Lucene search
K

35 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fixed the race condition between the scrub and refill paths. The iozcrxputniovuref function uses a non-atomic check-then-decrement pattern atomicread followed by an atomicdec to manipulate userrefs. This pattern is...

4.7CVSS5.2AI score0.00088EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2026/05/07 2:17 a.m.4 views

SUSE CVE-2026-43121

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix userref race between scrub and refill paths The iozcrxputniovuref function uses a non-atomic check-then-decrement pattern atomicread followed by separate atomicdec to manipulate userrefs. This is serialized...

5.8AI score0.00088EPSS
Exploits0References3
NVD
NVD
added 2026/05/06 12:16 p.m.7 views

CVE-2026-43121

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix userref race between scrub and refill paths The iozcrxputniovuref function uses a non-atomic check-then-decrement pattern atomicread followed by separate atomicdec to manipulate userrefs. This is serialized...

4.7CVSS0.00088EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2026/05/06 11:27 a.m.4 views

CVE-2026-43121

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix userref race between scrub and refill paths The iozcrxputniovuref function uses a non-atomic check-then-decrement pattern atomicread followed by separate atomicdec to manipulate userrefs. This is serialized...

4.7CVSS5.7AI score0.00088EPSS
Exploits0
CVE
CVE
added 2026/05/06 11:27 a.m.26 views

CVE-2026-43121

CVE-2026-43121 involves the Linux kernel io_uring/zcrx race between scrub and refill paths. The non-atomic read-then-decrement of the user_refs can race with io_zcrx_scrub() using atomic_xchg, causing a double-free of a niov and an out-of-bounds write past the freelist array. The fix replaces the...

4.7CVSS5.8AI score0.00088EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2026/05/06 12:0 a.m.7 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a race condition between the userref functions in iouring/zcrx during the scrub and refill...

4.7CVSS5.8AI score0.00088EPSS
Exploits0References1
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.2 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: netpoll: Fixed a deadlock in memory allocation under spinlock. A deadlock occurred in the refillskbs function, where memory allocation while holding skbpool-lock could trigger a recursive lock acquisition attempt. This deadlock...

5.3AI score0.00155EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/04/21 12:0 a.m.3 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013027)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013027 advisory. In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: fix potential NULL dereference in sxgberx Currently, when skb is null, the driver...

5.7AI score0.00161EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/21 12:0 a.m.3 views

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011047)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011047 advisory. In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: fix potential NULL dereference in sxgberx Currently, when skb is null, the driver...

5.7AI score0.00161EPSS
Exploits0References4
OSV
OSV
added 2025/12/16 4:16 p.m.5 views

AZL-72676 CVE-2025-68302 affecting package kernel for versions less than 6.6.119.3-1

In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: fix potential NULL dereference in sxgberx Currently, when skb is null, the driver prints an error and then dereferences skb on the next line. To fix this, let's add a 'break' after the error message to switch to...

5.7AI score0.00161EPSS
Exploits0References1
NVD
NVD
added 2025/12/16 4:16 p.m.4 views

CVE-2025-68302

In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: fix potential NULL dereference in sxgberx Currently, when skb is null, the driver prints an error and then dereferences skb on the next line. To fix this, let's add a 'break' after the error message to switch to...

0.00161EPSS
Exploits0References7
UbuntuCve
UbuntuCve
added 2025/12/16 4:16 p.m.3 views

CVE-2025-68302

In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: fix potential NULL dereference in sxgberx Currently, when skb is null, the driver prints an error and then dereferences skb on the next line. To fix this, let's add a 'break' after the error message to switch to...

5.8AI score0.00161EPSS
Exploits0References35
CVE
CVE
added 2025/12/16 3:6 p.m.16 views

CVE-2025-68302

CVE-2025-68302 in the Linux kernel: a potential NULL pointer dereference in the net/sxgbe RX path (sxgbe_rx()) when skb is NULL. The fix adds a break after the error message to switch to sxgbe_rx_refill(), aligning with the pattern used by other drivers (e.g., xgmac_rx in calxeda) to prevent skb ...

6.3AI score0.00161EPSS
Exploits0References7
Cvelist
Cvelist
added 2025/12/16 3:6 p.m.25 views

CVE-2025-68302 net: sxgbe: fix potential NULL dereference in sxgbe_rx()

In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: fix potential NULL dereference in sxgberx Currently, when skb is null, the driver prints an error and then dereferences skb on the next line. To fix this, let's add a 'break' after the error message to switch to...

0.00161EPSS
Exploits0References7
NVD
NVD
added 2025/12/16 2:15 p.m.4 views

CVE-2025-68169

In the Linux kernel, the following vulnerability has been resolved: netpoll: Fix deadlock in memory allocation under spinlock Fix a AA deadlock in refillskbs where memory allocation while holding skbpool-lock can trigger a recursive lock acquisition attempt. The deadlock scenario occurs when the...

0.00155EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2025/12/16 2:15 p.m.1 views

CVE-2025-68169

In the Linux kernel, the following vulnerability has been resolved: netpoll: Fix deadlock in memory allocation under spinlock Fix a AA deadlock in refillskbs where memory allocation while holding skbpool-lock can trigger a recursive lock acquisition attempt. The deadlock scenario occurs when the...

5.7AI score0.00155EPSS
Exploits0References9
CVE
CVE
added 2025/12/16 1:42 p.m.11 views

CVE-2025-68169

CVE-2025-68169 affects the Linux kernel where a deadlock can occur in netpoll when memory allocation happens under a spinlock in refill_skbs(). Under memory pressure, refill_skbs() holds skb_pool->lock, then alloc_skb() may fail and trigger slab_out_of_memory(), leading to printk() which can i...

6AI score0.00155EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/12/16 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2025-68302

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: sxgbe: fix potential NULL dereference in sxgberx Currently, when skb is null, the driver prints an error and then dereferences skb on the next line. To fix...

5.9AI score0.00161EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.4 views

PT-2025-51582

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the netpoll subsystem that can lead to a deadlock scenario when the system experiences significant memory pressure. This occurs during memory...

5.6AI score0.00544EPSS
Exploits3References385
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.3 views

PT-2025-51706

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the sxgbe network driver. Specifically, a potential NULL dereference exists in the sxgbe rx function. When the skb variable is null, the driver...

5.5AI score0.00161EPSS
Exploits0
Rows per page
Query Builder