Lucene search
K

536 matches found

Github Security Blog
Github Security Blog
added 2025/07/16 2:18 p.m.4 views

Slice Ring Buffer and Slice Deque contains four unique double-free vulnerabilities triggered through safe APIs

The crate slice-ring-buffer was developed as a fork of slice-deque to continue maintenance and provide security patches, since the latter has been officially unmaintained RUSTSEC-2020-0158. While slice-ring-buffer has addressed some previously reported memory safety issues inherited from its fork...

7.9AI score
Exploits0References3Affected Software2
vulnersOsv
vulnersOsv
added 2025/07/16 2:18 p.m.1 views

allyaudio (>=0.1.0 <=0.4.0), ambisonic (>=0.4.0 <=0.4.1) +130 more potentially affected by unknown CVE via slice-ring-buffer (=0.3.4)

slice-ring-buffer CARGO version =0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on slice-ring-buffer and may be impacted: - allyaudio =0.1.0, =0.4.0, =0.0.9, =0.0.3, =0.0.1, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.0.0, =0.1.0 - bevykiraaudio =0.4.0 and...

5.8AI score
Exploits0
OSV
OSV
added 2025/07/16 2:18 p.m.0 views

GHSA-7MCQ-F592-PF7V Slice Ring Buffer and Slice Deque contains four unique double-free vulnerabilities triggered through safe APIs

The crate slice-ring-buffer was developed as a fork of slice-deque to continue maintenance and provide security patches, since the latter has been officially unmaintained RUSTSEC-2020-0158. While slice-ring-buffer has addressed some previously reported memory safety issues inherited from its fork...

9.3CVSS5.8AI score
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/07/16 12:0 a.m.1 views

PT-2025-30981 · Crates.Io · Slice-Deque +1

The crate slice-ring-buffer was developed as a fork of slice-deque to continue maintenance and provide security patches, since the latter has been officially unmaintained RUSTSEC-2020-0158. While slice-ring-buffer has addressed some previously reported memory safety issues inherited from its fork...

9.3CVSS8AI score
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/07/10 11:23 p.m.0 views

SUSE CVE-2025-38267

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not trigger WARNON due to a commitoverrun When reading a memory mapped buffer the reader page is just swapped out with the last page written in the write buffer. If the reader page is the same as the commit buffer...

2.5CVSS6.4AI score0.00052EPSS
Exploits0References9
NVD
NVD
added 2025/07/10 8:15 a.m.3 views

CVE-2025-38267

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not trigger WARNON due to a commitoverrun When reading a memory mapped buffer the reader page is just swapped out with the last page written in the write buffer. If the reader page is the same as the commit buffer...

7.8CVSS0.00052EPSS
Exploits0References3
OSV
OSV
added 2025/07/10 8:15 a.m.1 views

DEBIAN-CVE-2025-38267

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not trigger WARNON due to a commitoverrun When reading a memory mapped buffer the reader page is just swapped out with the last page written in the write buffer. If the reader page is the same as the commit buffer...

7.8CVSS6.3AI score0.00052EPSS
Exploits0References1
OSV
OSV
added 2025/07/10 8:15 a.m.1 views

UBUNTU-CVE-2025-38267

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not trigger WARNON due to a commitoverrun When reading a memory mapped buffer the reader page is just swapped out with the last page written in the write buffer. If the reader page is the same as the commit buffer...

7.8CVSS6.6AI score0.00052EPSS
Exploits0References13
Cvelist
Cvelist
added 2025/07/10 7:41 a.m.5 views

CVE-2025-38267 ring-buffer: Do not trigger WARN_ON() due to a commit_overrun

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not trigger WARNON due to a commitoverrun When reading a memory mapped buffer the reader page is just swapped out with the last page written in the write buffer. If the reader page is the same as the commit buffer...

0.00052EPSS
Exploits0References3
CVE
CVE
added 2025/07/10 7:41 a.m.45 views

CVE-2025-38267

CVE-2025-38267 affects the Linux kernel ring-buffer logic. The issue arises during memory-mapped buffer reads when a commit_overrun allows the reader page to swap to the commit buffer, potentially triggering a WARN_ON_ONCE due to missed events. The vulnerability is tied to the ring_buffer_map_get...

7.8CVSS6.3AI score0.00052EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2025/07/10 7:41 a.m.4 views

CVE-2025-38267 ring-buffer: Do not trigger WARN_ON() due to a commit_overrun

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not trigger WARNON due to a commitoverrun When reading a memory mapped buffer the reader page is just swapped out with the last page written in the write buffer. If the reader page is the same as the commit buffer...

7.8CVSS6AI score0.00052EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/07/10 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a commit overflow issue in the ring-buffer, which could result in the loss of events...

7.8CVSS8.2AI score0.00052EPSS
Exploits0References5
Amazon
Amazon
added 2025/07/10 12:0 a.m.8 views

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix out-of-range access of vnicinfo array CVE-2025-22112 In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: init wiphywork before allocating rfkill fails CVE-2025-22119 ...

7.8CVSS6.5AI score0.0015EPSS
Exploits13
SUSE CVE
SUSE CVE
added 2025/07/03 11:23 p.m.2 views

SUSE CVE-2025-38101

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix buffer locking in ringbuffersubbuforderset Enlarge the critical section in ringbuffersubbuforderset to ensure that error handling takes place with per-buffer mutex held, thus preventing list corruption and other...

5.8CVSS6.9AI score0.00052EPSS
Exploits0References9
OSV
OSV
added 2025/07/03 9:15 a.m.1 views

DEBIAN-CVE-2025-38101

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix buffer locking in ringbuffersubbuforderset Enlarge the critical section in ringbuffersubbuforderset to ensure that error handling takes place with per-buffer mutex held, thus preventing list corruption and other...

7.8CVSS6.6AI score0.00052EPSS
Exploits0References1
OSV
OSV
added 2025/07/03 9:15 a.m.2 views

UBUNTU-CVE-2025-38101

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix buffer locking in ringbuffersubbuforderset Enlarge the critical section in ringbuffersubbuforderset to ensure that error handling takes place with per-buffer mutex held, thus preventing list corruption and other...

7.8CVSS6.7AI score0.00052EPSS
Exploits0References29
Debian CVE
Debian CVE
added 2025/07/03 8:35 a.m.4 views

CVE-2025-38101

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix buffer locking in ringbuffersubbuforderset Enlarge the critical section in ringbuffersubbuforderset to ensure that error handling takes place with per-buffer mutex held, thus preventing list corruption and other...

7.8CVSS6.6AI score0.00052EPSS
Exploits0
CNNVD
CNNVD
added 2025/07/03 12:0 a.m.2 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from improper buffer locking by ring-buffer in ringbuffersubbuforderset...

7.8CVSS8.2AI score0.00052EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2025/07/03 12:0 a.m.1 views

The vulnerability in the kernel/bpf/ringbuf.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the kernel/bpf/ringbuf.c component of the Linux operating system is related to overflow in the stack buffer. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00036EPSS
Exploits0References7Affected Software3
SUSE CVE
SUSE CVE
added 2025/06/19 3:45 a.m.2 views

SUSE CVE-2022-49961

In the Linux kernel, the following vulnerability has been resolved: bpf: Do markchainprecision for ARGCONSTALLOCSIZEORZERO Precision markers need to be propagated whenever we have an ARGCONST style argument, as the verifier cannot consider imprecise scalars to be equivalent for the purposes of...

6.7CVSS6AI score0.00071EPSS
Exploits0References3
Rows per page
Query Builder