Lucene search
+L

61 matches found

OSV
OSV
added 2024/05/21 3:15 p.m.4 views

UBUNTU-CVE-2021-47296

In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Fix kvmarchvcpuioctl vcpuload leak vcpuput is not called if the user copy fails. This can result in preempt notifier corruption and crashes, among other issues...

5.5CVSS5.8AI score0.00225EPSS
Exploits0References8
Cvelist
Cvelist
added 2024/05/21 2:35 p.m.32 views

CVE-2021-47296 KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak

In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Fix kvmarchvcpuioctl vcpuload leak vcpuput is not called if the user copy fails. This can result in preempt notifier corruption and crashes, among other issues...

6.6AI score0.00225EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2024/05/21 2:35 p.m.50 views

CVE-2021-47296

In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Fix kvmarchvcpuioctl vcpuload leak vcpuput is not called if the user copy fails. This can result in preempt notifier corruption and crashes, among other issues...

5.5CVSS6.4AI score0.00225EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2024/05/19 12:0 a.m.14 views

PT-2024-26766 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue arises when a userland application is executing vector code and receives a signal. Upon returning from the signal handler using the rt sigreturn syscall, the live vector stat...

9.1CVSS6.9AI score0.01401EPSS
Exploits1References537
SUSE CVE
SUSE CVE
added 2024/04/09 2:29 a.m.5 views

SUSE CVE-2024-26746

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Ensure safe user copy of completion record If CONFIGHARDENEDUSERCOPY is enabled, copying completion record from event log cache to user triggers a kernel bug. 1987.159822 usercopy: Kernel memory exposure attempt...

5.5CVSS7.5AI score0.00225EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2024/04/04 3:52 p.m.26 views

CVE-2024-26746

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Ensure safe user copy of completion record If CONFIGHARDENEDUSERCOPY is enabled, copying completion record from event log cache to user triggers a kernel bug. 1987.159822 usercopy: Kernel memory exposure attempt...

4.4CVSS6.8AI score0.00225EPSS
Exploits0References4
NVD
NVD
added 2024/04/04 9:15 a.m.20 views

CVE-2024-26746

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Ensure safe user copy of completion record If CONFIGHARDENEDUSERCOPY is enabled, copying completion record from event log cache to user triggers a kernel bug. 1987.159822 usercopy: Kernel memory exposure attempt...

5.5CVSS6.3AI score0.00225EPSS
Exploits0References3
OSV
OSV
added 2024/04/04 9:15 a.m.0 views

DEBIAN-CVE-2024-26746

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Ensure safe user copy of completion record If CONFIGHARDENEDUSERCOPY is enabled, copying completion record from event log cache to user triggers a kernel bug. 1987.159822 usercopy: Kernel memory exposure attempt...

5.5CVSS5.6AI score0.00225EPSS
Exploits0References1
OSV
OSV
added 2024/04/04 9:15 a.m.8 views

UBUNTU-CVE-2024-26746

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Ensure safe user copy of completion record If CONFIGHARDENEDUSERCOPY is enabled, copying completion record from event log cache to user triggers a kernel bug. 1987.159822 usercopy: Kernel memory exposure attempt...

5.5CVSS6.5AI score0.00225EPSS
Exploits0References5
CVE
CVE
added 2024/04/04 8:20 a.m.153 views

CVE-2024-26746

The CVE-2024-26746 issue is a Linux kernel vulnerability where event log cache allocation used kmem_cache_create is unsafe for user copies, triggering a kernel bug when HARDENED_USERCOPY is enabled. The connected PT/ Nessus entries confirm the problem is tied to the idxd event log completion reco...

5.5CVSS6.5AI score0.00225EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/04 8:20 a.m.20 views

CVE-2024-26746 dmaengine: idxd: Ensure safe user copy of completion record

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Ensure safe user copy of completion record If CONFIGHARDENEDUSERCOPY is enabled, copying completion record from event log cache to user triggers a kernel bug. 1987.159822 usercopy: Kernel memory exposure attempt...

6.7AI score0.00225EPSS
Exploits0References3
OSV
OSV
added 2024/04/04 8:20 a.m.8 views

CVE-2024-26746 dmaengine: idxd: Ensure safe user copy of completion record

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Ensure safe user copy of completion record If CONFIGHARDENEDUSERCOPY is enabled, copying completion record from event log cache to user triggers a kernel bug. 1987.159822 usercopy: Kernel memory exposure attempt...

5.5CVSS5.8AI score0.00225EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2024/04/04 8:20 a.m.60 views

CVE-2024-26746

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Ensure safe user copy of completion record If CONFIGHARDENEDUSERCOPY is enabled, copying completion record from event log cache to user triggers a kernel bug. 1987.159822 usercopy: Kernel memory exposure attempt...

5.5CVSS6.2AI score0.00225EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2024/04/04 12:0 a.m.29 views

CVE-2024-26746

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Ensure safe user copy of completion record If CONFIGHARDENEDUSERCOPY is enabled, copying completion record from event log cache to user triggers a kernel bug. 1987.159822 usercopy: Kernel memory exposure attempt...

5.5CVSS6.3AI score0.00225EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2022/06/09 3:15 p.m.12 views

CVE-2022-1998

A use after free in the Linux kernel File System notify functionality was found in the way user triggers copyinforecordstouser call to fail in copyeventtouser. A local user could use this flaw to crash the system or potentially escalate their privileges on the system...

7.8CVSS6.7AI score0.00323EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2022/03/08 4:48 p.m.9 views

kernel: failing usercopy allows for use-after-free exploitation

A use-after-free flaw was found in the Linux kernel’s vmwexecbufcopyfenceuser function in drivers/gpu/drm/vmwgfx/vmwgfxexecbuf.c in vmwgfx. This flaw allows a local attacker with user privileges to cause a privilege escalation problem...

7.8CVSS7.1AI score0.02579EPSS
Exploits3References4
OSV
OSV
added 2022/01/19 9:15 p.m.2 views

DEBIAN-CVE-2021-23225

Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the "newusername" field during creation of a new user via "Copy" method at useradmin.php...

5.4CVSS6.9AI score0.00532EPSS
Exploits0References1
OSV
OSV
added 2021/04/02 5:15 a.m.10 views

CVE-2021-30002

An issue was discovered in the Linux kernel before 5.11.3 when a webcam device exists. videousercopy in drivers/media/v4l2-core/v4l2-ioctl.c has a memory leak for large arguments, aka CID-fb18802a338b...

6.2CVSS7.7AI score
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2021/04/02 5:15 a.m.5 views

CVE-2021-30002

An issue was discovered in the Linux kernel before 5.11.3 when a webcam device exists. videousercopy in drivers/media/v4l2-core/v4l2-ioctl.c has a memory leak for large arguments, aka CID-fb18802a338b...

6.2CVSS6.7AI score0.00369EPSS
Exploits0References5
OSV
OSV
added 2016/11/16 5:59 a.m.4 views

DEBIAN-CVE-2016-7912

Use-after-free vulnerability in the ffsusercopyworker function in drivers/usb/gadget/function/ffs.c in the Linux kernel before 4.5.3 allows local users to gain privileges by accessing an I/O data structure after a certain callback call...

7.8CVSS7.5AI score0.0211EPSS
Exploits0References1
Rows per page
Query Builder