Lucene search
+L

1566 matches found

ATTACKERKB
ATTACKERKB
added 2025/09/16 1:0 p.m.5 views

CVE-2025-39822

In the Linux kernel, the following vulnerability has been resolved: iouring/kbuf: fix signedness in thislen calculation When importing and using buffers, buf-len is considered unsigned. However, buf-len is converted to signed int when committing. This can lead to unexpected behavior if the buffer...

5.5CVSS5.3AI score0.00119EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2025/09/16 1:0 p.m.6 views

CVE-2025-39822 io_uring/kbuf: fix signedness in this_len calculation

In the Linux kernel, the following vulnerability has been resolved: iouring/kbuf: fix signedness in thislen calculation When importing and using buffers, buf-len is considered unsigned. However, buf-len is converted to signed int when committing. This can lead to unexpected behavior if the buffer...

5.5CVSS6.3AI score
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/09/15 10:31 a.m.7 views

kernel: tcp: Correct signedness in skb remaining space calculation

In the Linux kernel, the following vulnerability has been resolved: tcp: Correct signedness in skb remaining space calculation Syzkaller reported a bug 1 where sk-skforwardalloc can overflow. When we send data, if an skb exists at the tail of the write queue, the kernel will attempt to append the...

7.8CVSS6.8AI score0.00154EPSS
SaveExploits0References5
OSV
OSV
added 2025/09/15 12:0 a.m.17 views

ALSA-2025:15782 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ublk: make sure ubq-canceling is set when queue is frozen CVE-2025-22068 kernel: scsi: lpfc: Use memcpy for BIOS version CVE-2025-38332 kernel: idpf: convert control queue mutex to a...

7.8CVSS6.5AI score0.00193EPSS
SaveExploits0References16
Microsoft CVE
Microsoft CVE
added 2025/09/04 5:50 a.m.14 views

tcp: Correct signedness in skb remaining space calculation

...

7.8CVSS7AI score0.00154EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/09/04 2:58 a.m.7 views

In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.

...

9.8CVSS7AI score0.02037EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2025/08/20 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2021-26713

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack-based buffer overflow in resrtpasterisk.c in Sangoma Asterisk before 16.16.1, 17.x before 17.9.2, and 18.x before 18.2.1 and Certified Asterisk before...

6.5CVSS6.8AI score0.01845EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/12 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2018-6412

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the function sbusfbioctlhelper in drivers/video/fbdev/sbuslib.c in the Linux kernel through 4.15, an integer signedness error allows arbitrary information...

7.5CVSS7.2AI score0.02334EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/08 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2024-41022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix signedness bug in sdmav40processtrapirq The instance variable needs to be...

7CVSS5.6AI score0.0024EPSS
SaveExploits0References2
Gitee
Gitee
added 2025/07/27 3:35 a.m.137 views

Exploit for CVE-2016-2384

Linux kernel exploits ===================== | Date | Link | Description | Vector | Impact | | --- | --- | --- | --- | --- | | 02.2016 | CVE-2016-2384 | Double-free in USB MIDI driver | Physical + Local | LPE | | 03.2016 | prefetch-side-channel | KASLR bypass via prefetch | Local | Info-leak | |...

7.8CVSS7.4AI score0.20797EPSS
SaveExploits57
SUSE CVE
SUSE CVE
added 2025/07/25 11:22 p.m.12 views

SUSE CVE-2025-38463

In the Linux kernel, the following vulnerability has been resolved: tcp: Correct signedness in skb remaining space calculation Syzkaller reported a bug 1 where sk-skforwardalloc can overflow. When we send data, if an skb exists at the tail of the write queue, the kernel will attempt to append the...

6.1CVSS6.5AI score0.00154EPSS
SaveExploits0References22
NVD
NVD
added 2025/07/25 4:15 p.m.14 views

CVE-2025-38463

In the Linux kernel, the following vulnerability has been resolved: tcp: Correct signedness in skb remaining space calculation Syzkaller reported a bug 1 where sk-skforwardalloc can overflow. When we send data, if an skb exists at the tail of the write queue, the kernel will attempt to append the...

7.8CVSS0.00154EPSS
SaveExploits0References4
OSV
OSV
added 2025/07/25 4:15 p.m.21 views

AZL-65774 CVE-2025-38463 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: tcp: Correct signedness in skb remaining space calculation Syzkaller reported a bug 1 where sk-skforwardalloc can overflow. When we send data, if an skb exists at the tail of the write queue, the kernel will attempt to append the...

7.8CVSS5.6AI score0.00154EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/25 4:15 p.m.1 views

DEBIAN-CVE-2025-38463

In the Linux kernel, the following vulnerability has been resolved: tcp: Correct signedness in skb remaining space calculation Syzkaller reported a bug 1 where sk-skforwardalloc can overflow. When we send data, if an skb exists at the tail of the write queue, the kernel will attempt to append the...

5.5CVSS5.7AI score0.00154EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/25 4:15 p.m.16 views

UBUNTU-CVE-2025-38463

In the Linux kernel, the following vulnerability has been resolved: tcp: Correct signedness in skb remaining space calculation Syzkaller reported a bug 1 where sk-skforwardalloc can overflow. When we send data, if an skb exists at the tail of the write queue, the kernel will attempt to append the...

7.8CVSS6.2AI score0.00154EPSS
SaveExploits0References29
OSV
OSV
added 2025/07/25 3:27 p.m.5 views

CVE-2025-38463 tcp: Correct signedness in skb remaining space calculation

In the Linux kernel, the following vulnerability has been resolved: tcp: Correct signedness in skb remaining space calculation Syzkaller reported a bug 1 where sk-skforwardalloc can overflow. When we send data, if an skb exists at the tail of the write queue, the kernel will attempt to append the...

7.8CVSS6.6AI score
SaveExploits0References7
CVE
CVE
added 2025/07/25 3:27 p.m.94 views

CVE-2025-38463

CVE-2025-38463: Linux kernel TCP skb remaining space calculation contains a signedness bug in skb->len vs size_goal, allowing sk_forward_alloc overflow in certain write-path conditions. Root cause: copy = size_goal - skb->len is computed with mismatched signed/unsigned types, producing a la...

7.8CVSS6.3AI score0.00154EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/07/25 3:27 p.m.10 views

CVE-2025-38463

In the Linux kernel, the following vulnerability has been resolved: tcp: Correct signedness in skb remaining space calculation Syzkaller reported a bug 1 where sk-skforwardalloc can overflow. When we send data, if an skb exists at the tail of the write queue, the kernel will attempt to append the...

5.5CVSS6.2AI score0.00154EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/07/07 12:0 a.m.8 views

PT-2025-30877

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the TCP implementation related to the calculation of remaining space in socket buffers skb. Specifically, an incorrect signedness check during the...

7.1CVSS6.7AI score0.00154EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 7:45 a.m.11 views

CVE-2024-25388

drivers/wlan/wlanmgmt,c in RT-Thread through 5.0.2 has an integer signedness error and resultant buffer overflow...

8.4CVSS8.5AI score0.00323EPSS
SaveExploits0References1
Rows per page
Query Builder