Lucene search
+L

16633 matches found

Cvelist
Cvelist
•added 2025/03/27 4:43 p.m.•30 views

CVE-2023-53031 powerpc/imc-pmu: Fix use of mutex in IRQs disabled section

In the Linux kernel, the following vulnerability has been resolved: powerpc/imc-pmu: Fix use of mutex in IRQs disabled section Current imc-pmu code triggers a WARNING with CONFIGDEBUGATOMICSLEEP and CONFIGPROVELOCKING enabled, while running a threadimc event. Command to trigger the warning: perf...

0.0015EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2025/03/27 4:43 p.m.•25 views

CVE-2023-53031

In the Linux kernel, the following vulnerability has been resolved: powerpc/imc-pmu: Fix use of mutex in IRQs disabled section Current imc-pmu code triggers a WARNING with CONFIGDEBUGATOMICSLEEP and CONFIGPROVELOCKING enabled, while running a threadimc event. Command to trigger the warning: perf...

5.5CVSS6.3AI score0.0015EPSS
SaveExploits0
CVE
CVE
•added 2025/03/27 4:43 p.m.•109 views

CVE-2023-53030

CVE-2023-53030 affects the Linux kernel in octeontx2-pf where GFP_KERNEL was used in a context with preemption disabled, triggering a warning (CONFIG_DEBUG_ATOMIC_SLEEP) and potential sleeping in atomic context. The issue is resolved by avoiding GFP_KERNEL in atomic contexts and disabling preempt...

5.5CVSS5.9AI score0.00148EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2025/03/27 4:43 p.m.•47 views

CVE-2023-53010 bnxt: Do not read past the end of test names

In the Linux kernel, the following vulnerability has been resolved: bnxt: Do not read past the end of test names Test names were being concatenated based on a offset beyond the end of the first name, which tripped the buffer overflow detection logic: detected buffer overflow in strnlen ... Call...

0.00193EPSS
SaveExploits0References2
NVD
NVD
•added 2025/03/27 3:15 p.m.•22 views

CVE-2025-21876

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix suspicious RCU usage Commit "iommu/vt-d: Allocate DMAR fault interrupts locally" moved the call to enabledrhdfaulthandling to a code path that does not hold any lock while traversing the drhd list. Fix it by...

8.8CVSS0.00216EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2025/03/27 2:57 p.m.•19 views

CVE-2025-21876 iommu/vt-d: Fix suspicious RCU usage

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix suspicious RCU usage Commit "iommu/vt-d: Allocate DMAR fault interrupts locally" moved the call to enabledrhdfaulthandling to a code path that does not hold any lock while traversing the drhd list. Fix it by...

8.8CVSS6AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2025/03/27 2:57 p.m.•5 views

CVE-2025-21876 iommu/vt-d: Fix suspicious RCU usage

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix suspicious RCU usage Commit "iommu/vt-d: Allocate DMAR fault interrupts locally" moved the call to enabledrhdfaulthandling to a code path that does not hold any lock while traversing the drhd list. Fix it by...

8.8CVSS6.1AI score0.00216EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2025/03/27 2:57 p.m.•50 views

CVE-2025-21876

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix suspicious RCU usage Commit "iommu/vt-d: Allocate DMAR fault interrupts locally" moved the call to enabledrhdfaulthandling to a code path that does not hold any lock while traversing the drhd list. Fix it by...

8.8CVSS6.3AI score0.00216EPSS
SaveExploits0
CVE
CVE
•added 2025/03/27 2:57 p.m.•136 views

CVE-2025-21876

CVE-2025-21876 affects the Linux kernel iommu/vt-d code (DMAR) where a call to enable_drhd_fault_handling() was moved in a path that does not hold any lock while traversing the drhd list. The fix ensures dmar_global_lock is held while traversing the drhd list to prevent suspicious RCU usage. With...

8.8CVSS6.1AI score0.00216EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2025/03/27 2:57 p.m.•41 views

CVE-2025-21876 iommu/vt-d: Fix suspicious RCU usage

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix suspicious RCU usage Commit "iommu/vt-d: Allocate DMAR fault interrupts locally" moved the call to enabledrhdfaulthandling to a code path that does not hold any lock while traversing the drhd list. Fix it by...

8.8CVSS0.00216EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/03/27 1:38 p.m.•39 views

CVE-2025-21868 net: allow small head cache usage with large MAX_SKB_FRAGS values

In the Linux kernel, the following vulnerability has been resolved: net: allow small head cache usage with large MAXSKBFRAGS values Sabrina reported the following splat: WARNING: CPU: 0 PID: 1 at net/core/dev.c:6935 netifnapiaddweightlocked+0x8f2/0xba0 Modules linked in: CPU: 0 UID: 0 PID: 1 Comm...

7.5CVSS0.00389EPSS
SaveExploits0References4
GithubExploit
GithubExploit
•added 2025/03/27 6:22 a.m.•196 views

Exploit for CVE-2025-30208

Disclaimer: The vulnerabilities described in this document, a...

5.3CVSS7AI score0.74771EPSS
SaveExploits30
CVE
CVE
•added 2025/03/27 12:00 a.m.•98 views

CVE-2025-29072

An integer overflow vulnerability exists in Nethermind Juno before version v.12.05 . The issue stems from improper bounds checking within the Sierra bytecode decompression logic located in the cairo-lang-starknet-classes library. A remote attacker can exploit this by submitting a malicious Declar...

7.5CVSS7.3AI score0.00492EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2025/03/27 12:00 a.m.•23 views

CVE-2025-29072

An integer overflow in Nethermind Juno before v.12.05 within the Sierra bytecode decompression logic within the "cairo-lang-starknet-classes" library could allow remote attackers to trigger an infinite loop and high CPU usage by submitting a malicious Declare v2/v3 transaction. This results in a...

7.5CVSS7.4AI score
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2025/03/27 12:00 a.m.•24 views

python-multipart Uncontrolled Resource Consumption DoS

The vulnerability of the python-multipart streaming multi-component parser is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS7.7AI score0.00635EPSS
SaveExploits0References5Affected Software3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/27 12:00 a.m.•3 views

CVE-2025-21876: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix suspicious RCU usage Commit "iommu/vt-d: Allocate DMAR fault interrupts locally" moved the call to enabledrhdfaulthandling to a code path that does not hold any lock while traversing the drhd list. Fix it by...

8.8CVSS6.1AI score0.00216EPSS
SaveExploits0References4
GithubExploit
GithubExploit
•added 2025/03/26 3:42 p.m.•363 views

Exploit for CVE-2025-30208

CVE-2025-30208-EXP A vulnerability in Vite’s server’s arbitr...

5.3CVSS6.8AI score0.74771EPSS
SaveExploits30
AlmaLinux
AlmaLinux
•added 2025/03/26 12:00 a.m.•28 views

Moderate: nginx:1.22 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: specially crafted MP4 file may cause denial of service CVE-2024-7347 For more details about the security issues, including the impact, a...

5.7CVSS6.3AI score0.0032EPSS
SaveExploits1References3
Huntr
Huntr
•added 2025/03/24 2:50 p.m.•23 views

Using Mermaid to cause JS memory overflow and service downtime

Description Librechat has many means of limiting the rate, which can be found at https://www.librechat.ai/docs/configuration/librechatyaml/objectstructure/configratelimits. However, it can be found that the Fork Function in /api/convos/fork is not restricted, which allows attackers to fork...

5.7CVSS6.2AI score0.00301EPSS
SaveExploits0
Veracode
Veracode
•added 2025/03/24 3:53 a.m.•19 views

Denial Of Service (DoS)

github.com/getkin/kin-openapi is vulnerable to Denial Of Service DoS. The vulnerability is due to the ZipFileBodyDecoder being automatically registered by the module, contrary to the documentation, allowing attackers to upload malicious ZIP files and cause excessive memory usage...

7.5CVSS6.3AI score0.00621EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder