Lucene search
K

21 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.4 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: perf: Ensure that the swevent hrtimer is properly destroyed. With the change to hrtimertrytocancel in perfsweventcancelhrtimer, it appears that the hrtimer may still be active by the time the event is freed. Make sure that the...

7.8CVSS5.7AI score0.00025EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2026/01/30 12:25 a.m.2 views

SUSE CVE-2026-23014

In the Linux kernel, the following vulnerability has been resolved: perf: Ensure swevent hrtimer is properly destroyed With the change to hrtimertrytocancel in perfsweventcancelhrtimer it appears possible for the hrtimer to still be active by the time the event gets freed. Make sure the event doe...

7.8CVSS5.8AI score0.00025EPSS
Exploits0References3
NVD
NVD
added 2026/01/28 3:16 p.m.3 views

CVE-2026-23014

In the Linux kernel, the following vulnerability has been resolved: perf: Ensure swevent hrtimer is properly destroyed With the change to hrtimertrytocancel in perfsweventcancelhrtimer it appears possible for the hrtimer to still be active by the time the event gets freed. Make sure the event doe...

7.8CVSS0.00025EPSS
Exploits0References2
OSV
OSV
added 2026/01/28 3:16 p.m.2 views

UBUNTU-CVE-2026-23014

In the Linux kernel, the following vulnerability has been resolved: perf: Ensure swevent hrtimer is properly destroyed With the change to hrtimertrytocancel in perfsweventcancelhrtimer it appears possible for the hrtimer to still be active by the time the event gets freed. Make sure the event doe...

7.8CVSS5.8AI score0.00025EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2026/01/28 2:24 p.m.7 views

CVE-2026-23014

In the Linux kernel, the following vulnerability has been resolved: perf: Ensure swevent hrtimer is properly destroyed With the change to hrtimertrytocancel in perfsweventcancelhrtimer it appears possible for the hrtimer to still be active by the time the event gets freed. Make sure the event doe...

7.8CVSS5.3AI score0.00025EPSS
Exploits0
OSV
OSV
added 2026/01/28 2:24 p.m.5 views

CVE-2026-23014 perf: Ensure swevent hrtimer is properly destroyed

In the Linux kernel, the following vulnerability has been resolved: perf: Ensure swevent hrtimer is properly destroyed With the change to hrtimertrytocancel in perfsweventcancelhrtimer it appears possible for the hrtimer to still be active by the time the event gets freed. Make sure the event doe...

7.8CVSS5.8AI score0.00025EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/01/28 2:24 p.m.5 views

CVE-2026-23014

In the Linux kernel, the following vulnerability has been resolved: perf: Ensure swevent hrtimer is properly destroyed With the change to hrtimertrytocancel in perfsweventcancelhrtimer it appears possible for the hrtimer to still be active by the time the event gets freed. Make sure the event doe...

5.8AI score0.00025EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2026/01/28 2:24 p.m.7 views

CVE-2026-23014

The CVE-2026-23014 issue concerns the Linux kernel perf subsystem, specifically the swevent hrtimer. The root cause is that after changing hrtimer_try_to_cancel() in perf_swevent_cancel_hrtimer(), the hrtimer could remain active when the event is freed. The fix adds a full hrtimer_cancel() on the...

7.8CVSS5.8AI score0.00025EPSS
Exploits0References2Affected Software1
EUVD
EUVD
added 2026/01/28 2:24 p.m.3 views

EUVD-2026-4926

In the Linux kernel, the following vulnerability has been resolved: perf: Ensure swevent hrtimer is properly destroyed With the change to hrtimertrytocancel in perfsweventcancelhrtimer it appears possible for the hrtimer to still be active by the time the event gets freed. Make sure the event doe...

5.8AI score0.00025EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.1 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002508)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002508 advisory. The perfsweventinit function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privilege...

8.4CVSS7.5AI score0.65851EPSS
Exploits15References33
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.1 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001911)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001911 advisory. Race condition in kernel/events/core.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service use-after-free by leveraging...

7.6CVSS7AI score0.00091EPSS
Exploits0References7
Microsoft CVE
Microsoft CVE
added 2024/02/16 8:0 a.m.2 views

The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type which allows local users to gain privileges via a crafted perf_event_open system call.

...

8.4CVSS8.1AI score0.65851EPSS
Exploits15
SUSE CVE
SUSE CVE
added 2023/02/15 5:10 a.m.1 views

SUSE CVE-2015-8963

Race condition in kernel/events/core.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service use-after-free by leveraging incorrect handling of an swevent data structure during a CPU unplug operation...

7CVSS8AI score0.00091EPSS
Exploits0References8
OSV
OSV
added 2016/11/16 5:59 a.m.1 views

DEBIAN-CVE-2015-8963

Race condition in kernel/events/core.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service use-after-free by leveraging incorrect handling of an swevent data structure during a CPU unplug operation...

7CVSS7.5AI score0.00091EPSS
Exploits0References1
Cvelist
Cvelist
added 2016/11/16 4:49 a.m.22 views

CVE-2015-8963

Race condition in kernel/events/core.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service use-after-free by leveraging incorrect handling of an swevent data structure during a CPU unplug operation...

7.5AI score0.00091EPSS
Exploits0References4
OSV
OSV
added 2016/11/16 12:0 a.m.0 views

UBUNTU-CVE-2015-8963

Race condition in kernel/events/core.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service use-after-free by leveraging incorrect handling of an swevent data structure during a CPU unplug operation...

7CVSS6.9AI score0.00091EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added 2013/05/20 4:17 p.m.3 views

kernel: perf_swevent_enabled array out-of-bound access

The perfsweventinit function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perfeventopen system call...

8.4CVSS6.8AI score0.65851EPSS
Exploits15References5
RedHat Linux
RedHat Linux
added 2013/05/17 3:9 p.m.3 views

kernel: perf_swevent_enabled array out-of-bound access

The perfsweventinit function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perfeventopen system call...

8.4CVSS6.8AI score0.65851EPSS
Exploits15References5
VulnCheck KEV
VulnCheck KEV
added 2013/05/17 12:0 a.m.1 views

VulnCheck KEV: CVE-2013-2094

Linux kernel fails to check all 64 bits of attr.config passed by user space, resulting to out-of-bounds access of the perfsweventenabled array in swperfeventdestroy. Explotation allows for privilege escalation...

8.4CVSS7AI score0.65851EPSS
Exploits15References1
RedHat Linux
RedHat Linux
added 2013/05/16 3:18 p.m.3 views

kernel: perf_swevent_enabled array out-of-bound access

The perfsweventinit function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perfeventopen system call...

8.4CVSS6.8AI score0.65851EPSS
Exploits15References5
Rows per page
Query Builder