Lucene search
+L

1330 matches found

OSV
OSV
added 2025/09/24 1:30 p.m.16 views

USN-7770-1 linux-azure vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACP...

9.8CVSS6.6AI score0.01278EPSS
SaveExploits8References185
SUSE CVE
SUSE CVE
added 2025/09/16 11:34 p.m.10 views

SUSE CVE-2022-50271

In the Linux kernel, the following vulnerability has been resolved: vhost/vsock: Use kvmalloc/kvfree for larger packets. When copying a large file over sftp over vsock, data size is usually 32kB, and kmalloc seems to fail to try to allocate 32 32kB regions. vhost-5837: page allocation failure:...

5.5CVSS6.5AI score0.00156EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2025/09/16 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2022-50271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: vhost/vsock: Use kvmalloc/kvfree for larger packets. When copying a large file over sftp ove...

5.5CVSS5.2AI score0.00156EPSS
SaveExploits0References3
OSV
OSV
added 2025/09/15 3:15 p.m.10 views

DEBIAN-CVE-2022-50271

In the Linux kernel, the following vulnerability has been resolved: vhost/vsock: Use kvmalloc/kvfree for larger packets. When copying a large file over sftp over vsock, data size is usually 32kB, and kmalloc seems to fail to try to allocate 32 32kB regions. vhost-5837: page allocation failure:...

5.5CVSS5.3AI score0.00156EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/15 3:15 p.m.10 views

CVE-2022-50271

In the Linux kernel, the following vulnerability has been resolved: vhost/vsock: Use kvmalloc/kvfree for larger packets. When copying a large file over sftp over vsock, data size is usually 32kB, and kmalloc seems to fail to try to allocate 32 32kB regions. vhost-5837: page allocation failure:...

5.5CVSS0.00156EPSS
SaveExploits0References8
OSV
OSV
added 2025/09/15 3:15 p.m.11 views

UBUNTU-CVE-2022-50271

In the Linux kernel, the following vulnerability has been resolved: vhost/vsock: Use kvmalloc/kvfree for larger packets. When copying a large file over sftp over vsock, data size is usually 32kB, and kmalloc seems to fail to try to allocate 32 32kB regions. vhost-5837: page allocation failure:...

5.5CVSS5.9AI score0.00156EPSS
SaveExploits0References11
CVE
CVE
added 2025/09/15 2:21 p.m.33 views

CVE-2022-50271

CVE-2022-50271 affects the Linux kernel’s vhost/vsock code. The issue arises when copying large files over SFTP over vsock, where data sizes commonly reach 32 kB and kmalloc may allocate many 32 kB chunks, leading to a page allocation failure (example: vhost-5837). The root cause is an inefficien...

5.5CVSS6.1AI score0.00156EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2025/09/15 2:21 p.m.9 views

CVE-2022-50271 vhost/vsock: Use kvmalloc/kvfree for larger packets.

In the Linux kernel, the following vulnerability has been resolved: vhost/vsock: Use kvmalloc/kvfree for larger packets. When copying a large file over sftp over vsock, data size is usually 32kB, and kmalloc seems to fail to try to allocate 32 32kB regions. vhost-5837: page allocation failure:...

6.1AI score
SaveExploits0References11
Cvelist
Cvelist
added 2025/09/15 2:21 p.m.13 views

CVE-2022-50271 vhost/vsock: Use kvmalloc/kvfree for larger packets.

In the Linux kernel, the following vulnerability has been resolved: vhost/vsock: Use kvmalloc/kvfree for larger packets. When copying a large file over sftp over vsock, data size is usually 32kB, and kmalloc seems to fail to try to allocate 32 32kB regions. vhost-5837: page allocation failure:...

0.00156EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/09/15 12:00 a.m.9 views

PT-2025-37573

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw was discovered in the Linux kernel's vhost/vsock implementation. The issue relates to page allocation failures when copying large files over sftp over vsock, specifically when...

5.9AI score0.00156EPSS
SaveExploits0References10
Redos
Redos
added 2025/09/11 12:00 a.m.11 views

ROS-20250911-02

Vulnerability of the rterawcksummbuf function of the vhost library of the DPDK suite of libraries and drivers for fast packet processing is related to the operation exceeding the memory buffer boundary while processing the len parameter. DPDK packet processing is related to the operation exceedin...

7.4CVSS7.4AI score0.00566EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.21 views

EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-2043)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : netsched: hfsc: Fix a UAF vulnerability in class with netem as child qdiscCVE-2025-37890 crypto: lzo - Fix compression buffer overrunCVE-2025-3806...

9.8CVSS7.3AI score0.00477EPSS
SaveExploits3References63
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.18 views

EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-2012)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : netsched: hfsc: Fix a UAF vulnerability in class with netem as child qdiscCVE-2025-37890 crypto: lzo - Fix compression buffer overrunCVE-2025-3806...

9.8CVSS7.3AI score0.00477EPSS
SaveExploits3References63
Microsoft CVE
Microsoft CVE
added 2025/09/04 3:43 a.m.10 views

A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.

...

6.7CVSS7AI score0.00378EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/09/04 3:28 a.m.6 views

An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc` function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause `move_desc` to get stuck in a 4,294,967,295-count iteration loop. Depending on how `vhost_crypto` is being used this could prevent other VMs or network tasks from being serviced by the busy DPDK lcore for an extended period.

...

3.3CVSS7AI score0.00397EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/08/11 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-38074

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vhost-scsi: protect vq-logused with vq-mutex The vhost-scsi completion path may access vq-logbase when vq-logused is already set to false. vhost-thread...

8.8CVSS6.5AI score0.00174EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/09 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2021-46967

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: fix vmflags for virtqueue doorbell mapping The virtqueue doorbell is usually...

7.8CVSS5AI score0.00231EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/08 12:00 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2021-29266

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 5.11.9. drivers/vhost/vdpa.c has a use-after-free because v-configctx has an invalid value upon re-opening a...

7.8CVSS6.4AI score0.00318EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
added 2025/08/07 12:00 a.m.5 views

vhost-scsi: protect vq->log_used with vq->mutex

...

8.8CVSS7AI score0.00174EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/07/11 7:00 a.m.8 views

vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint

...

7.8CVSS7.4AI score0.00199EPSS
SaveExploits0
Rows per page
Query Builder