Lucene search
K

15 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.5 views

Astra Linux - уязвимость в linux-5.10, linux

A flaw was discovered in the udmabuf device driver of the Linux kernel. The specific flaw resides within a fault handler. The issue arises due to the lack of proper validation of user-supplied data, which can lead to a memory access beyond the end of an array. An attacker can exploit this...

7.8CVSS7.2AI score0.01013EPSS
Exploits1References2
EUVD
EUVD
added 2025/12/30 3:30 p.m.5 views

EUVD-2022-55879

In the Linux kernel, the following vulnerability has been resolved: udmabuf: Set ubuf-sg = NULL if the creation of sg table fails When userspace tries to map the dmabuf and if for some reason e.g. OOM the creation of the sg table fails, ubuf-sg needs to be set to NULL. Otherwise, when the userspa...

6AI score0.00201EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-33538

Malicious code in bioql PyPI...

7.8CVSS7.2AI score0.01013EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2025/09/08 12:6 p.m.4 views

kernel: udmabuf: fix a buf size overflow issue during udmabuf creation

A buffer-overflow vulnerability was found in the Linux kernel's udmabuf driver. The flaw occurs in the udmabufcreate function, which calculates the page count limit pglimit using the variable sizelimitmb. This size variable can be misinterpreted as either 32-bit or 64-bit, resulting in incorrect...

7.8CVSS7.3AI score0.00177EPSS
Exploits0References5
OSV
OSV
added 2025/08/07 7:52 a.m.8 views

CLSA-2025-1754553172 kernel: Fix of 17 CVEs

net: ch9200: fix uninitialised access during miinwayrestart CVE-2025-38086 - jbd2: fix assertion 'jh-bfrozendata == NULL' failure when journal aborted CVE-2022-50126 - kernfs: fix potential NULL dereference in kernfsremove CVE-2022-50148 - md-raid10: fix KASAN warning CVE-2022-50211 - xhci: Fix...

7.8CVSS6.8AI score0.00224EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2025/01/31 12:0 a.m.4 views

The vulnerability of the udmabuf_vm_fault() function in the udmabuf driver (drivers/dma-buf/udmabuf.c) in Linux kernel allows a attacker to compromise data integrity or cause service failures.

The vulnerability of the udmabufvmfault function in the udmabuf driver drivers/dma-buf/udmabuf.c in Linux operating systems is related to a flaw in the counting of the number of references to pages stored in memory. Exploiting this vulnerability can allow an attacker to compromise data integrity ...

7.5CVSS5.5AI score
Exploits0References1Affected Software1
GithubExploit
GithubExploit
added 2023/06/12 2:41 p.m.757 views

Exploit for Improper Validation of Array Index in Linux Linux_Kernel

CVE-2023-2008 Proof of concept exploit for CVE-2023-2008, a b...

7.8CVSS6.3AI score0.01013EPSS
Exploits1
RedHat Linux
RedHat Linux
added 2023/06/06 1:40 p.m.6 views

kernel: udmabuf: improper validation of array index leading to local privilege escalation

A flaw was found in the Linux kernel's udmabuf device driver, within a fault handler. This issue occurs due to the lack of proper validation of user-supplied data, which can result in memory access past the end of an array. This may allow an attacker to escalate privileges and execute arbitrary...

7.8CVSS7AI score0.01013EPSS
Exploits1References5
SUSE CVE
SUSE CVE
added 2023/04/15 1:58 a.m.3 views

SUSE CVE-2023-2008

A flaw was found in the Linux kernel's udmabuf device driver. The specific flaw exists within a fault handler. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an array. An attacker can leverage this vulnerability to...

6.7CVSS6.1AI score0.01013EPSS
Exploits1References16
OSV
OSV
added 2023/04/14 9:15 p.m.3 views

CVE-2023-2008

A flaw was found in the Linux kernel's udmabuf device driver. The specific flaw exists within a fault handler. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an array. An attacker can leverage this vulnerability to...

7.8CVSS8.2AI score
Exploits0References4
OSV
OSV
added 2023/04/14 9:15 p.m.3 views

DEBIAN-CVE-2023-2008

A flaw was found in the Linux kernel's udmabuf device driver. The specific flaw exists within a fault handler. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an array. An attacker can leverage this vulnerability to...

7.8CVSS7.1AI score0.01013EPSS
Exploits1References1
OSV
OSV
added 2023/04/14 9:15 p.m.1 views

UBUNTU-CVE-2023-2008

A flaw was found in the Linux kernel's udmabuf device driver. The specific flaw exists within a fault handler. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an array. An attacker can leverage this vulnerability to...

7.8CVSS7AI score0.01013EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2023/04/14 5:6 p.m.44 views

CVE-2023-2008

A flaw was found in the Linux kernel's udmabuf device driver, within a fault handler. This issue occurs due to the lack of proper validation of user-supplied data, which can result in memory access past the end of an array. This may allow an attacker to escalate privileges and execute arbitrary...

8.2CVSS7.6AI score0.01013EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2022/11/15 11:55 a.m.1 views

kernel: udmabuf: improper validation of array index leading to local privilege escalation

A flaw was found in the Linux kernel's udmabuf device driver, within a fault handler. This issue occurs due to the lack of proper validation of user-supplied data, which can result in memory access past the end of an array. This may allow an attacker to escalate privileges and execute arbitrary...

7.8CVSS7AI score0.01013EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2022/11/15 11:38 a.m.5 views

kernel: udmabuf: improper validation of array index leading to local privilege escalation

A flaw was found in the Linux kernel's udmabuf device driver, within a fault handler. This issue occurs due to the lack of proper validation of user-supplied data, which can result in memory access past the end of an array. This may allow an attacker to escalate privileges and execute arbitrary...

7.8CVSS7AI score0.01013EPSS
Exploits1References5
Rows per page
Query Builder