Lucene search
+L

360 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/28 12:00 a.m.•1 views

CVE-2026-46130: Out-of-bounds Read

In the Linux kernel, the following vulnerability has been resolved: dm-verity-fec: fix reading parity bytes split across blocks take 3 fecdecodebufs assumes that the parity bytes of the first RS codeword it decodes are never split across parity blocks. This assumption is false. Consider...

7.1CVSS5.9AI score0.00164EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/05/28 12:00 a.m.•36 views

PT-2026-44253

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the fec decode bufs function within the dm-verity-fec component. The issue occurs because the function incorrectly assumes that parity bytes of the first...

7.1CVSS5.6AI score0.00164EPSS
SaveExploits0
AstraLinux
AstraLinux
•added 2026/05/20 5:53 a.m.•9 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: dm: verity-loadpin: Only trust verity targets with enforcement Verity targets can be configured to ignore corrupted data blocks. LoadPin must only trust verity targets that are configured to perform some kind of enforcement when...

6.1AI score0.00189EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2026/05/09 2:42 a.m.•19 views

SUSE CVE-2026-43132

In the Linux kernel, the following vulnerability has been resolved: dm-verity: correctly handle dmbufioclientcreate failure If either of the calls to dmbufioclientcreate in verityfecctr fails, then dmbufioclientdestroy is later called with an ERRPTR argument. That causes a crash. Fix this...

5.5CVSS5.9AI score0.00162EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2026/05/06 6:08 p.m.•20 views

CVE-2026-43132

A flaw was found in the Linux kernel's dm-verity component. When the dmbufioclientcreate function fails within verityfecctr, the subsequent call to dmbufioclientdestroy with an error pointer argument leads to a system crash. This vulnerability could allow a local attacker to cause a Denial of...

5.5CVSS5.8AI score0.00162EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/05/06 12:30 p.m.•19 views

EUVD-2026-27692

In the Linux kernel, the following vulnerability has been resolved: dm-verity: correctly handle dmbufioclientcreate failure If either of the calls to dmbufioclientcreate in verityfecctr fails, then dmbufioclientdestroy is later called with an ERRPTR argument. That causes a crash. Fix this...

5.9AI score0.00162EPSS
SaveExploits0References9
NVD
NVD
•added 2026/05/06 12:16 p.m.•17 views

CVE-2026-43132

In the Linux kernel, the following vulnerability has been resolved: dm-verity: correctly handle dmbufioclientcreate failure If either of the calls to dmbufioclientcreate in verityfecctr fails, then dmbufioclientdestroy is later called with an ERRPTR argument. That causes a crash. Fix this...

5.5CVSS0.00162EPSS
SaveExploits0References8
attackerkb
attackerkb
•added 2026/05/06 11:27 a.m.•10 views

CVE-2026-43132

In the Linux kernel, the following vulnerability has been resolved: dm-verity: correctly handle dmbufioclientcreate failure If either of the calls to dmbufioclientcreate in verityfecctr fails, then dmbufioclientdestroy is later called with an ERRPTR argument. That causes a crash. Fix this...

5.9AI score0.00162EPSS
SaveExploits0References9Affected Software1
Debian CVE
Debian CVE
•added 2026/05/06 11:27 a.m.•15 views

CVE-2026-43132

In the Linux kernel, the following vulnerability has been resolved: dm-verity: correctly handle dmbufioclientcreate failure If either of the calls to dmbufioclientcreate in verityfecctr fails, then dmbufioclientdestroy is later called with an ERRPTR argument. That causes a crash. Fix this...

5.5CVSS5.9AI score0.00162EPSS
SaveExploits0
CVE
CVE
•added 2026/05/06 11:27 a.m.•43 views

CVE-2026-43132

CVE-2026-43132 affects the Linux kernel dm-verity component. The issue arises when dm_bufio_client_create() fails inside verity_fec_ctr() and the subsequent call to dm_bufio_client_destroy() uses an ERR_PTR(), causing a crash. Red Hat specifies potential local DoS from this crash; Debian/Root-OS ...

5.5CVSS5.9AI score0.00162EPSS
SaveExploits0References8Affected Software1
OSV
OSV
•added 2026/05/06 11:27 a.m.•12 views

CVE-2026-43132 dm-verity: correctly handle dm_bufio_client_create() failure

In the Linux kernel, the following vulnerability has been resolved: dm-verity: correctly handle dmbufioclientcreate failure If either of the calls to dmbufioclientcreate in verityfecctr fails, then dmbufioclientdestroy is later called with an ERRPTR argument. That causes a crash. Fix this...

5.8AI score
SaveExploits0References11
Cvelist
Cvelist
•added 2026/05/06 11:27 a.m.•49 views

CVE-2026-43132 dm-verity: correctly handle dm_bufio_client_create() failure

In the Linux kernel, the following vulnerability has been resolved: dm-verity: correctly handle dmbufioclientcreate failure If either of the calls to dmbufioclientcreate in verityfecctr fails, then dmbufioclientdestroy is later called with an ERRPTR argument. That causes a crash. Fix this...

0.00162EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/06 12:00 a.m.•1 views

CVE-2026-43132: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm-verity: correctly handle dmbufioclientcreate failure If either of the calls to dmbufioclientcreate in verityfecctr fails, then dmbufioclientdestroy is later called with an ERRPTR argument. That causes a crash. Fix this...

5.5CVSS5.9AI score0.00162EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2026/05/06 12:00 a.m.•18 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper handling of the failure of dm-verity when creating the dmbufioclientcreate function. Thi...

5.5CVSS6AI score0.00162EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/05/06 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-43132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-verity: correctly handle dmbufioclientcreate failure If either of the calls to dmbufioclientcreate in verityfecctr fails, then dmbufioclientdestroy is later...

5.5CVSS6AI score0.00162EPSS
SaveExploits0References3
Amazon
Amazon
•added 2026/04/30 12:00 a.m.•34 views

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: remove refcounting in expectation dumpers CVE-2025-39764 In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6xmit CVE-2025-40135 In the Linux kernel, the...

9.8CVSS6.5AI score0.01338EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
•added 2026/04/17 12:00 a.m.•23 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007397)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007397 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: detect invalid INLINEDATA + EXTENTS flag combination syzbot reported a BUGON in...

7.8CVSS6AI score0.00154EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/01/25 12:24 a.m.•21 views

SUSE CVE-2025-71161

In the Linux kernel, the following vulnerability has been resolved: dm-verity: disable recursive forward error correction There are two problems with the recursive correction: 1. It may cause denial-of-service. In fecreadbufs, there is a loop that has 253 iterations. For each iteration, we may ca...

5.5CVSS6AI score0.00379EPSS
SaveExploits0References7
OSV
OSV
•added 2026/01/23 4:15 p.m.•20 views

AZL-78437 CVE-2025-71161 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: dm-verity: disable recursive forward error correction There are two problems with the recursive correction: 1. It may cause denial-of-service. In fecreadbufs, there is a loop that has 253 iterations. For each iteration, we may ca...

7.5CVSS6AI score0.00379EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/23 4:15 p.m.•20 views

CVE-2025-71161

In the Linux kernel, the following vulnerability has been resolved: dm-verity: disable recursive forward error correction There are two problems with the recursive correction: 1. It may cause denial-of-service. In fecreadbufs, there is a loop that has 253 iterations. For each iteration, we may ca...

7.5CVSS0.00379EPSS
SaveExploits0References8
Rows per page
Query Builder