Lucene search
+L

646 matches found

Positive Technologies
Positive Technologies
added 2025/09/05 12:0 a.m.14 views

PT-2025-36319

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the shrink folio list function related to handling hardware-poisoned large folios. Specifically, the function fails to correctly handle large...

8.5CVSS6.3AI score0.07644EPSS
SaveExploits3References603
The Hacker News
The Hacker News
added 2025/08/25 8:13 a.m.5 views

Transparent Tribe Targets Indian Govt With Weaponized Desktop Shortcuts via Phishing

The advanced persistent threat APT actor known as Transparent Tribe has been observed targeting both Windows and BOSS Bharat Operating System Solutions Linux systems with malicious Desktop shortcut files in attacks targeting Indian Government entities. "Initial access is achieved through...

7.5AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-38442

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: block: reject bs ps block devices when THP is disabled If THP is disabled and when a block...

5.5CVSS5.3AI score0.00137EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2020-29368

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in splithugepmd in mm/hugememory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access...

7CVSS6.3AI score0.0036EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/12 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2017-1000405

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmdmkdirty in the touchpmd function inside the THP implementation. touchpmd can be reach...

7CVSS6.2AI score0.02841EPSS
SaveExploits10References2
Tenable Nessus
Tenable Nessus
added 2025/08/09 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-22034

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/gup: reject FOLLSPLITPMD with hugetlb VMAs Patch series mm: fixes for device-exclusive...

7.8CVSS5.6AI score0.0026EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
added 2025/08/07 7:0 a.m.4 views

tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer

...

7.8CVSS6.8AI score0.00172EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2025/07/25 11:23 p.m.10 views

SUSE CVE-2025-38442

In the Linux kernel, the following vulnerability has been resolved: block: reject bs ps block devices when THP is disabled If THP is disabled and when a block device with logical block size page size is present, the following null ptr deref panic happens during boot: 13.2 mK AOSAN: null-ptr-deref...

5.5CVSS6.5AI score0.00137EPSS
SaveExploits0References3
OSV
OSV
added 2025/07/25 4:15 p.m.4 views

UBUNTU-CVE-2025-38442

In the Linux kernel, the following vulnerability has been resolved: block: reject bs ps block devices when THP is disabled If THP is disabled and when a block device with logical block size page size is present, the following null ptr deref panic happens during boot: 13.2 mK AOSAN: null-ptr-deref...

5.5CVSS5.7AI score0.00137EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2025/07/25 3:27 p.m.5 views

CVE-2025-38442

In the Linux kernel, the following vulnerability has been resolved: block: reject bs ps block devices when THP is disabled If THP is disabled and when a block device with logical block size page size is present, the following null ptr deref panic happens during boot: 13.2 mK AOSAN: null-ptr-deref...

5.5CVSS5.7AI score0.00137EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2025/07/25 3:27 p.m.11 views

CVE-2025-38442 block: reject bs > ps block devices when THP is disabled

In the Linux kernel, the following vulnerability has been resolved: block: reject bs ps block devices when THP is disabled If THP is disabled and when a block device with logical block size page size is present, the following null ptr deref panic happens during boot: 13.2 mK AOSAN: null-ptr-deref...

5.5CVSS6.5AI score0.00137EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/07/25 12:0 a.m.11 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a null pointer dereference that may result from handling devices with logical block sizes larger than the pa...

5.5CVSS6.2AI score0.00137EPSS
SaveExploits0References3
HackRead
HackRead
added 2025/07/08 9:10 a.m.8 views

Pakistan’s Transparent Tribe Hits Indian Defence with Linux Malware

Pakistan’s APT36 Transparent Tribe uses phishing and Linux malware to target Indian defence systems running BOSS Linux says Cyfirma...

7.3AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/07/04 12:0 a.m.6 views

PT-2025-30856 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel related to block device handling when Transparent Huge Pages THP are disabled. Specifically, the kernel may attempt to process block devices with a...

4.6CVSS6AI score0.00137EPSS
SaveExploits0References13
RedHat Linux
RedHat Linux
added 2025/06/24 4:41 a.m.10 views

kernel: tipc: fix use-after-free Read in tipc_named_reinit

A vulnerability was found in the Linux kernel's Transparent Inter-Process Communication TIPC subsystem, allowing a use-after-free condition during the cleanup process. This issue arises when the kernel's work queue mechanism does not properly synchronize the destruction of TIPC namespaces with th...

7.8CVSS5.8AI score0.00288EPSS
SaveExploits0References5
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.5 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: mm/gup: rejects FOLLSPLITPMD with hugetlb VMAs. The patch series “mm: fixes for device-exclusive entries hmm”, version 2. While discussing the PageTail call in makedeviceexclusiverange, I recently discovered that device-exclusive...

5.5CVSS6.3AI score0.0026EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.8 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: netfilter: socket: Lookup orig tuple for IPv6 SNAT The nfsklookupslowv4 function performs the conntrack lookup for IPv4 packets in order to restore the original 5-tuple in case of SNAT, so that the correct socket if any can be...

5.5CVSS6.2AI score0.00429EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/05/21 8:1 p.m.12 views

CVE-2009-1211

Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet...

5.8CVSS7.1AI score0.01357EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 7:26 p.m.25 views

CVE-2009-0802

Qbik WinGate, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites,...

5.4CVSS7.1AI score0.02424EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/05/21 12:46 a.m.15 views

SUSE CVE-2025-37958

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: fix dereferencing invalid pmd migration entry When migrating a THP, concurrent access to the PMD migration entry during a deferred split scan can lead to an invalid address access, as illustrated below. To prevent...

5.5CVSS7.8AI score0.00173EPSS
SaveExploits0References21
Rows per page
Query Builder