Lucene search
+L

471 matches found

OSV
OSV
•added 2025/03/12 9:42 a.m.•20 views

CVE-2025-21863 io_uring: prevent opcode speculation

In the Linux kernel, the following vulnerability has been resolved: iouring: prevent opcode speculation sqe-opcode is used for different tables, make sure we santitise it against speculations...

7.8CVSS6.6AI score
SaveExploits0References11
Vulnrichment
Vulnrichment
•added 2025/03/12 9:42 a.m.•3 views

CVE-2025-21863 io_uring: prevent opcode speculation

In the Linux kernel, the following vulnerability has been resolved: iouring: prevent opcode speculation sqe-opcode is used for different tables, make sure we santitise it against speculations...

7.8AI score0.00251EPSS
SaveExploits0References7
CVE
CVE
•added 2025/03/12 9:42 a.m.•191 views

CVE-2025-21863

CVE-2025-21863 — Linux kernel io_uring opcode speculation : The vulnerability arises from the io_uring path where sqe->opcode is used for different tables, allowing speculative execution issues. The fix sanitises sqe->opcode to prevent speculation. Affected product: Linux kernel with io_uri...

7.8CVSS6.7AI score0.00251EPSS
SaveExploits0References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/12 12:00 a.m.•1 views

CVE-2025-21863: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iouring: prevent opcode speculation sqe-opcode is used for different tables, make sure we santitise it against speculations...

7.8CVSS6.4AI score0.00251EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2025/03/06 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2024-50112

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/lam: Disable ADDRESSMASKING in most cases Linear Address Masking LAM has a weakness related to transient execution as described in the SLAM paper1. Unless...

7.8CVSS7.2AI score0.00277EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/06 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2024-50017

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/mm/identmap: Use gbpages only where full GB page should be mapped. When identpudinit uses only GB pages to create identity maps, large ranges of addresses n...

5.5CVSS6.6AI score0.00222EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2023-3006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A known cache speculation vulnerability, known as Branch History Injection BHI or Spectre-BHB, becomes actual again for the new hw AmpereOne. Spectre-BHB is...

5.5CVSS6.4AI score0.00264EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2022-23960

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared...

5.6CVSS6.6AI score0.00499EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2024-39499

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vmci: prevent speculation leaks by sanitizing event in eventdeliver Coverity spotted that eventmsg is controlled by user-space, eventmsg-eventdata.event is pass...

7.1CVSS6.3AI score0.00298EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/02/28 2:23 a.m.•9 views

SUSE CVE-2024-58000

In the Linux kernel, the following vulnerability has been resolved: iouring: prevent reg-wait speculations With ENTEREXTARGREG instead of passing a user pointer with arguments for the waiting loop the user can specify an offset into a pre-mapped region of memory, in which case the offset, offset ...

5.5CVSS6.4AI score0.0019EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/02/27 3:04 a.m.•10 views

SUSE CVE-2022-49611

In the Linux kernel, the following vulnerability has been resolved: x86/speculation: Fill RSB on vmexit for IBRS Prevent RSB underflow/poisoning attacks with RSB. While at it, add a bunch of comments to attempt to document the current state of tribal knowledge about RSB attacks and what exactly i...

5.5CVSS6.1AI score0.00284EPSS
SaveExploits0References10
NVD
NVD
•added 2025/02/27 2:15 a.m.•24 views

CVE-2024-58000

In the Linux kernel, the following vulnerability has been resolved: iouring: prevent reg-wait speculations With ENTEREXTARGREG instead of passing a user pointer with arguments for the waiting loop the user can specify an offset into a pre-mapped region of memory, in which case the offset, offset ...

5.5CVSS0.0019EPSS
SaveExploits0References2
OSV
OSV
•added 2025/02/27 2:15 a.m.•25 views

UBUNTU-CVE-2024-58000

In the Linux kernel, the following vulnerability has been resolved: iouring: prevent reg-wait speculations With ENTEREXTARGREG instead of passing a user pointer with arguments for the waiting loop the user can specify an offset into a pre-mapped region of memory, in which case the offset, offset ...

5.5CVSS5.8AI score0.0019EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2025/02/27 2:07 a.m.•20 views

CVE-2024-58000

In the Linux kernel, the following vulnerability has been resolved: iouring: prevent reg-wait speculations With ENTEREXTARGREG instead of passing a user pointer with arguments for the waiting loop the user can specify an offset into a pre-mapped region of memory, in which case the offset, offset ...

5.5CVSS5.6AI score0.0019EPSS
SaveExploits0
OSV
OSV
•added 2025/02/27 2:07 a.m.•16 views

CVE-2024-58000 io_uring: prevent reg-wait speculations

In the Linux kernel, the following vulnerability has been resolved: iouring: prevent reg-wait speculations With ENTEREXTARGREG instead of passing a user pointer with arguments for the waiting loop the user can specify an offset into a pre-mapped region of memory, in which case the offset, offset ...

6.3AI score
SaveExploits0References5
CVE
CVE
•added 2025/02/27 2:07 a.m.•75 views

CVE-2024-58000

CVE-2024-58000 affects the Linux kernel Io_uring reg-wait path. The root cause is speculative execution on a kernel array indexed by user input when using ENTER_EXT_ARG_REG, which could interpret an offset into a pre-mapped memory region as an argument. The documented fix is to prevent speculativ...

5.5CVSS6.4AI score0.0019EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2025/02/27 12:00 a.m.•16 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the iouring module not preventing buffer overflows in the reg-wait speculation...

5.5CVSS5.8AI score0.0019EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/02/27 12:00 a.m.•12 views

PT-2025-8787 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, specifically in the io uring component. The issue allowed for reg-wait speculations, which could be exploited by passing a user...

6.4AI score0.0019EPSS
SaveExploits0References9
OSV
OSV
•added 2025/02/26 7:01 a.m.•10 views

DEBIAN-CVE-2022-49611

In the Linux kernel, the following vulnerability has been resolved: x86/speculation: Fill RSB on vmexit for IBRS Prevent RSB underflow/poisoning attacks with RSB. While at it, add a bunch of comments to attempt to document the current state of tribal knowledge about RSB attacks and what exactly i...

5.5CVSS5.6AI score0.00284EPSS
SaveExploits0References1
OSV
OSV
•added 2025/02/26 7:01 a.m.•14 views

UBUNTU-CVE-2022-49611

In the Linux kernel, the following vulnerability has been resolved: x86/speculation: Fill RSB on vmexit for IBRS Prevent RSB underflow/poisoning attacks with RSB. While at it, add a bunch of comments to attempt to document the current state of tribal knowledge about RSB attacks and what exactly i...

5.5CVSS6.2AI score0.00284EPSS
SaveExploits0References10
Rows per page
Query Builder