Lucene search
+L

433104 matches found

EUVD
EUVD
•added 2026/08/10 12:0 p.m.•7 views

EUVD-2026-55334

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Shut down BO cache timer before teardown The BO cache timer callback schedules timework, and timework can rearm the timer through vc4bocachefreeold. vc4bocachedestroy deletes the timer and then cancels the work, which do...

5.3AI score0.00166EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•7 views

EUVD-2026-55333

In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Fix MM reference leak in drmgpusvmrangeevict If kvmallocarray fails in drmgpusvmrangeevict, the MM reference acquired earlier is not released, resulting in a reference leak. Fix this by dropping the MM reference on th...

5.3AI score0.00198EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•6 views

EUVD-2026-55332

In the Linux kernel, the following vulnerability has been resolved: media: airspy: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers via...

5.3AI score0.00209EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•6 views

EUVD-2026-55331

In the Linux kernel, the following vulnerability has been resolved: media: amlogic-c3: Add validations for ae and awb config Avoid invalid memory access if the zonesnum is bigger than zoneweight. This patch fixes the following smatch errors: drivers/media/platform/amlogic/c3/isp/c3-isp-params.c:1...

5.5AI score0.0017EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•6 views

EUVD-2026-55330

In the Linux kernel, the following vulnerability has been resolved: media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 refpiclist0/refpiclist1 entries from the stateless slice control and later uses their indices to look up decode-dpb in cedruswritereflist. Rejecting...

5.1AI score0.00159EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•7 views

EUVD-2026-55329

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Move srcbuf Removal to finishencode During encoder processing, there is a case where the IRQ response could return the buffer back to userspace via v4l2m2mbufdone call. In this time, userspace could que...

5.5AI score0.00163EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•6 views

EUVD-2026-55328

In the Linux kernel, the following vulnerability has been resolved: media: cx231xx: fix devres lifetime USB drivers bind to USB interfaces and any device managed resources should have their lifetime tied to the interface rather than parent USB device. This avoids issues like memory leaks when...

5.3AI score0.00209EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•6 views

EUVD-2026-55327

In the Linux kernel, the following vulnerability has been resolved: media: cx23885: add ioremap return check and cleanup Add a check for the return value of pciioremapbar in cx23885devsetup. If ioremap for BAR0 fails, release the already allocated PCI memory region, decrement the device count, an...

5.3AI score0.00209EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•6 views

EUVD-2026-55326

In the Linux kernel, the following vulnerability has been resolved: media: i2c: alvium: fix critical pointer access in alviumctrlinit The current implementation of alviumctrlinit creates several controls in function alviumctrlinit and uses the returned pointer without check. That can cause write...

5.3AI score0.00209EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•9 views

EUVD-2026-55325

In the Linux kernel, the following vulnerability has been resolved: media: mali-c55: Fix possible ERRPTR in enablestreams The mediapadremotepadunique function returns either a valid pointer or an ERRPTR on failure -ENOTUNIQ if multiple links are enabled, -ENOLINK if no connected pad is found. The...

5.3AI score0.00198EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•8 views

EUVD-2026-55324

In the Linux kernel, the following vulnerability has been resolved: media: meson: vdec: Fix memory leak in error path of vdecopen The vdecopen function previously jumped directly to errm2mrelease when vdecinitctrls failed, skipping release of the m2m context. This caused a resource leak. Fix it b...

5.3AI score0.00209EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•6 views

EUVD-2026-55323

In the Linux kernel, the following vulnerability has been resolved: media: msi2500: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers vi...

5.3AI score0.00138EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•6 views

EUVD-2026-55322

In the Linux kernel, the following vulnerability has been resolved: media: nuvoton: npcm-video: fix memory leaks in probe and remove npcmvideoprobe allocates the npcmvideo structure with kzallocobj but never frees it on any probe error path or in npcmvideoremove, leaking the allocation on every...

5.4AI score0.00209EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•8 views

EUVD-2026-55321

In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Add missing v4l2subdevcleanup in crossbar and pipe Both mxcisicrossbarinit and mxcisipipeinit call v4l2subdevinitfinalize which allocates the subdev active state, but neither mxcisicrossbarcleanup nor...

5.3AI score0.00209EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•5 views

EUVD-2026-55320

In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Fix potential out-of-bounds issues The maximum downscaling factor supported by ISI can be up to 16. Add minimum value constraint before applying the setting to hardware. Otherwise, the process will not respo...

5.2AI score0.00175EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•8 views

EUVD-2026-55319

In the Linux kernel, the following vulnerability has been resolved: media: pci: dm1105: Free allocated workqueue Destroy allocated workqueue in remove callback to free its resources, thus fixing memory leak...

5.3AI score0.00209EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•8 views

EUVD-2026-55318

In the Linux kernel, the following vulnerability has been resolved: media: pwc: Drain fillbuf on startstreaming failure pwcisocinit submits its isochronous URBs with usbsubmiturb.., GFPKERNEL in a loop. After the first URB is submitted, its completion handler pwcisochandler can run on another CPU...

5.6AI score0.00209EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•7 views

EUVD-2026-55317

In the Linux kernel, the following vulnerability has been resolved: media: pwc: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers via...

5.3AI score0.00175EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•5 views

EUVD-2026-55316

In the Linux kernel, the following vulnerability has been resolved: media: radio-si476x: Unregister v4l2device on probe failure si476xradioprobe registers radio-v4l2dev before allocating the V4L2 controls and before registering the video device. If any of those later steps fails, probe returns...

5.3AI score0.00209EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•8 views

EUVD-2026-55315

In the Linux kernel, the following vulnerability has been resolved: media: rtl2832: fix use-after-free in rtl2832remove canceldelayedworksync is called before i2cmuxdeladapters in rtl2832remove. While the cancel waits for any running instance of i2cgatework to finish, it does not prevent the time...

5.3AI score0.00209EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•6 views

EUVD-2026-55314

In the Linux kernel, the following vulnerability has been resolved: media: rtl2832sdr: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers...

5.6AI score0.00175EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•6 views

EUVD-2026-55313

In the Linux kernel, the following vulnerability has been resolved: media: saa7134: Fix a possible memory leak in saa7134videoinit1 In saa7134videoinit1, the return value of the first saa7134pgtablealloc is not checked. If it fails, the function continues as if successful, leaving the driver with...

5.3AI score0.00209EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•7 views

EUVD-2026-55312

In the Linux kernel, the following vulnerability has been resolved: media: stm32-dcmipp: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffe...

5.3AI score0.00173EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•7 views

EUVD-2026-55311

In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: unregister notifier on probe failure dcmigraphinit registers the async notifier before dcmiprobe toggles the reset line. If resetcontrolassert or resetcontroldeassert fails afterwards, probe returns through...

5.3AI score0.00175EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•6 views

EUVD-2026-55310

In the Linux kernel, the following vulnerability has been resolved: media: sun4i-csi: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers...

5.5AI score0.00175EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•7 views

EUVD-2026-55309

In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: Fix the error code of devmkzalloc in vipprobeslice In vipprobeslice, the error check for devmkzalloc incorrectly uses PTRERRORZERO which returns 0 for NULL pointer. Return -ENOMEM for devmkzalloc failure...

5.3AI score0.00198EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•7 views

EUVD-2026-55308

In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: unwind v4l2 device registration on probe error If the vpetop resource is missing, vpeprobe returns -ENODEV after v4l2deviceregister has succeeded. Probe failures do not call the driver's remove callback, so the v4...

5.3AI score0.00209EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•8 views

EUVD-2026-55307

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC active reference counts HEVC slice parameters are shared stateless V4L2 controls, but the common validation path does not verify the active L0/L1 reference counts before driver-specific code...

5.3AI score0.00175EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•7 views

EUVD-2026-55306

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-fwnode: Fix subdev owner overwritten in v4l2asyncregistersubdevsensor The v4l2 helper v4l2asyncregistersubdevsensor calls v4l2asyncregistersubdev, which is a macro that expands to v4l2asyncregistersubdevsd,THISMODULE...

5.3AI score0.00209EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•9 views

EUVD-2026-55305

In the Linux kernel, the following vulnerability has been resolved: media: vivid: check for vb2isbusy when toggling caps The vividupdateformatcap/out functions must only be called if the capture/output queue are not busy. But for the controls that select the CROP/COMPOSE/SCALE capability that is...

5.4AI score0.00175EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•7 views

EUVD-2026-55304

In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix cleanup bugs in vividinit When platformdeviceregister fails in vividinit, the embedded struct device in vividpdev has already been initialized by deviceinitialize, but the failure path jumps to freeoutputstrings...

5.4AI score0.00209EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•10 views

EUVD-2026-55303

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: close a re-opened queue timer in the destructor queuedelete closes the queue timer, then frees it. sndseqtimerclose clears q-timer-timeri. snduselocksync then drains borrowers, and sndseqtimerdelete frees q-timer. A...

5.3AI score0.00175EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•7 views

EUVD-2026-55302

In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: drain a slave's callback before its master detaches it sndtimercloselocked drains the closing instance's own in-flight callback IFLGCALLBACK before freeing it, but not its slaves'. When a master instance is closed,...

5.3AI score0.0017EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•12 views

EUVD-2026-55301

In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: don't re-enter an instance callback that is still running The userspace-driven timer utimer TRIGGER ioctl calls sndtimerinterrupt directly with no serialization, so two threads triggering the same utimer can run...

5.4AI score0.0017EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•6 views

EUVD-2026-55300

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB access from firmware ADDBA window size aggrrecvaddbareqevt logs a debug message when the firmware-supplied winsz is outside AGGRWINSZMIN, AGGRWINSZMAX but does not return. The out-of-range winsz is then used...

5.3AI score0.00398EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•6 views

EUVD-2026-55299

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix use-after-free in aggrresetstate The aggrresetstate function uses timerdelete non-synchronous for the aggregation timer before proceeding to delete TID state and before the structure is freed by callers like...

5.4AI score0.00268EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•6 views

EUVD-2026-55298

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper mwifiextdlsaddhtoper gates its follow-the-AP-bandwidth path on bssdesc-bcnhtcap being present, but then dereferences a different pointer, bssdesc-bcnhtoper...

5.3AI score0.002EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•6 views

EUVD-2026-55297

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: validate assoc response length before subtracting header wilcparseassocrespinfo computes the trailing IE length as ieslen = bufferlen - sizeofres; without first checking that bufferlen is at least sizeofstruct...

5.3AI score0.00405EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•7 views

EUVD-2026-55296

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7615: drop TXRXNOTIFY on non-mmio buses PKTTYPETXRXNOTIFY is an mmio-only event, but mt7615rxcheck and mt7615queuerxskb dispatch it to mt7615mactxfree on every bus. mt7615mactxfree cleans the DMA tx queues with...

5.3AI score0.002EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•6 views

EUVD-2026-55295

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: drop TXRXNOTIFY on non-mmio buses PKTTYPETXRXNOTIFY is an mmio-only event, but mt7921rxcheck and mt7921queuerxskb dispatch it to mt7921mactxfree on every bus. mt7921mactxfree cleans the DMA tx queues with...

5.2AI score0.002EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•6 views

EUVD-2026-55294

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: drop TXRXNOTIFY on non-mmio buses PKTTYPETXRXNOTIFY is an mmio-only event, but mt7925rxcheck and mt7925queuerxskb dispatch it to mt7925mactxfree on every bus. mt7925mactxfree cleans the DMA tx queues with...

5.2AI score0.002EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•5 views

EUVD-2026-55293

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: make releasescratchbuffers idempotent brcmfpciereleasescratchbuffers frees the shared.scratch and shared.ringupd DMA buffers with dmafreecoherent but does not clear the pointers afterwards, unlike the sibling...

5.3AI score0.00398EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•8 views

EUVD-2026-55292

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix NULL pointer dereference in rhash table destroy When unbinding the ath12k driver, kernel NULL pointer dereferences occur in irqworksync called from rhashtabledestroy. Two hash tables are affected: 1. ath12klinks...

5.3AI score0.00189EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•7 views

EUVD-2026-55291

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in rtwgetwpsie rtwgetwpsie iterates over IE data from network frames without validating that the IE header and payload fit within the remaining buffer before reading them. Specifically: - iniecnt...

5.4AI score0.002EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•7 views

EUVD-2026-55290

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Protect UUID list traversal The hcisync conversion moved class-of-device and EIR generation from an HCI request built under hdev-lock to asynchronous command sync work. The worker holds hdev-reqlock, but that...

5.4AI score0.00159EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 12:0 p.m.•5 views

EUVD-2026-55289

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Fix session UAF in settermios rfcommttysettermios tests dlc-session without rfcommmutex and later passes the pointer to rfcommsendrpn. The latter dereferences both session-initiator and session-sock. Meanwhile,...

5.4AI score0.002EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 11:59 a.m.•5 views

EUVD-2026-55288

In the Linux kernel, the following vulnerability has been resolved: exec: fix unsigned loop counter wrap in transferargstostack The stop value is derived from bprm-p PAGESHIFT. The index variable is an unsigned long. If bprm-p drops below PAGESIZE and stop becomes zero the loop condition index =...

5.3AI score0.00209EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 11:59 a.m.•7 views

EUVD-2026-55287

In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: set haveexecfd only once the interpreter is opened loadmiscbinary raises bprm-haveexecfd as soon as it sees the 'O' or 'C' flag. This happens well before it opens the interpreter. If that open fails the flag stays set...

5.5AI score0.002EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/10 11:59 a.m.•7 views

EUVD-2026-55286

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Move jumplabelinit before parseearlyparam When enabling both CONFIGMEMALLOCPROFILING=y and CONFIGMEMALLOCPROFILINGENABLEDBYDEFAULT=y, then diabling memory profiling by adding the boot parameter 'sysctl.vm.memprofiling=...

5.3AI score0.002EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/08/10 11:59 a.m.•7 views

EUVD-2026-55285

In the Linux kernel, the following vulnerability has been resolved: cdrom: fix stack out-of-bounds read in CDROMVOLCTRL mmcioctlcdromvolume first reads the audio control mode page into a 32-byte stack buffer with cgc-buflen set to 24. If the device reports a block descriptor, the function increas...

5.5AI score0.002EPSS
SaveExploits0References5
Total number of security vulnerabilities433104