Lucene search
+L

26 matches found

OSV
OSV
•added 2026/09/16 11:17 a.m.•10 views

AZL-101468 CVE-2026-89922 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Take srcu when importing watchpoint data importwpinfo backs up the original guest memory contents of a watchpoint with readguestabs, which is kvmreadguest and therefore resolves the memslot via kvmmemslots. That requir...

7.8CVSS5.8AI score0.00176EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 11:17 a.m.•12 views

CVE-2026-89922

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Take srcu when importing watchpoint data importwpinfo backs up the original guest memory contents of a watchpoint with readguestabs, which is kvmreadguest and therefore resolves the memslot via kvmmemslots. That requir...

7.8CVSS0.00176EPSS
SaveExploits0References6
OSV
OSV
•added 2026/09/16 10:32 a.m.•10 views

CVE-2026-89922 KVM: s390: Take srcu when importing watchpoint data

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Take srcu when importing watchpoint data importwpinfo backs up the original guest memory contents of a watchpoint with readguestabs, which is kvmreadguest and therefore resolves the memslot via kvmmemslots. That requir...

7.8CVSS5.8AI score
SaveExploits0References9
RedHat Linux
RedHat Linux
•added 2026/09/08 9:06 a.m.•13 views

kernel: KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation

A flaw was found in the Kernel-based Virtual Machine KVM component of the Linux kernel on arm64 architectures. This vulnerability occurs because certain page table walk operations, used in fault injection and Address Translation AT emulation, do not properly acquire a Sleepable Read-Copy Update...

8.8CVSS7.3AI score0.00153EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2026/09/01 1:30 p.m.•12 views

SUSE CVE-2026-72282

In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvmiobusgetdev locking responsibilities to callers kvmiobusgetdev returns a device that is only matched by the address, and nothing else. This can cause a lifetime issue if the matched device is not the expected type, a...

7.8CVSS5.8AI score0.00176EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/08/26 12:00 a.m.•13 views

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104616)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104616 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvmiobusgetdev locking responsibilities to callers kvmiobusgetdev returns a device that...

7.8CVSS5.5AI score0.00176EPSS
SaveExploits0References4
AstraLinux
AstraLinux
•added 2026/08/24 10:19 a.m.•3 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquiring SRCU in KVMGETMPSTATE to protect guest memory accesses Acquiring a lock on kvm-srcu when userspace is obtaining the MP state can lead to a severe edge case where processing APIC events, such as during pending...

7.8CVSS5.9AI score0.00206EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/08/18 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-72282

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: Move kvmiobusgetdev locking responsibilities to callers kvmiobusgetdev returns a device that is only matched by the address, and nothing else. This can cau...

7.8CVSS5.8AI score0.00176EPSS
SaveExploits0References3
NVD
NVD
•added 2026/08/15 6:21 a.m.•10 views

CVE-2026-72282

In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvmiobusgetdev locking responsibilities to callers kvmiobusgetdev returns a device that is only matched by the address, and nothing else. This can cause a lifetime issue if the matched device is not the expected type, a...

7.8CVSS0.00176EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
•added 2026/08/15 6:21 a.m.•16 views

CVE-2026-72282

In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvmiobusgetdev locking responsibilities to callers kvmiobusgetdev returns a device that is only matched by the address, and nothing else. This can cause a lifetime issue if the matched device is not the expected type, a...

7.8CVSS5.5AI score0.00176EPSS
SaveExploits0References10
OSV
OSV
•added 2026/08/15 6:21 a.m.•10 views

UBUNTU-CVE-2026-72282

In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvmiobusgetdev locking responsibilities to callers kvmiobusgetdev returns a device that is only matched by the address, and nothing else. This can cause a lifetime issue if the matched device is not the expected type, a...

7.8CVSS5.3AI score0.00176EPSS
SaveExploits0References11
CVE
CVE
•added 2026/08/15 5:55 a.m.•54 views

CVE-2026-72282

The CVE-2026-72282 entry concerns the Linux kernel KVM path: kvm_io_bus_get_dev() now requires the caller to hold the srcu lock, moving locking responsibilities to the caller. The function returns a device matched only by address, which can lead to a lifetime issue if the device’s type isn’t as e...

7.8CVSS5.3AI score0.00176EPSS
SaveExploits0References8
OSV
OSV
•added 2026/08/15 5:55 a.m.•22 views

CVE-2026-72282 KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers

In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvmiobusgetdev locking responsibilities to callers kvmiobusgetdev returns a device that is only matched by the address, and nothing else. This can cause a lifetime issue if the matched device is not the expected type, a...

7.8CVSS5.4AI score
SaveExploits0References11
EUVD
EUVD
•added 2026/08/15 5:55 a.m.•10 views

EUVD-2026-59181

In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvmiobusgetdev locking responsibilities to callers kvmiobusgetdev returns a device that is only matched by the address, and nothing else. This can cause a lifetime issue if the matched device is not the expected type, a...

5.3AI score0.00176EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/15 12:00 a.m.•1 views

CVE-2026-72282: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvmiobusgetdev locking responsibilities to callers kvmiobusgetdev returns a device that is only matched by the address, and nothing else. This can cause a lifetime issue if the matched device is not the expected type, a...

7.8CVSS5.8AI score0.00176EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/06/26 7:47 a.m.•22 views

CVE-2026-53277

A flaw was found in the Kernel-based Virtual Machine KVM component of the Linux kernel on arm64 architectures. This vulnerability occurs because certain page table walk operations, used in fault injection and Address Translation AT emulation, do not properly acquire a Sleepable Read-Copy Update...

8.8CVSS5.8AI score0.00153EPSS
SaveExploits0References4
NVD
NVD
•added 2026/06/25 9:16 a.m.•21 views

CVE-2026-53277

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation walks1 and kvmwalknesteds2 expect to be called while holding kvm-srcu to guard against memslot changes. While this is generally the case,...

8.8CVSS0.00153EPSS
SaveExploits0References7
OSV
OSV
•added 2026/06/25 9:16 a.m.•29 views

UBUNTU-CVE-2026-53277

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation walks1 and kvmwalknesteds2 expect to be called while holding kvm-srcu to guard against memslot changes. While this is generally the case,...

8.9CVSS5.7AI score0.00153EPSS
SaveExploits0References22
attackerkb
attackerkb
•added 2026/06/25 8:40 a.m.•15 views

CVE-2026-53277

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation walks1 and kvmwalknesteds2 expect to be called while holding kvm-srcu to guard against memslot changes. While this is generally the case,...

5.6AI score0.00153EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2026/05/28 9:35 a.m.•61 views

CVE-2026-46106

CVE-2026-46106 concerns the Linux kernel eventfs remount race. The root cause is a race where eventfs_inodes are traversed while remounts are performed, due to mixing rcu_read_lock usage with SRCU and not holding eventfs_mutex during the critical walk. The fix (commit 340f0c7067a9) updates the ev...

5.5CVSS5.7AI score0.00162EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder