Lucene search
+L

110 matches found

osv_cve
osv_cve
•added 2026/09/11 7:43 p.m.•42 views

CVE-2026-89444 platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer setattribute populates the security area of the BIOS attribute request buffer with the current admin password via populatesecuritybuffer, then dumps the whol...

6.1AI score
SaveExploits0References10
Cvelist
Cvelist
•added 2026/09/11 7:43 p.m.•43 views

CVE-2026-89444 platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer setattribute populates the security area of the BIOS attribute request buffer with the current admin password via populatesecuritybuffer, then dumps the whol...

0.00211EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/09/11 7:43 p.m.•20 views

EUVD-2026-76350

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer setattribute populates the security area of the BIOS attribute request buffer with the current admin password via populatesecuritybuffer, then dumps the whol...

6AI score0.00211EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/11 7:43 p.m.•41 views

CVE-2026-89444

CVE-2026-89444 affects the Linux kernel's platform/x86: dell-wmi-sysman driver. The set_attribute() function populates the security area of the BIOS attribute request buffer with the current admin password via populate_security_buffer(), then calls print_hex_dump_bytes() to dump the entire reques...

6AI score0.00211EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/11 12:00 a.m.•6 views

CVE-2026-89444: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer setattribute populates the security area of the BIOS attribute request buffer with the current admin password via populatesecuritybuffer, then dumps the whol...

6AI score0.00211EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•26 views

PT-2026-90160

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dell-wmi-sysman module where the set attribute function populates the security area of the BIOS attribute request buffer with the current admin password using...

6AI score0.00211EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•4 views

PT-2026-96463

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer set attribute populates the security area of the BIOS attribute request buffer with the current admin password via populate security buffer, then dumps the...

6AI score0.00211EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/09/04 12:00 a.m.•11 views

Linux kernel EnumData() Enumerate DoS

The vulnerability of the populate EnumData function in the drivers/platform/x86/dell/dell-wmi-sysman/enum-attributes.c file of the Linux X86 kernel device driver is related to the occurrence of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromi...

7CVSS6.7AI score0.00162EPSS
SaveExploits0References13Affected Software3
Redos
Redos
•added 2026/08/26 12:00 a.m.•15 views

ROS-20260826-73-0012

The vulnerability of the initbiosattributes function in the drivers/platform/x86/dell/dell-wmi-sysman/sysman.c file of the Linux kernel device driver for X86 processors is related to errors during link update. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.1AI score0.00203EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/08/25 12:00 a.m.•21 views

X86 Linux DoS

The vulnerability of the setnewpassword function in the drivers/platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c file of the Linux operating system’s X86 device driver module is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an...

5.5CVSS6AI score0.00134EPSS
SaveExploits0References12Affected Software3
RedhatCVE
RedhatCVE
•added 2026/06/29 1:07 p.m.•27 views

CVE-2026-53022

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: bound enumeration string aggregation populateenumdata aggregates firmware-provided value-modifier and possible-value strings into fixed 512-byte struct members. The current code bounds each individu...

7CVSS6.1AI score0.00162EPSS
SaveExploits0References4
Microsoft CVE
Microsoft CVE
•added 2026/06/27 8:09 a.m.•22 views

platform/x86: dell-wmi-sysman: bound enumeration string aggregation

...

5.5CVSS5.9AI score0.00162EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2026/06/26 2:13 a.m.•22 views

SUSE CVE-2026-53022

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: bound enumeration string aggregation populateenumdata aggregates firmware-provided value-modifier and possible-value strings into fixed 512-byte struct members. The current code bounds each individu...

5.5CVSS5.8AI score0.00162EPSS
SaveExploits0References17
EUVD
EUVD
•added 2026/06/24 6:32 p.m.•21 views

EUVD-2026-38890

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: bound enumeration string aggregation populateenumdata aggregates firmware-provided value-modifier and possible-value strings into fixed 512-byte struct members. The current code bounds each individu...

5.9AI score0.00162EPSS
SaveExploits0References8
NVD
NVD
•added 2026/06/24 5:17 p.m.•17 views

CVE-2026-53022

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: bound enumeration string aggregation populateenumdata aggregates firmware-provided value-modifier and possible-value strings into fixed 512-byte struct members. The current code bounds each individu...

5.5CVSS0.00162EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
•added 2026/06/24 5:17 p.m.•23 views

CVE-2026-53022

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: bound enumeration string aggregation populateenumdata aggregates firmware-provided value-modifier and possible-value strings into fixed 512-byte struct members. The current code bounds each individu...

5.5CVSS5.8AI score0.00162EPSS
SaveExploits0References39
osv_cve
osv_cve
•added 2026/06/24 4:29 p.m.•36 views

CVE-2026-53022 platform/x86: dell-wmi-sysman: bound enumeration string aggregation

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: bound enumeration string aggregation populateenumdata aggregates firmware-provided value-modifier and possible-value strings into fixed 512-byte struct members. The current code bounds each individu...

5.8AI score0.00162EPSS
SaveExploits0References10
CVE
CVE
•added 2026/06/24 4:29 p.m.•50 views

CVE-2026-53022

CVE-2026-53022 concerns the Linux kernel component platform/x86 dell-wmi-sysman where firmware-provided value-modifier and possible-value strings are aggregated into fixed buffers. The root cause is that while individual source strings are bounded, the code uses strcat to append strings and separ...

5.5CVSS5.8AI score0.00162EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
•added 2026/06/24 4:29 p.m.•59 views

CVE-2026-53022 platform/x86: dell-wmi-sysman: bound enumeration string aggregation

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: bound enumeration string aggregation populateenumdata aggregates firmware-provided value-modifier and possible-value strings into fixed 512-byte struct members. The current code bounds each individu...

0.00162EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/24 12:00 a.m.•5 views

CVE-2026-53022: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: bound enumeration string aggregation populateenumdata aggregates firmware-provided value-modifier and possible-value strings into fixed 512-byte struct members. The current code bounds each individu...

5.5CVSS5.9AI score0.00162EPSS
SaveExploits0References8
Rows per page
Query Builder