Lucene search
+L

52 matches found

OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64327

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Initialize epfile-in early to fix endpoint direction checks When parsing endpoint descriptors, ffsdatagotdescs generates the epsaddrmap which contains the endpoint direction. However, epfile-in was previously on...

5.6AI score0.002EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/21 9:30 p.m.7 views

CVE-2026-10679 Divide-by-zero in DesignWare SPI driver reachable from spi_transceive syscall (local DoS)

The DesignWare SPI driver drivers/spi/spidw.c computed the SPI BAUDR clock divider as info-clockfrequency / config-frequency without validating config-frequency. spitransceive is a Zephyr syscall and its verify handler drivers/spi/spihandlers.c copies the caller-supplied spiconfig from userspace...

3.3CVSS5.2AI score
SaveExploits0References5
Cvelist
Cvelist
added 2026/07/21 9:30 p.m.26 views

CVE-2026-10679 Divide-by-zero in DesignWare SPI driver reachable from spi_transceive syscall (local DoS)

The DesignWare SPI driver drivers/spi/spidw.c computed the SPI BAUDR clock divider as info-clockfrequency / config-frequency without validating config-frequency. spitransceive is a Zephyr syscall and its verify handler drivers/spi/spihandlers.c copies the caller-supplied spiconfig from userspace...

3.3CVSS0.0013EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/21 9:30 p.m.27 views

CVE-2026-10679

The CVE-2026-10679 issue affects Zephyr’s DesignWare SPI driver (drivers/spi/spi_dw.c). The root cause is that the BAUDR clock divider was computed as info->clock_frequency / config->frequency without validating frequency, allowing a userspace thread with SPI access to pass frequency = 0, t...

5.5CVSS5.3AI score0.0013EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/01/06 10:48 p.m.38 views

CVE-2025-47332 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver

Memory corruption while processing a config call from userspace...

6.7CVSS0.00056EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2017-2667

Malware in sbrugna...

7.8CVSS7.9AI score0.00155EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2016-6788

Malware in sbrugna...

4.7CVSS5.3AI score0.00457EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2017-10104

Malware in sbrugna...

3.3CVSS4.3AI score0.00386EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2021-3565

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00282EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2025-1808

Malicious code in bioql PyPI...

4.9CVSS6.4AI score0.00354EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2024-53186

Malicious code in bioql PyPI...

7.8CVSS8.2AI score0.0027EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/09/15 12:0 a.m.7 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from unsafe reading of strings, which could lead to a crash during userspace address access...

7.1CVSS6.3AI score0.00149EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/08/08 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2018-18021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVMSETONREG ioctl. This is exploitable by attackers who ca...

7.1CVSS7.2AI score0.0057EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 10:39 a.m.11 views

CVE-2024-23374

Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to the haptics debugfs file...

6.7CVSS7.2AI score0.0011EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/06 8:32 a.m.88 views

CVE-2024-45577

The CVE-2024-45577 entry concerns memory corruption in Qualcomm camera kernel driver triggered by user-space IOCTL calls to dump request information. Affected component: camera kernel driver in Qualcomm chipsets (unspecified models in the documents). Root cause: improper handling of IOCTL request...

7.8CVSS7.7AI score0.001EPSS
SaveExploits0References1Affected Software1
FreeBSD
FreeBSD
added 2025/01/29 12:0 a.m.17 views

FreeBSD -- Uninitialized kernel memory disclosure via ktrace(2)

Problem Description: In some cases, the ktrace facility will log the contents of kernel structures to userspace. In one such case, ktrace dumps a variable-sized sockaddr to userspace. There, the full sockaddr is copied, even when it is shorter than the full size. This can result in up to 14...

4.9CVSS6.9AI score0.00354EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/01/08 2:0 p.m.11 views

CVE-2024-56538

In the Linux kernel, the following vulnerability has been resolved: drm: zynqmpkms: Unplug DRM device before removal Prevent userspace accesses to the DRM device from causing use-after-frees by unplugging the device before we remove it. This causes any further userspace accesses to result in an...

7.8CVSS6.8AI score0.0027EPSS
SaveExploits0References4
NVD
NVD
added 2024/12/27 2:15 p.m.16 views

CVE-2024-56538

In the Linux kernel, the following vulnerability has been resolved: drm: zynqmpkms: Unplug DRM device before removal Prevent userspace accesses to the DRM device from causing use-after-frees by unplugging the device before we remove it. This causes any further userspace accesses to result in an...

7.8CVSS0.0027EPSS
SaveExploits0References4
OSV
OSV
added 2024/10/21 6:15 p.m.8 views

DEBIAN-CVE-2024-49975

In the Linux kernel, the following vulnerability has been resolved: uprobes: fix kernel info leak via "uprobes" vma xoladdvma maps the uninitialized page allocated by createxolarea into userspace. On some architectures x86 this memory is readable even without VMREAD, VMEXEC results in the same...

5.5CVSS5.7AI score0.0025EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/07 12:0 a.m.20 views

PT-2024-19850 · Qualcomm · Snapdragon +25

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to the haptics debugfs file. This...

6.7CVSS7.2AI score0.0011EPSS
SaveExploits0References6
Rows per page
Query Builder