Lucene search
+L

234 matches found

Positive Technologies
Positive Technologies
•added 2026/09/20 12:00 a.m.•4 views

PT-2026-95909

Name of the Vulnerable Software and Affected Versions Kamailio versions prior to 6.0.8 Description A heap-based buffer overflow can be triggered remotely within the CDP Diameter Receiver component. The issue resides in the shm malloc function located in the src/modules/cdp/receiver.c file. A...

8.3CVSS6.3AI score0.0069EPSS
SaveExploits0References21
AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•15 views

Astra Linux – Vulnerability in multipath-tools

Multipath-tools versions 0.7.7 through 0.9.x, prior to 0.9.2, allowed local users to obtain root access. This vulnerability was exploited in conjunction with CVE-2022-41974. Local users who had access to /dev/shm could modify symlinks within multipathd due to incorrect symlink handling. This coul...

7.8CVSS7.2AI score0.00698EPSS
SaveExploits5References2
AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•23 views

Astra Linux – Vulnerability in Linux, Linux 5.10

A use-after-free exists in the drivers/tee/teeshm.c file within the TEE subsystem of the Linux kernel, as of version 5.15.11. This issue arises due to a race condition during the teeshmgetfromid function, when attempting to free a shared memory object...

7CVSS6.8AI score0.00708EPSS
SaveExploits2References2
EUVD
EUVD
•added 2026/07/21 9:32 p.m.•18 views

EUVD-2026-46355

Data::HashMap::Shared versions before 0.14 for Perl allow an out-of-bounds read via an unvalidated arena offset and length in shmstrcopy. The attach-time validator shmvalidateheader checks the header scalars and region layout against the file size, but does not validate the array contents it then...

5.3AI score0.00539EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/21 7:03 p.m.•37 views

CVE-2026-59142

The Data::HashMap::Shared module for Perl (versions before 0.14 ) is vulnerable to an out-of-bounds read within the shm_str_copy function. The root cause is that the shm_validate_header validator fails to verify array contents, leading shm_str_copy to perform an unbounded memcpy using raw, unvali...

9.1CVSS5.8AI score0.00539EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•21 views

PT-2026-62045

Data::HashMap::Shared versions before 0.14 for Perl allow an out-of-bounds read via an unvalidated arena offset and length in shm str copy. The attach-time validator shm validate header checks the header scalars and region layout against the file size, but does not validate the array contents it...

5.3AI score0.00539EPSS
SaveExploits0References3
OSV
OSV
•added 2026/07/06 8:16 p.m.•17 views

UBUNTU-CVE-2026-42546

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.3.0 and prior to version 4.11.0, a resource leak exists in OP-TEE’s shared memory cleanup logic because the functio...

3.8CVSS6.1AI score0.00151EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/07/06 7:31 p.m.•13 views

CVE-2026-42546

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.3.0 and prior to version 4.11.0, a resource leak exists in OP-TEE’s shared memory cleanup logic because the functio...

3.8CVSS6AI score0.00151EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/06/28 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-53210

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tee: shm: fix shm leak in registershmhelper registershmhelper allocates shm before calling ioviternpages. If ioviternpages returns 0, the function jumps to...

5.5CVSS5.5AI score0.00122EPSS
SaveExploits0References3
OSV
OSV
•added 2026/06/27 12:01 a.m.•13 views

RLSA-2023:2786 Moderate: wayland security, bug fix, and enhancement update

Wayland is a protocol for a compositor to talk to its clients, as well as a C library implementation of that protocol. The compositor can be a standalone display server running on Linux kernel modesetting and evdev input devices, an X application, or a wayland client itself. The clients can be...

6.6CVSS6.8AI score0.00317EPSS
SaveExploits1References2
NVD
NVD
•added 2026/06/25 9:16 a.m.•24 views

CVE-2026-53210

In the Linux kernel, the following vulnerability has been resolved: tee: shm: fix shm leak in registershmhelper registershmhelper allocates shm before calling ioviternpages. If ioviternpages returns 0, the function jumps to errctxput and leaks shm. This can be triggered by TEEIOCSHMREGISTER with...

5.5CVSS0.00122EPSS
SaveExploits0References4
OSV
OSV
•added 2026/06/25 9:16 a.m.•19 views

UBUNTU-CVE-2026-53210

In the Linux kernel, the following vulnerability has been resolved: tee: shm: fix shm leak in registershmhelper registershmhelper allocates shm before calling ioviternpages. If ioviternpages returns 0, the function jumps to errctxput and leaks shm. This can be triggered by TEEIOCSHMREGISTER with...

6.8CVSS5.5AI score0.00122EPSS
SaveExploits0References18
attackerkb
attackerkb
•added 2026/06/25 8:39 a.m.•15 views

CVE-2026-53210

In the Linux kernel, the following vulnerability has been resolved: tee: shm: fix shm leak in registershmhelper registershmhelper allocates shm before calling ioviternpages. If ioviternpages returns 0, the function jumps to errctxput and leaks shm. This can be triggered by TEEIOCSHMREGISTER with...

5.5AI score0.00122EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
•added 2026/06/25 8:39 a.m.•20 views

EUVD-2026-39301

In the Linux kernel, the following vulnerability has been resolved: tee: shm: fix shm leak in registershmhelper registershmhelper allocates shm before calling ioviternpages. If ioviternpages returns 0, the function jumps to errctxput and leaks shm. This can be triggered by TEEIOCSHMREGISTER with...

5.5AI score0.00122EPSS
SaveExploits0References4
OSV
OSV
•added 2026/06/25 8:39 a.m.•12 views

CVE-2026-53210 tee: shm: fix shm leak in register_shm_helper()

In the Linux kernel, the following vulnerability has been resolved: tee: shm: fix shm leak in registershmhelper registershmhelper allocates shm before calling ioviternpages. If ioviternpages returns 0, the function jumps to errctxput and leaks shm. This can be triggered by TEEIOCSHMREGISTER with...

5.8AI score
SaveExploits0References7
Cvelist
Cvelist
•added 2026/06/25 8:39 a.m.•49 views

CVE-2026-53210 tee: shm: fix shm leak in register_shm_helper()

In the Linux kernel, the following vulnerability has been resolved: tee: shm: fix shm leak in registershmhelper registershmhelper allocates shm before calling ioviternpages. If ioviternpages returns 0, the function jumps to errctxput and leaks shm. This can be triggered by TEEIOCSHMREGISTER with...

0.00122EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/06/25 2:19 a.m.•15 views

SUSE CVE-2026-52930

In the Linux kernel, the following vulnerability has been resolved: ipc/shm: serialize orphan cleanup with shmnattch updates shmdestroyorphaned walks the shm idr under shmidsns.rwsem, but that does not serialize all fields tested by shmmaydestroy. In particular, shmnattch is updated while holding...

5.5CVSS5.7AI score0.00117EPSS
SaveExploits0References18
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/25 12:00 a.m.•1 views

CVE-2026-53210: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tee: shm: fix shm leak in registershmhelper registershmhelper allocates shm before calling ioviternpages. If ioviternpages returns 0, the function jumps to errctxput and leaks shm. This can be triggered by TEEIOCSHMREGISTER with...

5.5CVSS5.7AI score0.00122EPSS
SaveExploits0References6
NVD
NVD
•added 2026/06/24 8:16 a.m.•35 views

CVE-2026-52930

In the Linux kernel, the following vulnerability has been resolved: ipc/shm: serialize orphan cleanup with shmnattch updates shmdestroyorphaned walks the shm idr under shmidsns.rwsem, but that does not serialize all fields tested by shmmaydestroy. In particular, shmnattch is updated while holding...

5.5CVSS0.00117EPSS
SaveExploits0References9
OSV
OSV
•added 2026/06/24 8:16 a.m.•17 views

UBUNTU-CVE-2026-52930

In the Linux kernel, the following vulnerability has been resolved: ipc/shm: serialize orphan cleanup with shmnattch updates shmdestroyorphaned walks the shm idr under shmidsns.rwsem, but that does not serialize all fields tested by shmmaydestroy. In particular, shmnattch is updated while holding...

5.5CVSS5.8AI score0.00117EPSS
SaveExploits0References22
Rows per page
Query Builder