209 matches found
EUVD-2025-26781
Malicious code in bioql PyPI...
K000156551: Linux kernel vulnerabilities CVE-2024-44990, CVE-2024-46826, and CVE-2025-21927
Security Advisory Description CVE-2024-44990 In the Linux kernel, the following vulnerability has been resolved: bonding: fix null pointer deref in bondipsecoffloadok We must check if there is an active slave before dereferencing the pointer. CVE-2024-46826 In the Linux kernel, the following...
CVE-2025-38688 iommufd: Prevent ALIGN() overflow
In the Linux kernel, the following vulnerability has been resolved: iommufd: Prevent ALIGN overflow When allocating IOVA the candidate range gets aligned to the target alignment. If the range is close to ULONGMAX then the ALIGN can wrap resulting in a corrupted iova. Open code the ALIGN using...
CVE-2025-38688
CVE-2025-38688: In the Linux kernel’s iommufd code, ALIGN() overflow could occur while allocating IOVA ranges near ULONG_MAX, risking overlapping mappings or mapping against reserved ranges. The fix uses get_add_overflow() to guard ALIGN() and consolidates the checks under a single helper. Public...
iommufd: Fix protection fault in iommufd_test_syz_conv_iova
...
CVE-2025-38594 iommu/vt-d: Fix UAF on sva unbind with pending IOPFs
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix UAF on sva unbind with pending IOPFs Commit 17fce9d2336d "iommu/vt-d: Put iopf enablement in domain attach path" disables IOPF on device by removing the device from its IOMMU's IOPF queue when the last IOPF-capabl...
PT-2025-33792 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a use-after-free UAF flaw within the iommu/vt-d subsystem, specifically during the unbinding of SVA Second Virtual Address with pending IOPFs I/O Page Faults....
Linux Distros Unpatched Vulnerability : CVE-2022-49452
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: dpaa2-eth: retrieve the virtual address before dmaunmap The TSO header was DMA unmapped befo...
genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie
...
RX-INT: a Kernel Engine for Real-Time Detection and Analysis of In-Memory Threats
Malware and cheat developers use fileless execution techniques to evade traditional, signature-based security products. These methods include various types of manual mapping, module stomping, and threadless injection which work entirely within the address space of a legitimate process, presenting...
PT-2025-35961
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the iommufd subsystem where an integer overflow can occur during IOVA allocation due to an incorrect alignment calculation using the ALIGN function...
Unspecified vulnerability in Huawei HarmonyOS and EMUI (CNVD-2025-16591)
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A security vulnerability exists in Huawei HarmonyOS an...
CVE-2025-53185
Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memory Impact: Successful exploitation of this vulnerability may affect service integrity...
CVE-2025-53185
Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memory Impact: Successful exploitation of this vulnerability may affect service integrity...
CVE-2025-53185
Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memory Impact: Successful exploitation of this vulnerability may affect service integrity...
CVE-2025-53185
Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memory Impact: Successful exploitation of this vulnerability may affect service integrity...
CVE-2025-53185
CVE-2025-53185 describes a virtual address reuse issue in the memory management module that can be exploited by non-privileged users to access released memory, potentially affecting service integrity. Multiple sources (NVD, Red Hat, CNVD/CNNVD) associate Huawei HarmonyOS/EMUI with this vulnerabil...
Huawei EMUI和Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A security vulnerability exists in Huawei HarmonyOS an...
PT-2025-28120 · Huawei +1 · Emui +1
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A virtual address reuse issue exists in the memory management module. This issue can be exploited by non-privileged users to access released memory, potentially affecting service integrity...