Lucene search
+L

66637 matches found

EUVD
EUVD
added 2026/09/11 7:42 p.m.6 views

EUVD-2026-76304

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix use-after-free of the LLC qentry in smcllcsrvaddlink smcllcsrvaddlink keeps addllc pointing into the queue entry: addllc = &qentry-msg.addlink; smcllc.c:1482 ... smcllcsaveaddlinkinfolinknew, addllc; smcllc.c:1494...

0.00198EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/11 7:42 p.m.21 views

CVE-2026-80973 ALSA: 6fire: bound the MIDI event length from the device

In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: bound the MIDI event length from the device usb6firecommreceiverhandler forwards a MIDI event using a length byte the device supplies, with no bound and no check that the transfer delivered that many bytes: if...

0.002EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/11 7:42 p.m.5 views

EUVD-2026-76296

In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: bound the MIDI event length from the device usb6firecommreceiverhandler forwards a MIDI event using a length byte the device supplies, with no bound and no check that the transfer delivered that many bytes: if...

0.002EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/11 7:42 p.m.9 views

CVE-2026-80973

CVE-2026-80973 affects the Linux kernel's ALSA snd_usb_6fire driver. In usb6fire_comm_receiver_handler(), a MIDI event length byte supplied by the USB device is used without bounding it or checking urb->actual_length. The receiver_buffer is a 64-byte allocation (2-byte header + 62 usable bytes...

0.002EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/09/11 7:42 p.m.4 views

CVE-2026-80973

In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: bound the MIDI event length from the device usb6firecommreceiverhandler forwards a MIDI event using a length byte the device supplies, with no bound and no check that the transfer delivered that many bytes: if...

0.002EPSS
SaveExploits0
OSV
OSV
added 2026/09/11 7:42 p.m.5 views

CVE-2026-80973 ALSA: 6fire: bound the MIDI event length from the device

In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: bound the MIDI event length from the device usb6firecommreceiverhandler forwards a MIDI event using a length byte the device supplies, with no bound and no check that the transfer delivered that many bytes: if...

6.3AI score
SaveExploits0References7
Cvelist
Cvelist
added 2026/09/11 7:42 p.m.23 views

CVE-2026-80971 ALSA: bcd2000: clear the URB pointers on disconnect

In the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: clear the URB pointers on disconnect bcd2000freeusbrelatedresources frees both URBs and leaves the pointers behind: usbkillurbbcd2k-midiouturb; usbkillurbbcd2k-midiinurb; usbfreeurbbcd2k-midiouturb;...

7.8CVSS0.002EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/09/11 7:42 p.m.4 views

CVE-2026-80971

In the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: clear the URB pointers on disconnect bcd2000freeusbrelatedresources frees both URBs and leaves the pointers behind: usbkillurbbcd2k-midiouturb; usbkillurbbcd2k-midiinurb; usbfreeurbbcd2k-midiouturb;...

7.8CVSS0.002EPSS
SaveExploits0
CVE
CVE
added 2026/09/11 7:42 p.m.10 views

CVE-2026-80971

CVE-2026-80971 is a use-after-free vulnerability in the ALSA bcd2000 driver (snd_bcd2000) of the Linux kernel. On USB device disconnect, bcd2000_free_usb_related_resources() frees both MIDI URBs without clearing the pointers. A still-open rawmidi substream can then access the freed URBs via the t...

7.8CVSS0.002EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/11 7:42 p.m.5 views

EUVD-2026-76294

In the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: clear the URB pointers on disconnect bcd2000freeusbrelatedresources frees both URBs and leaves the pointers behind: usbkillurbbcd2k-midiouturb; usbkillurbbcd2k-midiinurb; usbfreeurbbcd2k-midiouturb;...

0.002EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/11 7:42 p.m.4 views

CVE-2026-80971 ALSA: bcd2000: clear the URB pointers on disconnect

In the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: clear the URB pointers on disconnect bcd2000freeusbrelatedresources frees both URBs and leaves the pointers behind: usbkillurbbcd2k-midiouturb; usbkillurbbcd2k-midiinurb; usbfreeurbbcd2k-midiouturb;...

6.3AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/11 7:42 p.m.8 views

SAFE

SAFE SAFE performs controlled, repository-aware security assessment of Semgrep and Trivy findings in research artifacts. It supports two independent classification tasks: direct binary prediction SECURITYRELEVANT or NONSECURITY and the detailed multiclass contextual taxonomy three labels — see...

5.9AI score
SaveExploits0
Debian CVE
Debian CVE
added 2026/09/11 7:42 p.m.4 views

CVE-2026-80932

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in dependency order virtiovsockremove stops the virtqueues and then flushes each work item before freeing the enclosing virtiovsock. The current order does not account for dependencies between those item...

8.4CVSS0.00168EPSS
SaveExploits0
EUVD
EUVD
added 2026/09/11 7:42 p.m.5 views

EUVD-2026-76255

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in dependency order virtiovsockremove stops the virtqueues and then flushes each work item before freeing the enclosing virtiovsock. The current order does not account for dependencies between those item...

0.00168EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/11 7:42 p.m.24 views

CVE-2026-80932 vsock/virtio: flush works in dependency order

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in dependency order virtiovsockremove stops the virtqueues and then flushes each work item before freeing the enclosing virtiovsock. The current order does not account for dependencies between those item...

8.4CVSS0.00168EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/11 7:42 p.m.7 views

CVE-2026-80932

A use-after-free vulnerability in the Linux kernel's vsock/virtio component is triggered during virtio_vsock_remove(). The function flushes work items before freeing the virtio_vsock object, but the flush order ignores dependencies: send_pkt_work can queue rx_work after the remove path has alread...

8.4CVSS0.00168EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/11 7:42 p.m.6 views

CVE-2026-80932 vsock/virtio: flush works in dependency order

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in dependency order virtiovsockremove stops the virtqueues and then flushes each work item before freeing the enclosing virtiovsock. The current order does not account for dependencies between those item...

6.2AI score
SaveExploits0References7
CVE
CVE
added 2026/09/11 7:42 p.m.11 views

CVE-2026-80928

CVE-2026-80928 is a Use-After-Free (UAF) of struct cred in the Linux kernel's SMACK (Simplified Mandatory Access Control Kernel) security module, specifically in smack_file_send_sigiotask(). The root cause is that the function accessed the subjective credential pointer (tsk->cred) on a non-cur...

7.8CVSS0.00168EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/11 7:42 p.m.3 views

CVE-2026-80928 smack: fix cred UAF in smack_file_send_sigiotask()

In the Linux kernel, the following vulnerability has been resolved: smack: fix cred UAF in smackfilesendsigiotask When inspecting the credentials of another task, objective credentials -realcred, accessed with taskcred must always be used. Accessing -cred on a non-current task is forbidden unless...

6.2AI score
SaveExploits0References7
EUVD
EUVD
added 2026/09/11 7:42 p.m.6 views

EUVD-2026-76251

In the Linux kernel, the following vulnerability has been resolved: smack: fix cred UAF in smackfilesendsigiotask When inspecting the credentials of another task, objective credentials -realcred, accessed with taskcred must always be used. Accessing -cred on a non-current task is forbidden unless...

0.00168EPSS
SaveExploits0References4
Rows per page
Query Builder