Lucene search
+L

1424 matches found

BDU FSTEC
BDU FSTEC
added 2025/04/14 12:0 a.m.7 views

Vulnerability of the arm_smmu_alloc_shared_cd() function in the driver/iommu/arm/arm-smmu-v3/arm-smmu-v3-sva.c file – a Linux operating system IOMMU kernel driver that allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the armsmmuallocsharedcd function in the driver/iommu/arm/arm-smmu-v3/arm-smmu-v3-sva.c file is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

7.8CVSS6.2AI score0.00288EPSS
SaveExploits0References13Affected Software3
SUSE CVE
SUSE CVE
added 2025/04/09 1:33 a.m.7 views

SUSE CVE-2025-22015

In the Linux kernel, the following vulnerability has been resolved: mm/migrate: fix shmem xarray update during migration A shmem folio can be either in page cache or in swap cache, but not at the same time. Namely, once it is in swap cache, folio-mapping should be NULL, and the folio is no longer...

5.5CVSS7.6AI score0.00203EPSS
SaveExploits0References15
NVD
NVD
added 2025/04/07 11:15 a.m.10 views

CVE-2024-43067

Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory...

7.8CVSS0.00089EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/04/07 11:15 a.m.3 views

CVE-2024-43067

Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory...

7.8CVSS5.8AI score0.00089EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/04/07 12:0 a.m.10 views

PT-2025-15191 · Qualcomm · Snapdragon +57

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory. Recommendations: At the moment, there is no information abo...

7.8CVSS7.1AI score0.00089EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2022-26365

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Linux disk/nic frontends data leaks This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CV...

7.1CVSS6.2AI score0.00325EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2016-10012

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The shared memory manager associated with pre-authentication compression in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all...

7.8CVSS6.8AI score0.01281EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2019-5068

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the shared...

5.1CVSS5.3AI score0.00484EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
added 2025/02/27 3:14 a.m.5 views

SUSE CVE-2021-47657

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Ensure that objs is not NULL in virtiogpuarrayputfree If virtiogpuobjectshmeminit fails e.g. due to fault injection, as it happened in the bug report by syzbot, virtiogpuarrayputfree could be called with objs equal to...

5.5CVSS6.5AI score0.00273EPSS
SaveExploits0References7
OSV
OSV
added 2025/02/26 7:0 a.m.5 views

DEBIAN-CVE-2022-49080

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix mpolnew leak in sharedpolicyreplace If mpolnew is allocated but not used in restart loop, mpolnew will be freed via mpolput before returning to the caller. But refcnt is not initialized yet, so mpolput could not...

5.5CVSS5.5AI score0.00306EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/26 1:54 a.m.17 views

CVE-2022-49080 mm/mempolicy: fix mpol_new leak in shared_policy_replace

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix mpolnew leak in sharedpolicyreplace If mpolnew is allocated but not used in restart loop, mpolnew will be freed via mpolput before returning to the caller. But refcnt is not initialized yet, so mpolput could not...

0.00306EPSS
SaveExploits0References9
Debian CVE
Debian CVE
added 2025/02/26 1:54 a.m.28 views

CVE-2022-49080

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix mpolnew leak in sharedpolicyreplace If mpolnew is allocated but not used in restart loop, mpolnew will be freed via mpolput before returning to the caller. But refcnt is not initialized yet, so mpolput could not...

5.5CVSS5.5AI score0.00306EPSS
SaveExploits0
OSV
OSV
added 2025/02/26 1:54 a.m.14 views

CVE-2022-49080 mm/mempolicy: fix mpol_new leak in shared_policy_replace

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix mpolnew leak in sharedpolicyreplace If mpolnew is allocated but not used in restart loop, mpolnew will be freed via mpolput before returning to the caller. But refcnt is not initialized yet, so mpolput could not...

5.9AI score
SaveExploits0References12
Vulnrichment
Vulnrichment
added 2025/02/26 1:54 a.m.9 views

CVE-2021-47657 drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free()

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Ensure that objs is not NULL in virtiogpuarrayputfree If virtiogpuobjectshmeminit fails e.g. due to fault injection, as it happened in the bug report by syzbot, virtiogpuarrayputfree could be called with objs equal to...

6.1AI score0.00273EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/02/22 2:58 p.m.29 views

CVE-2024-12577 GPU DDK - rgxfw_pcset_ungrab OOB write via psFWMemContext->uiPageCatBaseRegSet

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory...

0.00169EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/22 2:44 p.m.101 views

CVE-2024-46975

CVE-2024-46975 affects the Imagination Technologies PowerVR-GPU driver. The issue arises from kernel code running inside a guest VM that may access memory shared with the GPU firmware, allowing writes to another guest’s virtualized GPU memory. This is described in multiple sources (including Red ...

7.9CVSS6.5AI score0.00151EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/22 12:0 a.m.8 views

Imagination GPU Driver 安全漏洞

Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in the Imagination GPU Driver that originates from kernel software installed and running in the Guest VM that may exploit memory shared with the GPU firmware to write data outside of the Guest's...

3.3CVSS6.5AI score0.00155EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/02/22 12:0 a.m.9 views

Imagination GPU Driver 安全漏洞

Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in the Imagination GPU Driver, which originates from kernel software installed and running in a Guest VM that may be able to leverage memory shared with the GPU firmware to write data to another Guest's...

7.9CVSS6.5AI score0.00151EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2025/02/14 6:7 a.m.7 views

SUSE CVE-2023-49582

Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data. This issue does not affect non-Unix platforms, or builds with APRUSESHMEMSHMGET=1 apr.h Users are...

5.5CVSS6.1AI score0.00332EPSS
SaveExploits0References6
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.1 views

Astra Linux – Vulnerability in APR

The lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users to read access to named shared memory segments, potentially exposing sensitive application data. This issue does not affect non-Unix platforms, or builds with APRUSESHMEMSHMGET=1 apr.h. Users...

5.5CVSS6.6AI score0.00332EPSS
SaveExploits0References3
Rows per page
Query Builder