Lucene search
+L

452514 matches found

EUVD
EUVD
•added 2026/09/24 4:02 p.m.•7 views

EUVD-2026-86171

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate IEs in cfg80211wextsiwgenie The KASAN allocation trace shows that a malformed IE buffer is stored via SIOCSIWGENIE cfg80211wextsiwgenie without any validation. The crash trace shows that a subsequent...

6.1AI score0.00166EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/24 4:02 p.m.•6 views

EUVD-2026-86170

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: validate skb length in rfcommrecvframe rfcommrecvframe casts skb-data to struct rfcommhdr and dereferences hdr-addr and hdr-ctrl without validating skb-len first. A truncated frame with skb-len less than the...

5.8AI score0.00166EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/24 4:02 p.m.•9 views

EUVD-2026-86169

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: flush backend after device ioctls vhost-scsi translates guest response descriptors into userspace iovecs when commands are submitted. Target-core completes those commands asynchronously, so VHOSTSETMEMTABLE can replac...

5.8AI score0.0012EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/24 4:02 p.m.•5 views

EUVD-2026-86168

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Do not block on tag allocation in scsiehlockdoor scsiehlockdoor is called from scsirestartoperations while the host is still in the SHOSTRECOVERY state, i.e. before the host is switched back to SHOSTRUNNING and...

5.9AI score0.00166EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/24 4:02 p.m.•5 views

EUVD-2026-86167

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinklog: wait for rcu grace period before freeing pernet state sashiko reports: "nfnllognetexit calls nflogunset, which clears the logger pointer without an RCU grace period. Immediately after, opsfreelist frees t...

5.8AI score0.00127EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/24 4:02 p.m.•10 views

EUVD-2026-86166

In the Linux kernel, the following vulnerability has been resolved: i2c: smbus: reject oversized block transfers in the common path The SMBus block transfer length data-block0 is validated in i2csmbusxferemulated but that check runs too late for tracepoints and is skipped entirely when the adapte...

6.1AI score0.00127EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/24 4:02 p.m.•11 views

EUVD-2026-86165

In the Linux kernel, the following vulnerability has been resolved: net: appletalk: fix NULL pointer dereference in aarpsendddp aarpsendddp calls atalkfinddevaddrdev in the LocalTalk fast path without checking for NULL. When the device has no AppleTalk interface configured dev-atalkptr == NULL,...

5.7AI score0.00166EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/24 4:02 p.m.•7 views

EUVD-2026-86164

In the Linux kernel, the following vulnerability has been resolved: f2fs: embed f2fsgckthread in f2fssbinfo Instead of allocating f2fsgckthread dynamically, embed it in f2fssbinfo. This simplifies lifetime management and prepares for fixing race conditions during teardown. - sbistore -...

5.8AI score0.00166EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/24 4:02 p.m.•8 views

EUVD-2026-86163

In the Linux kernel, the following vulnerability has been resolved: drm/pagemap: dma-unmap pages before handling migration errors drmpagemapmigrateunmappages relies on the pages array to determine which pages require DMA unmapping. However, drmpagemapmigrationunlockputpages clears the array as pa...

5.8AI score0.0012EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 4:01 p.m.•5 views

EUVD-2026-86162

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, Termix derives the keys that wrap OIDC and WebAuthn users' Data Encryption Keys from committed default strings and the public userId salt in...

5.5CVSS5.8AI score0.00082EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/24 4:00 p.m.•7 views

EUVD-2026-86161

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.1 until 2.5.1, an authenticated Termix administrator can store attacker-controlled domain and email values through PATCH /users/acme-ssl-settings and trigger their interpolation...

9.1CVSS6.2AI score0.00388EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/24 3:59 p.m.•8 views

EUVD-2026-86160

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, the POST /credentials/:id/deploy-to-host endpoint resolves credential and target-host records from attacker-controlled credentialId and targetHostId integer values...

4.3CVSS5.8AI score0.00273EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/24 3:58 p.m.•9 views

EUVD-2026-86159

An out-of-bounds read in libXi's XQueryDeviceState in libXi before 1.8.4 could be used by a...

6.5CVSS5.8AI score0.00245EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 3:58 p.m.•8 views

EUVD-2026-86158

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, the Termix SSH key deployment flow derives a grep pattern from a user-controlled public-key token and interpolates it into double-quoted shell commands executed on...

6.6CVSS6AI score0.00359EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/24 3:57 p.m.•6 views

EUVD-2026-86157

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.8.0 until 2.5.1, authenticated Termix users can access the server-stats API without per-host authorization. GET /status returns statuses for hosts the requester cannot access, GET...

5.4CVSS5.8AI score0.00435EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/24 3:56 p.m.•8 views

EUVD-2026-86156

The door access control on a Norwegian Cruise Line asset grants entry based only on the credential's static 7-byte UID stored on an NTAG212 NFC chip. A UID is a manufacturer serial number sent in the clear on every read and is not intended to be secret or to authenticate the holder. Validating on...

7.5CVSS5.8AI score0.00357EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 3:52 p.m.•6 views

EUVD-2026-86155

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix deviceregister error path When deviceregister fails in i3cmasterregisternewi3cdevs, putdevice is called to drop the reference taken by deviceregister. That drops the last reference, so the device's release callba...

5.8AI score0.00196EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/24 3:52 p.m.•6 views

EUVD-2026-86154

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix maximum allowed access checks The DACL permission check looks for an ACE matching the current user and falls back to the Everyone ACE. It does not consider an Authenticated Users ACE, even though an authenticated sessi...

5.8AI score0.00308EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 3:52 p.m.•7 views

EUVD-2026-86153

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix HE extended capability length check rtw89maccheckheobssnarrowbwruiter reads extended capability byte 10, but rejects only datalen values below 10. Byte 10 requires at least 11 bytes. Require datalen = 11 before...

5.8AI score0.00192EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/24 3:52 p.m.•7 views

EUVD-2026-86152

In the Linux kernel, the following vulnerability has been resolved: greybus: audio: bound the topology section sizes against the fetched size gbaudiogbgettopology fetches a topology blob of a module-supplied size, and gbaudiotplgparsedata then walks it by adding the module-supplied sizedais,...

5.9AI score0.00321EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/24 3:52 p.m.•7 views

EUVD-2026-86151

In the Linux kernel, the following vulnerability has been resolved: staging: octeon: add missing taskletkill in cvmocttxshutdown The TX cleanup tasklet can be scheduled by the watchdog IRQ handler to execute cvmocttxdocleanup. There can be a pending tasklet in the queue which might run after the...

6.5AI score0.00196EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/24 3:52 p.m.•8 views

EUVD-2026-86150

In the Linux kernel, the following vulnerability has been resolved: staging: octeon: add missing napidisable in cvmoctrxshutdown cvmoctrxshutdown calls freeirq and netifnapidel without disabling the napi instance first. As the freeirq only waits for completion of hard interrupt handlers, the napi...

5.8AI score0.00192EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/09/24 3:52 p.m.•10 views

EUVD-2026-86149

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Validate udata before executing commands The destroy callbacks currently zero the udata output after tearing down driver resources. If the userspace access fails, uverbs preserves the uobject and allows the destroy...

5.8AI score0.00143EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 3:52 p.m.•7 views

EUVD-2026-86148

In the Linux kernel, the following vulnerability has been resolved: phy: renesas: phy-rcar-gen3-usb2: Fix devm action registration for disabled VBUS regulator devmregulatorgetexclusive initialises the regulator with enablecount = 1, requiring the consumer to disable it before release. The devm...

5.8AI score0.00184EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/24 3:52 p.m.•6 views

EUVD-2026-86147

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/pt: Fix stop/start with no update If pteventstop is called without PERFEFUPDATE flag, then perfauxoutputend is not called. A subsequent call to pteventstart will call perfauxoutputbegin again which violates the rul...

6AI score0.00186EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/24 3:52 p.m.•5 views

EUVD-2026-86146

In the Linux kernel, the following vulnerability has been resolved: pinctrl: bcm2835: Don't remove an unregistered GPIO chip If the devmpinctrlregister function fails, bcm2835pinctrlprobe calls gpiochipremove before gpiochipadddata has registered the GPIO chip. This means that upon failure the...

5.6AI score0.00196EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/24 3:52 p.m.•7 views

EUVD-2026-86145

In the Linux kernel, the following vulnerability has been resolved: regulator: tps6594: Fix device node reference leaks in multiphase loop In tps6594regulatorprobe, the multi-phase configuration loop calls offindnodebyname to find buck nodes by name, and ofgetparent twice to navigate to the PMIC...

5.6AI score0.00186EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/24 3:52 p.m.•10 views

EUVD-2026-86144

In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcomwcnss: Fix handling the lack of PD regulators in v3 The changes introduced to handle single power domain platforms have swapped the info pointer increment from numpdvregs to numpds, which would shift the info...

5.8AI score0.00176EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 3:52 p.m.•8 views

EUVD-2026-86143

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate ath11k can receive HT/VHT/HE frames whose reported MCS is above the maximum that can be expressed in the corresponding mac80211 rate space e.g. an HE frame...

5.8AI score0.00196EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/24 3:52 p.m.•9 views

EUVD-2026-86141

In the Linux kernel, the following vulnerability has been resolved: ext4: fix circular lock dependency in ext4extmigrate Move iputtmpinode after ext4writepagesupwrite to avoid a circular lock dependency between swritepagesrwsem and sbinternal freeze protection. The deadlock scenario: CPU0...

5.8AI score0.00186EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/24 3:52 p.m.•7 views

EUVD-2026-86142

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallback for BPFADDRPERCPU insn The BPFMOV64PERCPUREG insn requires JIT to emit native code to for 'dstreg = srcreg + '. However, the interpreter ignores the 'off' at its ALU64MOVX label. The 'off'...

5.8AI score0.00176EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 3:52 p.m.•7 views

EUVD-2026-86140

In the Linux kernel, the following vulnerability has been resolved: ext4: skip extra isize expansion during mount to prevent deadlock ext4trytoexpandextraisize is called from ext4markinodedirty while holding an active jbd2 handle. During mount !SBACTIVE, the expand path may move xattrs to externa...

5.8AI score0.00196EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/24 3:52 p.m.•6 views

EUVD-2026-86139

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in uverbsfreedmah When accessing a dmah via the netlink path the only synchronization mechanism for the said dmah is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of...

6.2AI score0.00184EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/24 3:52 p.m.•8 views

EUVD-2026-86138

In the Linux kernel, the following vulnerability has been resolved: arm64: RSI: fix field-spanning write warning in attestation token init The challenge is passed in registers a1 through a8. However, copying to &regs.a1 makes FORTIFY treat the destination as the single a1 field, resulting in a...

5.8AI score0.00184EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/24 3:52 p.m.•9 views

EUVD-2026-86137

In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: tc9563: Fix parsing the integrated Ethernet MAC Endpoint node DSP3 has an integrated Ethernet MAC Endpoint which has its own set of config registers for configuring settings such as ASPM. The Endpoint device has two...

5.8AI score0.00143EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 3:52 p.m.•7 views

EUVD-2026-86136

In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix PBL chunk length computation On register MR, when creating the PBL, if it's an indirect PBL we create a chunk list to hold the PBL pages pointers. Each chunk is 4KB in size and can hold 510 addresses EFAPTRSPERCHUNK...

6AI score0.00196EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/24 3:52 p.m.•7 views

EUVD-2026-86135

In the Linux kernel, the following vulnerability has been resolved: clk: eswin: Zero-initialize stack-allocated clkinitdata eswinclkregisterpll and eswinregisterclkdiv declare a struct clkinitdata on the stack and only initialize some of its fields parentdata respectively parenthws...

5.6AI score0.00176EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 3:52 p.m.•7 views

EUVD-2026-86134

In the Linux kernel, the following vulnerability has been resolved: md/raid5-ppl: fix use-after-free in ppldoflush The loop in ppldoflush continues iterating after calling ppliounitfinished, touching io-pendingflushes and leading to a use-after-free. Add a break statement to stop the loop once io...

6.4AI score0.00149EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/24 3:51 p.m.•6 views

EUVD-2026-86133

In the Linux kernel, the following vulnerability has been resolved: locking/lockdep: Fix NULL pointer dereference in locksetclass registerlockclass can return NULL when the lock class pool is exhausted, graphlock fails, or key validation fails. However, locksetclass uses the return value directly...

5.6AI score0.00196EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/24 3:51 p.m.•6 views

EUVD-2026-86132

In the Linux kernel, the following vulnerability has been resolved: powerpc/xive: propagate IPI init errors to prevent use-after-free When xiveinitipis fails e.g. irqdomainallocirqs fails, the error path frees the global xiveipis array. However, xivesmpprobe previously ignored this failure and...

5.8AI score0.00134EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 3:51 p.m.•9 views

EUVD-2026-86131

In the Linux kernel, the following vulnerability has been resolved: powerpc/irq: Fix missing r2 clobber in PCREL inline assembly In CONFIGPPCKERNELPCREL mode, r2 is no longer reserved for the TOC pointer and is available as a caller-saved register 0. Both calldoirq and calldosoftirq use inline...

6AI score0.00186EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/24 3:51 p.m.•8 views

EUVD-2026-86130

In the Linux kernel, the following vulnerability has been resolved: ocfs2: do not use makebadinode in ocfs2readinodeblockfull This reverts commit 58b6fcd2ab34 "ocfs2: mark inode bad upon validation failure during read". Since 'makebadinode' resets inode type to SIFREG, doing this for directory...

5.8AI score0.00189EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 3:51 p.m.•5 views

EUVD-2026-86128

In the Linux kernel, the following vulnerability has been resolved: arm64: hibernate: mask DAIF before restoring hibernated kernel The arm64 hibernate code manages the exception masking in an unsound way, leading to potential crashes and/or warnings during resume. When a hibernation image is save...

5.8AI score0.00211EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/24 3:51 p.m.•6 views

EUVD-2026-86129

In the Linux kernel, the following vulnerability has been resolved: block: handle nogenerate/noverify properly in fs-integrity Check the BIPCHECK flags before generating or verifying PI information, otherwise this can be incorrectly called for non-PI metadata and cause generation of incorrect...

5.8AI score0.00189EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 3:51 p.m.•10 views

EUVD-2026-86127

In the Linux kernel, the following vulnerability has been resolved: btrfs: make sure EXTENTBUFFERREADING is cleared under refslock FALSE ALERTS There is a bug report that the warning inside invalidateandcheckbtreefolios got triggered during btrfs/298: BTRFS info device sdd: first mount of...

6AI score0.00189EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 3:51 p.m.•9 views

EUVD-2026-86126

In the Linux kernel, the following vulnerability has been resolved: arm64: entry: Avoid unnecessary localirqdisable on kernel exit Currently, when exiting to kernel mode, we attempt involuntary preemption. The preemption logic expects IRQs to be disabled, which is why we call localirqdisable befo...

5.8AI score0.0021EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 3:51 p.m.•6 views

EUVD-2026-86125

In the Linux kernel, the following vulnerability has been resolved: sched/isolation: Defer freeing of cpumask memblock memory to initcall When testing a linux-next kernel with commit 59bd1d914bb5 "memblock: warn when freeing reserved memory before memory map is initialized", the following warning...

6.2AI score0.00189EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 3:51 p.m.•9 views

EUVD-2026-86124

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dependency in ocfs2initacl A lockdep warning indicates a circular locking dependency between &oi-ipxattrsem and &journal-jtransbarrier: WARNING: possible circular locking dependency detected is trying ...

5.8AI score0.00211EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/24 3:51 p.m.•8 views

EUVD-2026-86123

In the Linux kernel, the following vulnerability has been resolved: ACPI: bus: Introduce acpibusgetprimarydevice The function used for obtaining the first "physical" device for which the given ACPI one is the ACPI companion, acpigetfirstphysicalnode, may return a stale device pointer mostly in...

6.2AI score0.00189EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 3:51 p.m.•9 views

EUVD-2026-86264

Deserialization of untrusted data in the command monitoring support of the MongoDB PHP Driver can cause class names embedded in document content to be honored when the driver builds monitoring event objects. When an application registers a command monitoring subscriber and includes untrusted data...

6.3CVSS5.8AI score0.00304EPSS
SaveExploits0References5
Total number of security vulnerabilities452514