Lucene search
+L

793 matches found

OSV
OSV
•added 2023/07/11 12:15 p.m.•20 views

AZL-27644 CVE-2023-3269 affecting package hyperv-daemons for versions less than 5.15.158.1-1

A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas VMAs is incorrect, leading to use-after-free problems. This issue can be successfully exploited to execute arbitrary kernel code, escalate containers, a...

7.8CVSS7AI score0.01304EPSS
SaveExploits1References1
OSV
OSV
•added 2023/07/11 12:15 p.m.•15 views

UBUNTU-CVE-2023-3269

A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas VMAs is incorrect, leading to use-after-free problems. This issue can be successfully exploited to execute arbitrary kernel code, escalate containers, a...

7.8CVSS7.2AI score0.01304EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2023/07/11 11:45 a.m.•5 views

CVE-2023-3269 Distros-[dirtyvma] privilege escalation via non-rcu-protected vma traversal

A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas VMAs is incorrect, leading to use-after-free problems. This issue can be successfully exploited to execute arbitrary kernel code, escalate containers, a...

7.8CVSS8.2AI score0.01304EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2023/06/27 12:00 a.m.•23 views

PT-2023-3408 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 6.1 through 6.4 Description: A vulnerability exists in the memory management subsystem of the Linux kernel, related to incorrect lock handling for accessing and updating virtual memory areas VMAs, leading to use-after-fr...

10CVSS7.4AI score0.98745EPSS
SaveExploits357References540
OSV
OSV
•added 2023/06/03 11:05 a.m.•9 views

OESA-2023-1319 wireshark security update

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices,and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols.It has many powerful feature...

5.5CVSS6.9AI score0.01787EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
•added 2023/05/31 3:57 p.m.•13 views

kernel: unmap_mapping_range() race with munmap() on VM_PFNMAP mappings leads to stale TLB entry

A flaw was found in include/asm-generic/tlb.h in the Linux kernel due to a race condition unmapmappingrange versus munmap. This issue allows a device driver to free a page while it still has stale TLB entries...

4.7CVSS6.6AI score0.00225EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2023/05/16 8:56 a.m.•15 views

kernel: unmap_mapping_range() race with munmap() on VM_PFNMAP mappings leads to stale TLB entry

A flaw was found in include/asm-generic/tlb.h in the Linux kernel due to a race condition unmapmappingrange versus munmap. This issue allows a device driver to free a page while it still has stale TLB entries...

4.7CVSS6.4AI score0.00225EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2023/05/16 8:43 a.m.•16 views

kernel: unmap_mapping_range() race with munmap() on VM_PFNMAP mappings leads to stale TLB entry

A flaw was found in include/asm-generic/tlb.h in the Linux kernel due to a race condition unmapmappingrange versus munmap. This issue allows a device driver to free a page while it still has stale TLB entries...

4.7CVSS6.4AI score0.00225EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2023/05/09 10:04 a.m.•10 views

kernel: mm/hugetlb: avoid corrupting page->mapping in hugetlb_mcopy_atomic_pte

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: avoid corrupting page-mapping in hugetlbmcopyatomicpte In MCOPYATOMICCONTINUE case with a non-shared VMA, pages in the page cache are installed in the ptes. But hugepageaddnewanonrmap is called for them mistakenly...

7.8CVSS6AI score0.00257EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2023/05/09 10:04 a.m.•13 views

kernel: KVM: x86: Use __try_cmpxchg_user() to update guest PTE A/D bits

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Use trycmpxchguser to update guest PTE A/D bits Use the recently introduced trycmpxchguser to update guest PTE A/D bits instead of mapping the PTE into kernel address space. The VMPFNMAP path is broken as it assumes tha...

7.8CVSS5.9AI score0.00272EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2023/05/09 10:04 a.m.•14 views

kernel: drm/amdgpu: Fix use-after-free on amdgpu_bo_list mutex

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix use-after-free on amdgpubolist mutex If amdgpucsvmhandling returns r != 0, then it will unlock the bolistmutex inside the function amdgpucsvmhandling and again on amdgpucsparserfini. This problem results in the...

7.8CVSS6.3AI score0.00179EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2023/05/09 10:01 a.m.•24 views

kernel: unmap_mapping_range() race with munmap() on VM_PFNMAP mappings leads to stale TLB entry

A flaw was found in include/asm-generic/tlb.h in the Linux kernel due to a race condition unmapmappingrange versus munmap. This issue allows a device driver to free a page while it still has stale TLB entries...

4.7CVSS6.4AI score0.00225EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2023/04/14 12:00 a.m.•33 views

FreeBSD : py39-unicorn -- sandbox escape and arbitrary code execution vulnerability (17083017-d993-43eb-8aaf-7138f4486d1c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 17083017-d993-43eb-8aaf-7138f4486d1c advisory. - An issue was discovered in splitregion in uc.c in Unicorn Engine before 2.0.0-rc5. It allows local...

8.1CVSS8.3AI score0.00528EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/03/23 12:00 a.m.•10 views

PT-2025-40777

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to a race condition involving Virtual Memory Area VMA iteration and the teardown of the mm struct. Specifically, the issue occurs during the exi...

4.7CVSS5.9AI score0.00106EPSS
SaveExploits0References22
RedHat Linux
RedHat Linux
•added 2023/03/07 10:04 a.m.•24 views

kernel: use-after-free related to leaf anon_vma double reuse

A memory leak flaw with use-after-free capability was found in the Linux kernel. The VMA mm/rmap.c functionality in the ismergeableanonvma function continuously forks, using memory operations to trigger an incorrect reuse of leaf anonvma. This issue allows a local attacker to crash the system...

5.5CVSS6.6AI score0.00889EPSS
SaveExploits3References5
F5 Networks
F5 Networks
•added 2023/02/21 7:49 p.m.•47 views

K12876166: Linux kernel vulnerability CVE-2019-12817

Security Advisory Description arch/powerpc/mm/mmucontextbook3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug where unrelated processes may be able to read/write to one another's virtual memory under certain conditions via an mmap above 512 TB. Only a subset of powerpc systems are...

7CVSS6.9AI score0.00386EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2023/02/15 4:54 a.m.•8 views

SUSE CVE-2016-10153

The crypto scatterlist API in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cause a denial of service system crash or memory corruption or possibly have unspecified other impact by leveraging reliance on earlier...

7.8CVSS6.8AI score0.0043EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 4:46 a.m.•10 views

SUSE CVE-2017-8066

drivers/net/can/usb/gsusb.c in the Linux kernel 4.9.x and 4.10.x before 4.10.2 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cause a denial of service system crash or memory corruption or possibly have unspecified other impact by leveraging use of more than on...

7.8CVSS8.1AI score0.00429EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 4:46 a.m.•10 views

SUSE CVE-2017-8064

drivers/media/usb/dvb-usb-v2/dvbusbcore.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cause a denial of service system crash or memory corruption or possibly have unspecified other impact by leveraging use ...

7.8CVSS8AI score0.00358EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 4:46 a.m.•11 views

SUSE CVE-2017-8067

drivers/char/virtioconsole.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cause a denial of service system crash or memory corruption or possibly have unspecified other impact by leveraging use of more than...

7.8CVSS8.2AI score0.00401EPSS
SaveExploits0References3
Rows per page
Query Builder