Lucene search
+L

7 matches found

Redos
Redos
•added 2024/10/15 12:00 a.m.•58 views

ROS-20241015-13

A vulnerability in the libceph component of the Linux kernel is related to incorrect input validation of the in the getreply and prepnextsparseread functions in net/ceph/osdclient.c, in the decrypttail and preparereadtailplain in net/ceph/messengerv2.c, in sizeoffooter, readpartialsparsemsgdata,...

8.2CVSS7.2AI score0.00515EPSS
SaveExploits0
CVE
CVE
•added 2024/04/02 7:01 a.m.•197 views

CVE-2024-26674

CVE-2024-26674 affects the Linux kernel x86/mm code, specifically a fixup path for get_user()/put_user(). In kernel builds >= 6.4 memory-error-injection can trigger a machine-check and panic due to a revert from _ASM_EXTABLE_UA() to a more generic fixup type. The issue arose when MCA handling ...

7.1CVSS6.7AI score0.00264EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/02 12:00 a.m.•2 views

CVE-2024-26674: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: x86/lib: Revert to ASMEXTABLEUA for get,putuser fixups During memory error injection test on kernels = v6.4, the kernel panics like below. However, this issue couldn't be reproduced on kernels = v6.3. mce: Hardware Error: CPU 296...

7.1CVSS5.8AI score0.00264EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/04/18 12:00 a.m.•3 views

PT-2023-36690

Уязвимость функции init amd модуля arch/x86/lib/clear page 64.S ядра операционной системы Linux связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

5.5CVSS0.00157EPSS
SaveExploits0References8
Mend
Mend
•added 2019/07/04 12:27 p.m.•4 views

CVE-2019-13233

In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry because of a race condition between modifyldt and a BR exception for an MPX bounds violation...

7.3CVSS0.00487EPSS
SaveExploits1References20
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/04 12:00 a.m.•6 views

CVE-2019-13233: Concurrent Execution using Shared Resource with Improper Synchronization

In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry because of a race condition between modifyldt and a BR exception for an MPX bounds violation...

7CVSS7.2AI score0.00487EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2019/06/07 12:00 a.m.•5 views

PT-2019-2798

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.1.9 Description The issue is related to a use-after-free condition in the Linux kernel, specifically in the arch/x86/lib/insn-eval.c file. This condition arises due to a race between the modify ldt function and...

7.3CVSS0.00487EPSS
SaveExploits1
Rows per page
Query Builder