Lucene search
+L

1868 matches found

EUVD
EUVD
•added 2026/04/22 3:31 p.m.•15 views

EUVD-2026-24846

In the Linux kernel, the following vulnerability has been resolved: s390/syscalls: Add spectre boundary for syscall dispatch table The s390 syscall number is directly controlled by userspace, but does not have an arrayindexnospec boundary to prevent access past the syscall function pointer tables...

5.7AI score0.00162EPSS
SaveExploits0References8
OSV
OSV
•added 2026/04/22 2:16 p.m.•20 views

AZL-83306 CVE-2026-31483 affecting package kernel for versions less than 6.6.134.1-2

In the Linux kernel, the following vulnerability has been resolved: s390/syscalls: Add spectre boundary for syscall dispatch table The s390 syscall number is directly controlled by userspace, but does not have an arrayindexnospec boundary to prevent access past the syscall function pointer tables...

5.5CVSS6AI score0.00162EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/22 2:16 p.m.•18 views

CVE-2026-31483

In the Linux kernel, the following vulnerability has been resolved: s390/syscalls: Add spectre boundary for syscall dispatch table The s390 syscall number is directly controlled by userspace, but does not have an arrayindexnospec boundary to prevent access past the syscall function pointer tables...

5.5CVSS0.00162EPSS
SaveExploits0References7
CVE
CVE
•added 2026/04/22 1:54 p.m.•46 views

CVE-2026-31483

CVE-2026-31483 affects the s390 architecture in the Linux kernel. The root cause is a missing array_index_nospec() boundary in the syscall dispatch table, allowing a user-controlled syscall number to exceed the function pointer table and potentially read kernel memory via speculative execution (S...

5.5CVSS5.8AI score0.00162EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2026/04/22 1:54 p.m.•16 views

CVE-2026-31483 s390/syscalls: Add spectre boundary for syscall dispatch table

In the Linux kernel, the following vulnerability has been resolved: s390/syscalls: Add spectre boundary for syscall dispatch table The s390 syscall number is directly controlled by userspace, but does not have an arrayindexnospec boundary to prevent access past the syscall function pointer tables...

6.2AI score
SaveExploits0References10
Cvelist
Cvelist
•added 2026/04/22 1:54 p.m.•56 views

CVE-2026-31483 s390/syscalls: Add spectre boundary for syscall dispatch table

In the Linux kernel, the following vulnerability has been resolved: s390/syscalls: Add spectre boundary for syscall dispatch table The s390 syscall number is directly controlled by userspace, but does not have an arrayindexnospec boundary to prevent access past the syscall function pointer tables...

0.00162EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/04/22 12:00 a.m.•34 views

PT-2026-43860

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the LoongArch architecture, the syscall number is directly controlled by userspace. The system lacks an array index nospec boundary, which is a mechanism used to prevent speculative...

9.8CVSS6.6AI score0.00718EPSS
SaveExploits2References318
Tenable Nessus
Tenable Nessus
•added 2026/04/22 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-31483

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/syscalls: Add spectre boundary for syscall dispatch table The s390 syscall number is directly controlled by userspace, but does not have an arrayindexnospe...

5.5CVSS5.8AI score0.00162EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/04/21 12:00 a.m.•10 views

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011383)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011383 advisory. In the Linux kernel, the following vulnerability has been resolved: afunix: Fix garbage collector racing against connect Garbage collector does not take into accoun...

7.8CVSS6AI score0.00207EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/04/20 7:22 p.m.•18 views

CVE-2026-40572

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. In versions prior to 0.24, Syscall 15 MemoryMapRange allows Ring 3 user-mode processes to map arbitrary virtual address ranges into their address space without validating against forbidden regions, including critical...

9CVSS5.8AI score0.00181EPSS
SaveExploits1References1
NVD
NVD
•added 2026/04/18 1:16 a.m.•16 views

CVE-2026-40572

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. In versions prior to 0.24, Syscall 15 MemoryMapRange allows Ring 3 user-mode processes to map arbitrary virtual address ranges into their address space without validating against forbidden regions, including critical...

9CVSS0.00181EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/04/18 12:16 a.m.•50 views

CVE-2026-40572 NovumOS has Arbitrary Memory Mapping via Syscall 15 (MemoryMapRange)

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. In versions prior to 0.24, Syscall 15 MemoryMapRange allows Ring 3 user-mode processes to map arbitrary virtual address ranges into their address space without validating against forbidden regions, including critical...

9CVSS0.00181EPSS
SaveExploits1References2
EUVD
EUVD
•added 2026/04/18 12:16 a.m.•19 views

EUVD-2026-23640

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. In versions prior to 0.24, Syscall 15 MemoryMapRange allows Ring 3 user-mode processes to map arbitrary virtual address ranges into their address space without validating against forbidden regions, including critical...

9CVSS5.8AI score0.00181EPSS
SaveExploits1References2
CVE
CVE
•added 2026/04/18 12:16 a.m.•40 views

CVE-2026-40572

NovumOS vulnerability CVE-2026-40572: In versions prior to 0.24, Syscall 15 (MemoryMapRange) lets Ring-3 user processes map arbitrary virtual ranges into their address space without validating against forbidden regions, including kernel structures (IDT, GDT, TSS, page tables). This can allow a lo...

9CVSS5.8AI score0.00181EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/18 12:12 a.m.•10 views

CVE-2026-40317 NovumOS has Privilege Escalation in the Syscall Interface

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. In versions prior to 0.24, Syscall 12 JumpToUser accepts an arbitrary entry point address from user-space registers without validation, allowing any Ring 3 user-mode process to jump to kernel addresses and execute...

9.3CVSS6.3AI score0.00198EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/04/18 12:12 a.m.•46 views

CVE-2026-40317 NovumOS has Privilege Escalation in the Syscall Interface

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. In versions prior to 0.24, Syscall 12 JumpToUser accepts an arbitrary entry point address from user-space registers without validation, allowing any Ring 3 user-mode process to jump to kernel addresses and execute...

9.3CVSS0.00198EPSS
SaveExploits1References2
CVE
CVE
•added 2026/04/18 12:12 a.m.•56 views

CVE-2026-40317

NovumOS (a custom 32-bit OS written in Zig/x86 Assembly) prior to version 0.24 is affected by a local privilege-escalation in the Syscall 12 JumpToUser interface. The vulnerability arises because JumpToUser accepts an arbitrary entry-point address from user-space without validation, enabling any ...

9.3CVSS6.3AI score0.00198EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2026/04/18 12:12 a.m.•21 views

CVE-2026-40317 NovumOS has Privilege Escalation in the Syscall Interface

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. In versions prior to 0.24, Syscall 12 JumpToUser accepts an arbitrary entry point address from user-space registers without validation, allowing any Ring 3 user-mode process to jump to kernel addresses and execute...

9.3CVSS6.2AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/18 12:00 a.m.•3 views

CVE-2026-40572: Improper Privilege Management

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. In versions prior to 0.24, Syscall 15 MemoryMapRange allows Ring 3 user-mode processes to map arbitrary virtual address ranges into their address space without validating against forbidden regions, including critical...

9CVSS5.8AI score0.00181EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/04/18 12:00 a.m.•49 views

PT-2026-33547

Name of the Vulnerable Software and Affected Versions NovumOS versions prior to 0.24 Description Syscall 12 'JumpToUser' accepts an arbitrary entry point address from user-space registers without validation. This allows a Ring 3 user-mode process to jump to kernel addresses and execute arbitrary...

9.3CVSS6.1AI score0.00198EPSS
SaveExploits1References6
Rows per page
Query Builder