Lucene search
+L

13590 matches found

Cvelist
Cvelist
added 2025/09/18 1:33 p.m.12 views

CVE-2022-50389 tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak

In the Linux kernel, the following vulnerability has been resolved: tpm: tpmcrb: Add the missed acpiputtable to fix memory leak In crbacpiadd, we get the TPM2 table to retrieve information like start method, and then assign them to the priv data, so the TPM2 table is not used after the init, shou...

0.00146EPSS
SaveExploits0References8
CVE
CVE
added 2025/09/18 1:33 p.m.28 views

CVE-2022-50389

CVE-2022-50389 : In the Linux kernel, tpm_crb memory leak fix involves adding a call to acpi_put_table() in crb_acpi_add() after retrieving TPM2 table info. This prevents leaking the TPM2 ACPI table after init. The connected advisory explicitly states the root cause and the remediation (acpi_put_...

5.5CVSS6.1AI score0.00146EPSS
SaveExploits0References8Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/18 12:0 a.m.7 views

PT-2025-51603

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s DRM/amdgpu/atom subsystem. Specifically, a potential NULL pointer dereference can occur in the atom get src int function when accessing WS entries if...

4CVSS5.7AI score0.00193EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/09/18 12:0 a.m.5 views

PT-2025-38337

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where a memory leak occurs in the crb acpi add function. This is due to the failure to free the TPM2 table after retrieving information like the start...

6.3AI score0.00146EPSS
SaveExploits0References10
OSV
OSV
added 2025/09/17 3:15 p.m.7 views

UBUNTU-CVE-2023-53353

In the Linux kernel, the following vulnerability has been resolved: accel/habanalabs: postpone memmgr IDR destruction to hprivrelease The memory manager IDR is currently destroyed when user releases the file descriptor. However, at this point the user context might be still held, and memory buffe...

5.5CVSS5.7AI score0.00156EPSS
SaveExploits0References5
NVD
NVD
added 2025/09/17 1:15 p.m.10 views

CVE-2025-53884

NeuVector stores user passwords and API keys using a simple, unsalted hash. This method is vulnerable to rainbow table attack offline attack where hashes of known passwords are precomputed...

5.3CVSS0.00162EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/09/17 12:27 p.m.8 views

CVE-2025-53884 NeuVector has an insecure password storage vulnerable to rainbow attack

NeuVector stores user passwords and API keys using a simple, unsalted hash. This method is vulnerable to rainbow table attack offline attack where hashes of known passwords are precomputed...

5.3CVSS6.5AI score0.00162EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/17 12:27 p.m.13 views

CVE-2025-53884 NeuVector has an insecure password storage vulnerable to rainbow attack

NeuVector stores user passwords and API keys using a simple, unsalted hash. This method is vulnerable to rainbow table attack offline attack where hashes of known passwords are precomputed...

5.3CVSS6AI score
SaveExploits0References4
Cvelist
Cvelist
added 2025/09/17 12:27 p.m.19 views

CVE-2025-53884 NeuVector has an insecure password storage vulnerable to rainbow attack

NeuVector stores user passwords and API keys using a simple, unsalted hash. This method is vulnerable to rainbow table attack offline attack where hashes of known passwords are precomputed...

5.3CVSS0.00162EPSS
SaveExploits0References2
CVE
CVE
added 2025/09/17 12:27 p.m.37 views

CVE-2025-53884

CVE-2025-53884 concerns NeuVector, where passwords and API keys are stored using a simple, unsalted hash. The provided documents state this scheme is vulnerable to rainbow table attacks (offline hash precomputation), enabling potential credential exposure if hashes are compromised. The NVD entry ...

5.3CVSS6.5AI score0.00162EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/17 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2023-53285

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: add bounds checking in getmaxinlinexattrvaluesize Normally the extended attributes in the inode body would have been checked when the inode is first opene...

7.8CVSS6.5AI score0.00145EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/09/17 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2022-50273

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: fix to do sanity check on destination blkaddr during recovery As Wenqing Liu reported in bugzilla: https://bugzilla.kernel.org/showbug.cgi?id=216456 loop5...

5.5CVSS5.6AI score0.00156EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2025/09/16 11:34 p.m.4 views

SUSE CVE-2022-50275

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Add the missed acpiputtable to fix memory leak When the radeon driver reads the bios information from ACPI table in radeonacpivfctbios, it misses to call acpiputtable to release the ACPI memory after the init, so add...

4.4CVSS6.3AI score0.00156EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2025/09/16 11:31 p.m.7 views

SUSE CVE-2023-53200

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: fix percpu counter block leak on error path when creating new netns Here is the stack where we allocate percpu counter block: +- ip6tregistertable +- translatetable allocates percpu counter block +-...

5.5CVSS6.6AI score0.00155EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2025/09/16 11:30 p.m.6 views

SUSE CVE-2023-53285

In the Linux kernel, the following vulnerability has been resolved: ext4: add bounds checking in getmaxinlinexattrvaluesize Normally the extended attributes in the inode body would have been checked when the inode is first opened, but if someone is writing to the block device while the file syste...

6.4CVSS5.7AI score0.00145EPSS
SaveExploits0References4
OSV
OSV
added 2025/09/16 8:15 a.m.7 views

DEBIAN-CVE-2023-53285

In the Linux kernel, the following vulnerability has been resolved: ext4: add bounds checking in getmaxinlinexattrvaluesize Normally the extended attributes in the inode body would have been checked when the inode is first opened, but if someone is writing to the block device while the file syste...

7.8CVSS5.6AI score0.00145EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/16 8:15 a.m.5 views

DEBIAN-CVE-2023-53271

In the Linux kernel, the following vulnerability has been resolved: ubi: Fix unreferenced object reported by kmemleak in ubiresizevolume There is a memory leaks problem reported by kmemleak: unreferenced object 0xffff888102007a00 size 128: comm "ubirsvol", pid 32090, jiffies 4298464136 age...

5.5CVSS5.4AI score0.00146EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/16 8:15 a.m.8 views

CVE-2023-53271

In the Linux kernel, the following vulnerability has been resolved: ubi: Fix unreferenced object reported by kmemleak in ubiresizevolume There is a memory leaks problem reported by kmemleak: unreferenced object 0xffff888102007a00 size 128: comm "ubirsvol", pid 32090, jiffies 4298464136 age...

5.5CVSS0.00146EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2025/09/16 8:11 a.m.15 views

CVE-2023-53285 ext4: add bounds checking in get_max_inline_xattr_value_size()

In the Linux kernel, the following vulnerability has been resolved: ext4: add bounds checking in getmaxinlinexattrvaluesize Normally the extended attributes in the inode body would have been checked when the inode is first opened, but if someone is writing to the block device while the file syste...

7.1CVSS0.00145EPSS
SaveExploits0References9
Debian CVE
Debian CVE
added 2025/09/16 8:11 a.m.11 views

CVE-2023-53285

In the Linux kernel, the following vulnerability has been resolved: ext4: add bounds checking in getmaxinlinexattrvaluesize Normally the extended attributes in the inode body would have been checked when the inode is first opened, but if someone is writing to the block device while the file syste...

7.8CVSS5.6AI score0.00145EPSS
SaveExploits0
Rows per page
Query Builder