Lucene search
K

76 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-13185

Malicious code in bioql PyPI...

7AI score0.00153EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2021-47475

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - comedi: vmk80xx: fix transfer-buffer overflows The driver uses endpoint-sized USB transfer buffers but up until recently had no sanity checks on the sizes. Comm...

7.8CVSS6.4AI score0.00259EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2025/05/03 2:51 a.m.2 views

SUSE CVE-2023-53085

In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix info leak when failing to get panel id Make sure to clear the transfer buffer before fetching the EDID to avoid leaking slab data to the logs on errors that leave the buffer unchanged...

5.5CVSS6.9AI score0.00153EPSS
Exploits0References3
NVD
NVD
added 2025/05/02 4:15 p.m.8 views

CVE-2023-53085

In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix info leak when failing to get panel id Make sure to clear the transfer buffer before fetching the EDID to avoid leaking slab data to the logs on errors that leave the buffer unchanged...

7.1CVSS0.00153EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2025/05/02 4:15 p.m.5 views

CVE-2023-53085

In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix info leak when failing to get panel id Make sure to clear the transfer buffer before fetching the EDID to avoid leaking slab data to the logs on errors that leave the buffer unchanged...

7.1CVSS6.4AI score0.00153EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2025/05/02 4:15 p.m.3 views

DEBIAN-CVE-2023-53085

In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix info leak when failing to get panel id Make sure to clear the transfer buffer before fetching the EDID to avoid leaking slab data to the logs on errors that leave the buffer unchanged...

7.1CVSS5.8AI score0.00153EPSS
Exploits0References1
OSV
OSV
added 2025/05/02 4:15 p.m.1 views

UBUNTU-CVE-2023-53085

In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix info leak when failing to get panel id Make sure to clear the transfer buffer before fetching the EDID to avoid leaking slab data to the logs on errors that leave the buffer unchanged...

7.1CVSS6.5AI score0.00153EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/05/02 3:55 p.m.11 views

CVE-2023-53085 drm/edid: fix info leak when failing to get panel id

In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix info leak when failing to get panel id Make sure to clear the transfer buffer before fetching the EDID to avoid leaking slab data to the logs on errors that leave the buffer unchanged...

0.00153EPSS
Exploits0References2
OSV
OSV
added 2025/05/02 3:55 p.m.4 views

CVE-2023-53085 drm/edid: fix info leak when failing to get panel id

In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix info leak when failing to get panel id Make sure to clear the transfer buffer before fetching the EDID to avoid leaking slab data to the logs on errors that leave the buffer unchanged...

7.1CVSS6.1AI score0.00153EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/02/22 9:43 a.m.29 views

CVE-2025-21704 usb: cdc-acm: Check control transfer buffer size before access

In the Linux kernel, the following vulnerability has been resolved: usb: cdc-acm: Check control transfer buffer size before access If the first fragment is shorter than struct usbcdcnotification, we can't calculate an expectedsize. Log an error and discard the notification instead of reading...

0.0032EPSS
Exploits1References9
Debian CVE
Debian CVE
added 2025/02/22 9:43 a.m.19 views

CVE-2025-21704

In the Linux kernel, the following vulnerability has been resolved: usb: cdc-acm: Check control transfer buffer size before access If the first fragment is shorter than struct usbcdcnotification, we can't calculate an expectedsize. Log an error and discard the notification instead of reading...

7.8CVSS6AI score0.0032EPSS
Exploits1
CVE
CVE
added 2025/02/22 9:43 a.m.2437 views

CVE-2025-21704

CVE-2025-21704 affects the Linux kernel USB CDC-ACM (cdc_acm) path. The root cause is improper handling of fragmented control transfers: if the first fragment is smaller than struct usb_cdc_notification, computing expected_size can underflow as fragments arrive, leading to memory corruption when ...

7.8CVSS7AI score0.0032EPSS
Exploits1References12Affected Software1
CNNVD
CNNVD
added 2025/02/22 12:0 a.m.2 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the usb:cdc-acm module not checking the transfer buffer size before accessing it...

7.8CVSS6.5AI score0.0032EPSS
Exploits1References6
Tenable Nessus
Tenable Nessus
added 2025/02/10 12:0 a.m.8 views

Azure Linux 3.0 Security Update: kernel (CVE-2024-36477)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36477 advisory. - In the Linux kernel, the following vulnerability has been resolved: tpmtisspi: Account for SPI header when...

7.8CVSS6.1AI score0.0022EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2024/11/12 9:11 a.m.2 views

kernel: tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer

In the Linux kernel, the following vulnerability has been resolved: tpmtisspi: Account for SPI header when allocating TPM SPI xfer buffer The TPM SPI transfer mechanism uses MAXSPIFRAMESIZE for computing the maximum transfer length and the size of the transfer buffer. As such, it does not account...

7.8CVSS6.4AI score0.0022EPSS
Exploits0References5
Microsoft CVE
Microsoft CVE
added 2024/07/12 12:0 a.m.3 views

CVE-2024-36477

...

7.8CVSS6.4AI score0.0022EPSS
Exploits0
OSV
OSV
added 2024/06/21 12:15 p.m.8 views

AZL-42857 CVE-2024-36477 affecting package kernel for versions less than 5.15.160.1-1

In the Linux kernel, the following vulnerability has been resolved: tpmtisspi: Account for SPI header when allocating TPM SPI xfer buffer The TPM SPI transfer mechanism uses MAXSPIFRAMESIZE for computing the maximum transfer length and the size of the transfer buffer. As such, it does not account...

7.8CVSS6.3AI score0.0022EPSS
Exploits0References1
OSV
OSV
added 2024/06/21 12:15 p.m.1 views

DEBIAN-CVE-2024-36477

In the Linux kernel, the following vulnerability has been resolved: tpmtisspi: Account for SPI header when allocating TPM SPI xfer buffer The TPM SPI transfer mechanism uses MAXSPIFRAMESIZE for computing the maximum transfer length and the size of the transfer buffer. As such, it does not account...

7.8CVSS5.8AI score0.0022EPSS
Exploits0References1
OSV
OSV
added 2024/05/22 9:15 a.m.9 views

CVE-2021-47475

In the Linux kernel, the following vulnerability has been resolved: comedi: vmk80xx: fix transfer-buffer overflows The driver uses endpoint-sized USB transfer buffers but up until recently had no sanity checks on the sizes. Commit e1f13c879a7c "staging: comedi: check validity of wMaxPacketSize of...

7.8CVSS6.7AI score
Exploits0References9
UbuntuCve
UbuntuCve
added 2024/05/22 9:15 a.m.17 views

CVE-2021-47475

In the Linux kernel, the following vulnerability has been resolved: comedi: vmk80xx: fix transfer-buffer overflows The driver uses endpoint-sized USB transfer buffers but up until recently had no sanity checks on the sizes. Commit e1f13c879a7c "staging: comedi: check validity of wMaxPacketSize of...

7.8CVSS6.2AI score0.00259EPSS
Exploits0References11
Rows per page
Query Builder