Lucene search
+L
SusecveMost viewed

62981 matches found

SUSE CVE
SUSE CVE
•added 2025/06/19 3:45 a.m.•17 views

SUSE CVE-2022-49977

In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix NULL pointer dereference in isftracetrampoline when ftrace is dead ftracestartup does not remove ops from ftraceopslist when ftracestartupenable fails: registerftracefunction ftracestartup registerftracefunction...

4.4CVSS6AI score0.0022EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2025/06/19 3:44 a.m.•17 views

SUSE CVE-2022-49999

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix space cache corruption and potential double allocations When testing spacecache v2 on a large set of machines, we encountered a few symptoms: 1. "unable to add free space :-17" EEXIST errors. 2. Missing free space info...

5.5CVSS6.5AI score0.00211EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
•added 2025/06/19 3:43 a.m.•17 views

SUSE CVE-2022-50055

In the Linux kernel, the following vulnerability has been resolved: iavf: Fix adminq error handling iavfallocasqbufs/iavfallocarqbufs allocates with dmaalloccoherent memory for VF mailbox. Free DMA regions for both ASQ and ARQ in case error happens during configuration of ASQ/ARQ registers. Witho...

5.5CVSS6.3AI score0.00159EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
•added 2025/06/19 3:40 a.m.•17 views

SUSE CVE-2022-50158

In the Linux kernel, the following vulnerability has been resolved: mtd: partitions: Fix refcount leak in parseredbootof ofgetchildbyname returns a node pointer with refcount incremented, we should use ofnodeput on it when not need anymore. Add missing ofnodeput to avoid refcount leak...

5.5CVSS6.3AI score0.0016EPSS
SaveExploits0References11
SUSE CVE
SUSE CVE
•added 2025/05/21 12:46 a.m.•17 views

SUSE CVE-2025-37944

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix invalid entry fetch in ath12kdpmonsrngprocess Currently, ath12kdpmonsrngprocess uses ath12khalsrngsrcgetnextentry to fetch the next entry from the destination ring. This is incorrect because...

5.5CVSS7.8AI score0.00261EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2025/05/21 12:46 a.m.•17 views

SUSE CVE-2025-37958

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: fix dereferencing invalid pmd migration entry When migrating a THP, concurrent access to the PMD migration entry during a deferred split scan can lead to an invalid address access, as illustrated below. To prevent...

5.5CVSS7.8AI score0.00183EPSS
SaveExploits0References21
SUSE CVE
SUSE CVE
•added 2025/05/02 2:2 a.m.•17 views

SUSE CVE-2025-37789

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix nested key length validation in the set action It's not safe to access nlalenovskey if the data is smaller than the netlink header. Check that the attribute is OK first...

5.5CVSS6.3AI score0.00204EPSS
SaveExploits0References26
SUSE CVE
SUSE CVE
•added 2025/04/18 11:21 p.m.•17 views

SUSE CVE-2024-58095

In the Linux kernel, the following vulnerability has been resolved: jfs: add check read-only before txBeginAnon call Added a read-only check before calling txBeginAnon in extAlloc and extRecord. This prevents modification attempts on a read-only mounted filesystem, avoiding potential errors or...

5.5CVSS7.7AI score0.00161EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2025/04/05 2:25 a.m.•17 views

SUSE CVE-2025-21959

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconncount: Fully initialize struct nfconncounttuple in inserttree Since commit b36e4523d4d5 "netfilter: nfconncount: fix garbage collection confirm race", cpu and jiffies32 were introduced to the struct...

5.9CVSS7.7AI score0.00409EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2025/03/29 3:4 a.m.•17 views

SUSE CVE-2025-1097

A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the auth-tls-match-cn Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of...

8.8CVSS7.6AI score0.35381EPSS
SaveExploits7References5
SUSE CVE
SUSE CVE
•added 2025/03/12 3:23 p.m.•17 views

SUSE CVE-2025-21859

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: fmidi: fmidicomplete to call queuework When using USB MIDI, a lock is attempted to be acquired twice through a re-entrant call to fmiditransmit, causing a deadlock. Fix it by using queuework to schedule the inner...

5.5CVSS7.5AI score0.00169EPSS
SaveExploits0References15
SUSE CVE
SUSE CVE
•added 2025/01/20 3:47 a.m.•17 views

SUSE CVE-2025-21635

In the Linux kernel, the following vulnerability has been resolved: rds: sysctl: rdstcprcv,sndbuf: avoid using current-nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the...

5.5CVSS7.7AI score0.00183EPSS
SaveExploits0References17
SUSE CVE
SUSE CVE
•added 2024/12/28 3:48 a.m.•17 views

SUSE CVE-2024-56568

In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Defer probe of clients after smmu device bound Null pointer dereference occurs due to a race between smmu driver probe and client driver probe, when ofdmaconfigure for client is called after the iommudeviceregiste...

4.7CVSS6.4AI score0.00162EPSS
SaveExploits0References17
SUSE CVE
SUSE CVE
•added 2024/11/10 3:49 a.m.•17 views

SUSE CVE-2024-50237

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: do not pass a stopped vif to the driver in .gettxpower Avoid potentially crashing in the driver because of uninitialized private data...

5.5CVSS7.7AI score0.00272EPSS
SaveExploits0References21
SUSE CVE
SUSE CVE
•added 2024/10/11 2:48 a.m.•17 views

SUSE CVE-2024-47667

In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Add workaround for Errata i2037 AM65x SR 1.0 Errata i2037 in AM65x/DRA80xM Processors Silicon Revision 1.0 SPRZ452DJuly 2018Revised December 2019 1 mentions when an inbound PCIe TLP spans more than two internal AXI...

4.4CVSS6.5AI score0.0021EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2024/10/11 2:48 a.m.•17 views

SUSE CVE-2024-47669

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix state management in error path of log writing function After commit a694291a6211 "nilfs2: separate wait function from nilfssegctorwrite" was applied, the log writing function nilfssegctordoconstruct was able to issue...

6.3CVSS6.4AI score0.00215EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2024/07/16 2:33 a.m.•17 views

SUSE CVE-2024-41007

In the Linux kernel, the following vulnerability has been resolved: tcp: avoid too many retransmit packets If a TCP socket is using TCPUSERTIMEOUT, and the other peer retracted its window to zero, tcpretransmittimer can retransmit a packet every two jiffies 2 ms for HZ=1000, for about 4 minutes...

2.5CVSS6.4AI score0.00773EPSS
SaveExploits0References15
SUSE CVE
SUSE CVE
•added 2024/06/22 3:35 a.m.•17 views

SUSE CVE-2024-38570

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix potential glock use-after-free on unmount When a DLM lockspace is released and there ares still locks in that lockspace, DLM will unlock those locks automatically. Commit fb6791d100d1b started exploiting this behavior t...

6.7CVSS6.2AI score0.00682EPSS
SaveExploits0References15
SUSE CVE
SUSE CVE
•added 2024/06/22 3:34 a.m.•17 views

SUSE CVE-2024-38618

In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Set lower bound of start tick time Currently ALSA timer doesn't have the lower limit of the start tick time, and it allows a very small size, e.g. 1 tick with 1ns resolution for hrtimer. Such a situation may lead to ...

4.7CVSS7.5AI score0.00648EPSS
SaveExploits0References19
SUSE CVE
SUSE CVE
•added 2024/06/04 1:13 p.m.•17 views

SUSE CVE-2020-10773

A stack information leak flaw was found in s390/s390x in the Linux kernel's memory manager functionality, where it incorrectly writes to the /proc/sys/vm/cmmtimeout file. This flaw allows a local user to see the kernel data...

2.5CVSS5.5AI score0.00366EPSS
SaveExploits0References27
SUSE CVE
SUSE CVE
•added 2024/05/28 3:34 a.m.•17 views

SUSE CVE-2021-47393

In the Linux kernel, the following vulnerability has been resolved: hwmon: mlxreg-fan Return non-zero value when fan current state is enforced from sysfs Fan speed minimum can be enforced from sysfs. For example, setting current fan speed to 20 is used to enforce fan speed to be at 100% speed, 19...

5.5CVSS6.6AI score0.00244EPSS
SaveExploits0References12
SUSE CVE
SUSE CVE
•added 2024/05/21 2:0 a.m.•17 views

SUSE CVE-2024-35808

In the Linux kernel, the following vulnerability has been resolved: md/dm-raid: don't call mdreapsyncthread directly Currently mdreapsyncthread is called from raidmessage directly without holding 'reconfigmutex', this is definitely unsafe because mdreapsyncthread can change many fields that is...

5.5CVSS6.3AI score0.0018EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2024/05/18 2:46 a.m.•17 views

SUSE CVE-2024-27405

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs It is observed sometimes when tethering is used over NCM with Windows 11 as host, at some instances, the gadgetgiveback has one byte appended at the end of a prop...

3.3CVSS6.4AI score0.01287EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2024/05/04 2:23 a.m.•17 views

SUSE CVE-2024-27011

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fix memleak in map from abort path The delete set command does not rely on the transaction object for element removal, therefore, a combination of delete element + delete set from the abort path could result ...

5.5CVSS6.5AI score0.00232EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2024/04/30 2:26 a.m.•17 views

SUSE CVE-2022-48663

In the Linux kernel, the following vulnerability has been resolved: gpio: mockup: fix NULL pointer dereference when removing debugfs We now remove the device's debugfs entries when unbinding the driver. This now causes a NULL-pointer dereference on module exit because the platform devices are...

5.5CVSS6.2AI score0.00226EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2024/04/18 2:31 a.m.•17 views

SUSE CVE-2024-3847

Insufficient policy enforcement in WebUI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Low...

6.1CVSS6.5AI score0.00801EPSS
SaveExploits1References6
SUSE CVE
SUSE CVE
•added 2024/04/15 11:12 p.m.•17 views

SUSE CVE-2024-26777

In the Linux kernel, the following vulnerability has been resolved: fbdev: sis: Error out if pixclock equals zero The userspace program could pass any values to the driver through ioctl interface. If the driver doesn't check the value of pixclock, it may cause divide-by-zero error. In...

5.5CVSS6AI score0.00254EPSS
SaveExploits0References11
SUSE CVE
SUSE CVE
•added 2024/04/15 11:12 p.m.•17 views

SUSE CVE-2024-28718

An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the certmanager.py. component...

9.8CVSS8AI score0.01063EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2024/03/27 4:25 a.m.•17 views

SUSE CVE-2021-47177

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix sysfs leak in allociommu iommudevicesysfsadd is called before, so is has to be cleaned on subsequent errors...

5.5CVSS7.8AI score0.00238EPSS
SaveExploits0References11
SUSE CVE
SUSE CVE
•added 2024/03/07 4:24 a.m.•17 views

SUSE CVE-2024-26625

In the Linux kernel, the following vulnerability has been resolved: llc: call sockorphan at release time syzbot reported an interesting trace 1 caused by a stale sk-skwq pointer in a closed llc socket. In commit ff7b11aa481f "net: socket: set sock-sk to NULL after calling protoops::release" Eric...

5.5CVSS6.1AI score0.00249EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2024/02/13 3:50 a.m.•17 views

SUSE CVE-2024-25744

In the Linux kernel before 6.6.7, an untrusted VMM can trigger int80 syscall handling at any given point. This is related to arch/x86/coco/tdx/tdx.c and arch/x86/mm/memencryptamd.c...

7.8CVSS6.8AI score0.00278EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2023/02/15 6:10 a.m.•17 views

SUSE CVE-2007-6209

Util/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

4.6CVSS6.7AI score0.00325EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 6:5 a.m.•17 views

SUSE CVE-2009-0115

The Device Mapper multipathing driver aka multipath-tools or device-mapper-multipath 0.4.8, as used in SUSE openSUSE, SUSE Linux Enterprise Server SLES, Fedora, and possibly other operating systems, uses world-writable permissions for the socket file aka /var/run/multipathd.sock, which allows loc...

7.8CVSS7AI score0.00494EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
•added 2023/02/15 5:17 a.m.•17 views

SUSE CVE-2015-4732

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-2590...

10CVSS5.2AI score0.06457EPSS
SaveExploits0References14
SUSE CVE
SUSE CVE
•added 2023/02/15 4:49 a.m.•17 views

SUSE CVE-2017-5986

Race condition in the sctpwaitforsndbuf function in net/sctp/socket.c in the Linux kernel before 4.9.11 allows local users to cause a denial of service assertion failure and panic via a multithreaded application that peels off an association in a certain buffer-full state...

5.5CVSS6AI score0.01162EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2023/02/15 4:43 a.m.•17 views

SUSE CVE-2017-10384

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.57 and earlier 5.6.37 and earlier 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

6.5CVSS7.8AI score0.03078EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
•added 2023/02/15 4:39 a.m.•17 views

SUSE CVE-2017-14051

An integer overflow in the qla2x00sysfswriteoptromctl function in drivers/scsi/qla2xxx/qlaattr.c in the Linux kernel through 4.12.10 allows local users to cause a denial of service memory corruption and system crash by leveraging root access...

6.4CVSS6.1AI score0.00373EPSS
SaveExploits0References14
SUSE CVE
SUSE CVE
•added 2023/02/15 4:11 a.m.•17 views

SUSE CVE-2019-11811

An issue was discovered in the Linux kernel before 5.0.4. There is a use-after-free upon attempted read access to /proc/ioports after the ipmisi module is removed, related to drivers/char/ipmi/ipmisiintf.c, drivers/char/ipmi/ipmisimemio.c, and drivers/char/ipmi/ipmisiportio.c...

3.9CVSS6.6AI score0.00451EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2023/02/15 4:9 a.m.•18 views

SUSE CVE-2019-14523

An issue was discovered in Schism Tracker through 20190722. There is an integer underflow via a large plen in fmtoktloadsong in the Amiga Oktalyzer parser in fmt/okt.c...

7.8CVSS7.5AI score0.01238EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
•added 2023/02/15 3:54 a.m.•17 views

SUSE CVE-2020-24999

There is an invalid memory access in the function fprintf located in Error.cc in Xpdf 4.0.2. It can be triggered by sending a crafted PDF file to the pdftohtml binary, which allows a remote attacker to cause a Denial of Service Segmentation fault or possibly have unspecified other impact...

7.8CVSS7.5AI score0.01055EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2023/02/15 3:31 a.m.•17 views

SUSE CVE-2022-3239

A flaw use after free in the Linux kernel video4linux driver was found in the way user triggers em28xxusbprobe for the Empia 28xx based TV cards. A local user could use this flaw to crash the system or potentially escalate their privileges on the system...

6.4CVSS6.6AI score0.00243EPSS
SaveExploits0References25
SUSE CVE
SUSE CVE
•added 2023/02/15 3:29 a.m.•17 views

SUSE CVE-2022-21307

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physica...

6.3CVSS5.8AI score0.02518EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 3:23 a.m.•17 views

SUSE CVE-2022-42329

Guests can trigger deadlock in Linux netback driver This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packe...

5.7CVSS7.3AI score0.0021EPSS
SaveExploits0References20
SUSE CVE
SUSE CVE
•added 2023/02/15 3:22 a.m.•17 views

SUSE CVE-2022-47519

An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211P2PATTROPERCHANNEL in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger an out-of-bounds write when parsing the channel list attribute from Wi-Fi management frame...

7.8CVSS6.7AI score0.00298EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/08/06 11:56 p.m.•16 views

SUSE CVE-2026-64565

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix heap-buffer-overflow in imspcuprocessdata The imspcuprocessdata processes incoming URB data byte by byte. However, it fails to check if the readpos index exceeds IMSPCUBUFSIZE. If a malicious USB device sends...

5.6AI score0.00173EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/08/05 12:42 a.m.•16 views

SUSE CVE-2026-18654

Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and AWS CLI v2 before 2.35.3 might allow man-in-the-middle attackers to intercept SSHsessions and file transfers via network positioning between the client and the EMR cluster endpoint. To...

6.9CVSS5.5AI score0.0029EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/08/01 4:53 p.m.•16 views

SUSE CVE-2026-33757

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.2, OpenBao does not prompt for user confirmation when logging in via JWT/OIDC and a role with callbackmode set to direct. This allows an attacker to start an authentication request and perform "remote phishin...

8.3CVSS7.2AI score0.00411EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/07/31 12:29 a.m.•16 views

SUSE CVE-2026-17812

Inappropriate implementation in DigitalCredentials in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

5.4CVSS5.5AI score0.00198EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/07/30 5:2 p.m.•16 views

SUSE CVE-2026-17971

Inappropriate implementation in Frame in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: Low...

8.8CVSS5.5AI score0.00271EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/07/30 4:52 p.m.•16 views

SUSE CVE-2026-42494

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

8.1CVSS5.5AI score0.00115EPSS
SaveExploits0References7
Total number of security vulnerabilities5000