Lucene search
K

53 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux - уязвимость в linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: scs: A wrong parameter was fixed in scsmagic. The scsmagic function requires a void variable, but a struct taskstruct is provided instead. taskscstsk represents the starting address of the task’s shadow call stack, and...

5.5CVSS5.8AI score0.00033EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.7 views

Astra Linux - уязвимость в linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: tracing/eprobes: Do not allow eprobes to use $stack, or % for regs While playing with event probes eprobes, I tried to see what would happen if I attempted to retrieve the instruction pointer %rip knowing that event probes do not...

5.5CVSS5.8AI score0.00103EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2026/01/16 12:26 a.m.3 views

SUSE CVE-2025-71102

In the Linux kernel, the following vulnerability has been resolved: scs: fix a wrong parameter in scsmagic scsmagic needs a 'void ' variable, but a 'struct taskstruct ' is given. 'taskscstsk' is the starting address of the task's shadow call stack, and 'scsmagictaskscstsk' is the end address of t...

5.5CVSS6.4AI score0.00033EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.2 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004138)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004138 advisory. An issue was discovered in writetptentry in drivers/infiniband/hw/cxgb4/mem.c in the Linux kernel through 5.3.2. The cxgb4 driver is directly calling dmamapsingle a...

7.5CVSS6.8AI score0.01194EPSS
Exploits0References13
NVD
NVD
added 2026/01/14 3:15 p.m.1 views

CVE-2025-71102

In the Linux kernel, the following vulnerability has been resolved: scs: fix a wrong parameter in scsmagic scsmagic needs a 'void ' variable, but a 'struct taskstruct ' is given. 'taskscstsk' is the starting address of the task's shadow call stack, and 'scsmagictaskscstsk' is the end address of t...

5.5CVSS0.00033EPSS
Exploits0References7
OSV
OSV
added 2026/01/14 3:15 p.m.1 views

UBUNTU-CVE-2025-71102

In the Linux kernel, the following vulnerability has been resolved: scs: fix a wrong parameter in scsmagic scsmagic needs a 'void ' variable, but a 'struct taskstruct ' is given. 'taskscstsk' is the starting address of the task's shadow call stack, and 'scsmagictaskscstsk' is the end address of t...

5.5CVSS5.7AI score0.00033EPSS
Exploits0References36
OSV
OSV
added 2026/01/14 3:5 p.m.1 views

CVE-2025-71102 scs: fix a wrong parameter in __scs_magic

In the Linux kernel, the following vulnerability has been resolved: scs: fix a wrong parameter in scsmagic scsmagic needs a 'void ' variable, but a 'struct taskstruct ' is given. 'taskscstsk' is the starting address of the task's shadow call stack, and 'scsmagictaskscstsk' is the end address of t...

5.5CVSS5.2AI score0.00033EPSS
Exploits0References10
Debian CVE
Debian CVE
added 2026/01/14 3:5 p.m.4 views

CVE-2025-71102

In the Linux kernel, the following vulnerability has been resolved: scs: fix a wrong parameter in scsmagic scsmagic needs a 'void ' variable, but a 'struct taskstruct ' is given. 'taskscstsk' is the starting address of the task's shadow call stack, and 'scsmagictaskscstsk' is the end address of t...

5.5CVSS5.1AI score0.00033EPSS
Exploits0
CVE
CVE
added 2026/01/14 3:5 p.m.6 views

CVE-2025-71102

CVE-2025-71102 affects the Linux kernel with a bug in shadow call stack handling: __scs_magic() received a struct task_struct* instead of the required void*. This caused scs_check_usage to scan an incorrect memory range when CONFIG_DEBUG_STACK_USAGE is enabled, potentially yielding inaccurate sha...

5.5CVSS6AI score0.00033EPSS
Exploits0References7Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/14 3:5 p.m.3 views

CVE-2025-71102

In the Linux kernel, the following vulnerability has been resolved: scs: fix a wrong parameter in scsmagic scsmagic needs a 'void ' variable, but a 'struct taskstruct ' is given. 'taskscstsk' is the starting address of the task's shadow call stack, and 'scsmagictaskscstsk' is the end address of t...

5.2AI score0.00033EPSS
Exploits0References8Affected Software1
Cvelist
Cvelist
added 2026/01/14 3:5 p.m.25 views

CVE-2025-71102 scs: fix a wrong parameter in __scs_magic

In the Linux kernel, the following vulnerability has been resolved: scs: fix a wrong parameter in scsmagic scsmagic needs a 'void ' variable, but a 'struct taskstruct ' is given. 'taskscstsk' is the starting address of the task's shadow call stack, and 'scsmagictaskscstsk' is the end address of t...

0.00033EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2026/01/14 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2025-71102

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: scs: fix a wrong parameter in scsmagic scsmagic needs a 'void ' variable, but a 'struct...

5.5CVSS5.8AI score0.00033EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/12/25 2:30 p.m.3 views

CVE-2023-53997

In the Linux kernel, the following vulnerability has been resolved: thermal: of: fix double-free on unregistration Since commit 3d439b1a2ad3 "thermal/core: Alloc-copy-free the thermal zone parameters structure", thermalzonedeviceregister allocates a copy of the tzp argument and frees it when...

5.5CVSS5.9AI score0.0003EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/12/17 7:21 a.m.2 views

CVE-2025-67899

A flaw was found in uriparser. This vulnerability allows unbounded recursion and stack consumption via large input containing many commas. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising...

2.9CVSS6.1AI score0.00007EPSS
Exploits0References5
OSV
OSV
added 2025/12/14 11:15 p.m.2 views

CVE-2025-67899

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas...

2.9CVSS6.8AI score
Exploits0References3
Cvelist
Cvelist
added 2025/12/14 10:17 p.m.11 views

CVE-2025-67899

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas...

2.9CVSS0.00007EPSS
Exploits0References2
CVE
CVE
added 2025/12/14 10:17 p.m.12 views

CVE-2025-67899

CVE-2025-67899 affects uriparser up to version 0.9.9, where unbounded recursion leads to stack consumption on large inputs (ParseMustBeSegmentNzNc with many commas). Connected advisories confirm the issue and direct upgrade to uriparser-1.0.0 as the remediation (e.g., Fedora/FEDORA advisories). O...

2.9CVSS6.6AI score0.00007EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/11/06 12:0 a.m.1 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990639)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990639 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvlan: add ipvlanroutev6outbound helper Inspired by syzbot reports using a stack of multiple...

7.8CVSS6AI score0.00012EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/11/05 12:0 a.m.1 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990073)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990073 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvlan: add ipvlanroutev6outbound helper Inspired by syzbot reports using a stack of multiple...

7.8CVSS6AI score0.00012EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 3:19 p.m.3 views

EUVD-2025-32826

In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix invalid derefence of sblvbptr I experience issues when putting a lkbsb on the stack and have sblvbptr field to a dangled pointer while not using DLMLKFVALBLK. It will crash with the following kernel message, the...

5.8AI score0.00026EPSS
Exploits0References5
Rows per page
Query Builder