSE CVE
added 2025/05/09 4:54 a.m.5 views

SUSE CVE-2022-49878

In the Linux kernel, the following vulnerability has been resolved: bpf, verifier: Fix memory leak in array reallocation for stack state If an error NULL is returned by krealloc, callers of reallocarray were setting their allocation pointers to NULL, but on error krealloc does not touch the...

5.5CVSS6.4AI score0.00174EPSS
SaveExploits0References3
OSV
OSV
added 2025/05/01 3:16 p.m.13 views

UBUNTU-CVE-2022-49878

In the Linux kernel, the following vulnerability has been resolved: bpf, verifier: Fix memory leak in array reallocation for stack state If an error NULL is returned by krealloc, callers of reallocarray were setting their allocation pointers to NULL, but on error krealloc does not touch the...

5.5CVSS6.3AI score0.00174EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2025/05/01 2:10 p.m.1 views

CVE-2022-49878 bpf, verifier: Fix memory leak in array reallocation for stack state

In the Linux kernel, the following vulnerability has been resolved: bpf, verifier: Fix memory leak in array reallocation for stack state If an error NULL is returned by krealloc, callers of reallocarray were setting their allocation pointers to NULL, but on error krealloc does not touch the...

5.9AI score0.00174EPSS
SaveExploits0References3
CVE
CVE
added 2025/05/01 2:10 p.m.96 views

CVE-2022-49878

Summary: CVE-2022-49878 is a Linux kernel vulnerability in the bpf verifier’s array reallocation. When realloc_array() errors (krealloc() returns NULL), callers previously set their pointers to NULL, but krealloc() leaves the original allocation untouched, causing a memory leak. The description i...

5.5CVSS6.2AI score0.00174EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2025/05/01 2:10 p.m.10 views

CVE-2022-49878

In the Linux kernel, the following vulnerability has been resolved: bpf, verifier: Fix memory leak in array reallocation for stack state If an error NULL is returned by krealloc, callers of reallocarray were setting their allocation pointers to NULL, but on error krealloc does not touch the...

5.5CVSS5.5AI score0.00174EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/04/14 12:0 a.m.7 views

The vulnerability of the ufshcd_set_dma_mask() function in the drivers/ufs/core/ufshcd.c module affects UFS-host controllers in Linux operating systems. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ufshcdsetdmamask function in the drivers/ufs/core/ufshcd.c module affects UFS-host controllers. In Linux operating systems, this vulnerability is related to the reallocation of previously freed memory. Exploiting this vulnerability can allow an attacker to compromise the...

7.8CVSS6.8AI score0.0022EPSS
SaveExploits0References10Affected Software4
CNNVD
CNNVD
added 2025/04/07 12:0 a.m.10 views

Qualcomm Chipsets 信息泄露漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An information disclosure vulnerability exists in Qualcomm Chipsets, which stems from a possible information disclosure during memory reallocation...

5.5CVSS6.2AI score0.00105EPSS
SaveExploits0References2
CNVD
CNVD
added 2025/04/03 12:0 a.m.5 views

HDF5 Double Release Vulnerability

HDF5 is a library of HDF open source . HDF5 has a double release vulnerability, which originates from the double release of the parameter mem of the function H5MMrealloc in the file src/H5MM.c. There are no detailed vulnerability details provided...

5.5CVSS7AI score0.00242EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2025/03/23 12:0 a.m.10 views

The vulnerability of the Cisco AnyConnect VPN server’s microprogramming software in Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateways allows a intruder to trigger a service failure.

The vulnerability of the Cisco AnyConnect VPN server in the microprogramming software for Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateways is related to a reallocation of memory. Exploiting this vulnerability could allow an attacker to cause service interruptions by sending specially...

8.6CVSS5.4AI score0.00505EPSS
SaveExploits0References2Affected Software2
SUSE CVE
SUSE CVE
added 2025/03/08 2:50 a.m.4 views

SUSE CVE-2025-21836

In the Linux kernel, the following vulnerability has been resolved: iouring/kbuf: reallocate buf lists on upgrade IORINGREGISTERPBUFRING can reuse an old struct iobufferlist if it was created for legacy selected buffer and has been emptied. It violates the requirement that most of the field shoul...

5.5CVSS7.9AI score0.00237EPSS
SaveExploits0References15
OSV
OSV
added 2025/03/07 9:15 a.m.4 views

DEBIAN-CVE-2025-21836

In the Linux kernel, the following vulnerability has been resolved: iouring/kbuf: reallocate buf lists on upgrade IORINGREGISTERPBUFRING can reuse an old struct iobufferlist if it was created for legacy selected buffer and has been emptied. It violates the requirement that most of the field shoul...

5.5CVSS5.9AI score0.00237EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/07 9:15 a.m.11 views

CVE-2025-21836

In the Linux kernel, the following vulnerability has been resolved: iouring/kbuf: reallocate buf lists on upgrade IORINGREGISTERPBUFRING can reuse an old struct iobufferlist if it was created for legacy selected buffer and has been emptied. It violates the requirement that most of the field shoul...

7.8CVSS0.00237EPSS
SaveExploits0References5
OSV
OSV
added 2025/03/07 9:15 a.m.14 views

UBUNTU-CVE-2025-21836

In the Linux kernel, the following vulnerability has been resolved: iouring/kbuf: reallocate buf lists on upgrade IORINGREGISTERPBUFRING can reuse an old struct iobufferlist if it was created for legacy selected buffer and has been emptied. It violates the requirement that most of the field shoul...

7.8CVSS6.7AI score0.00237EPSS
SaveExploits0References16
Cvelist
Cvelist
added 2025/03/07 9:9 a.m.23 views

CVE-2025-21836 io_uring/kbuf: reallocate buf lists on upgrade

In the Linux kernel, the following vulnerability has been resolved: iouring/kbuf: reallocate buf lists on upgrade IORINGREGISTERPBUFRING can reuse an old struct iobufferlist if it was created for legacy selected buffer and has been emptied. It violates the requirement that most of the field shoul...

7.8CVSS0.00237EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2024-46849

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ASoC: meson: axg-card: fix 'use-after- free' Buffer 'card-dailink' is reallocated in...

7.8CVSS6.3AI score0.0025EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/02/27 12:0 a.m.3 views

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A resource management error vulnerability exists in Linux kernel that stems from vsock not properly retaining bindings during transfer reallocation, leading to reuse after...

7.8CVSS6.9AI score0.00873EPSS
SaveExploits3References6
Ubuntu
Ubuntu
added 2025/02/26 10:33 p.m.18 views

USN-7307-1: xmltok library vulnerability

Tim Boddy discovered that Expat, contained within the xmltok library, did not properly handle memory reallocation when processing XML files. If a user or application linked against Expat were tricked into opening a crafted XML file, an attacker could cause a denial of service by consuming excessi...

5CVSS6.8AI score0.03565EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/02/18 12:0 a.m.10 views

The vulnerability of the drm/shmem-helpper components in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the drm/shmem-helpper component in the Linux operating system’s kernel is related to a memory reallocation error in the drmgemshmemmmap function. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS6.4AI score0.00248EPSS
SaveExploits0References18Affected Software4
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.6 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ASoC: meson: axg-card: fixed “use-after-free” issue The buffer “card-dailink” is reallocated in “mesoncardreallocatelinks”. Therefore, the initialization of the “pad” pointer should be moved after this function, when the memor...

7.8CVSS6.8AI score0.0025EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/01/06 12:0 a.m.14 views

The vulnerability of the sec_pkcs7_decoder_start_decrypt() function in Mozilla Firefox and Thunderbird email client allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the secpkcs7decoderstartdecrypt function in Mozilla Firefox and Thunderbird’s email client is related to the reallocation of memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

10CVSS6.4AI score0.00919EPSS
SaveExploits0References15Affected Software4
Rows per page
Query Builder