Lucene search
+L
SusecveMost viewed

63077 matches found

SUSE CVE
SUSE CVE
•added 2025/12/25 12:57 a.m.•15 views

SUSE CVE-2023-54009

In the Linux kernel, the following vulnerability has been resolved: i2c: cadence: cdnsi2cmasterxfer: Fix runtime PM leak on error path The cdnsi2cmasterxfer function gets a runtime PM reference when the function is entered. This reference is released when the function is exited. There is currentl...

3.3CVSS6.4AI score0.00184EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2025/12/25 12:57 a.m.•15 views

SUSE CVE-2023-54020

In the Linux kernel, the following vulnerability has been resolved: dmaengine: sf-pdma: pdmadesc memory leak fix Commit b2cc5c465c2c "dmaengine: sf-pdma: Add multithread support for a DMA channel" changed sfpdmaprepdmamemcpy to unconditionally allocate a new sfpdmadesc each time it is called. The...

5.5CVSS6.4AI score0.00174EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2025/12/25 12:56 a.m.•15 views

SUSE CVE-2023-54068

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to call f2fswaitonpagewriteback in f2fswriterawpages BUGON will be triggered when writing files concurrently, because the same page is writtenback multiple times. 1597 void folioendwritebackstruct folio folio...

6.6AI score0.00137EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/12/25 12:55 a.m.•15 views

SUSE CVE-2023-54110

In the Linux kernel, the following vulnerability has been resolved: usb: rndishost: Secure rndisquery check against int overflow Variables off and len typed as uint32 in rndisquery function are controlled by incoming RNDIS response message thus their value may be manipulated. Setting off to a...

5.5CVSS6.5AI score0.00196EPSS
SaveExploits0References11
SUSE CVE
SUSE CVE
•added 2025/12/25 12:54 a.m.•15 views

SUSE CVE-2023-54140

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix WARNING in markbufferdirty due to discarded buffer reuse A syzbot stress test using a corrupted disk image reported that markbufferdirty called from nilfsmarkinodedirty or nilfspalloccommitallocentry may output a kern...

3.3CVSS6.4AI score0.00143EPSS
SaveExploits0References21
SUSE CVE
SUSE CVE
•added 2025/12/20 12:29 a.m.•15 views

SUSE CVE-2025-44005

An attacker can bypass authorization checks and force a Step CA ACME or SCEP provisioner to create certificates without completing certain protocol authorization checks...

10CVSS7AI score0.03589EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/12/19 1:7 a.m.•15 views

SUSE CVE-2024-29371

In jose4j before 0.9.6, an attacker can cause a Denial-of-Service DoS condition by crafting a malicious JSON Web Encryption JWE token with an exceptionally high compression ratio. When this token is processed by the server, it results in significant memory allocation and processing time during...

7.5CVSS5.4AI score0.00261EPSS
SaveExploits1References6
SUSE CVE
SUSE CVE
•added 2025/12/17 2:19 a.m.•15 views

SUSE CVE-2017-18871

An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, 4.3.4, and 4.2.2. It allows attackers to cause a denial of service application crash via an @ character before a JavaScript field name...

7.5CVSS6.8AI score0.01114EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2025/12/17 12:24 a.m.•15 views

SUSE CVE-2025-68241

In the Linux kernel, the following vulnerability has been resolved: ipv4: route: Prevent rtbindexception from rebinding stale fnhe The sit driver's packet transmission path calls: sittunnelxmit - updateorcreatefnhe, which lead to fnheremoveoldest being called to delete entries exceeding...

5.5CVSS6.2AI score0.00455EPSS
SaveExploits0References21
SUSE CVE
SUSE CVE
•added 2025/12/13 12:25 a.m.•15 views

SUSE CVE-2025-53045

unknown...

4.9CVSS7.5AI score0.00541EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2025/12/12 1:24 a.m.•15 views

SUSE CVE-2002-0657

Buffer overflow in OpenSSL 0.9.7 before 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arbitrary code via a long master key...

7.5CVSS8.1AI score0.09232EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/12/12 12:50 a.m.•15 views

SUSE CVE-2025-12756

Mattermost versions 11.0.x = 11.0.2, 10.12.x = 10.12.1, 10.11.x = 10.11.4, 10.5.x = 10.5.12 fail to validate user permissions when deleting comments in Boards, which allows an authenticated user with the editor role to delete comments created by other users...

4.3CVSS6.8AI score0.00177EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2025/12/11 12:46 a.m.•15 views

SUSE CVE-2025-14326

Use-after-free in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 146 and Thunderbird 146...

6.5CVSS7.3AI score0.00452EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/12/10 12:39 a.m.•15 views

SUSE CVE-2022-50634

In the Linux kernel, the following vulnerability has been resolved: power: supply: cw2015: Fix potential null-ptr-deref in cwbatprobe cwbatprobe calls createsinglethreadworkqueue and not checked the ret value, which may return NULL. And a null-ptr-deref may happen: cwbatprobe...

6.5AI score0.00193EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/12/10 12:39 a.m.•15 views

SUSE CVE-2022-50637

In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom-hw: Fix memory leak in qcomcpufreqhwreadlut If "cpudev" fails to get opp table in qcomcpufreqhwreadlut, the program will return, resulting in "table" resource is not released...

5.5CVSS6.5AI score0.00195EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/12/10 12:38 a.m.•15 views

SUSE CVE-2022-50659

In the Linux kernel, the following vulnerability has been resolved: hwrng: geode - Fix PCI device refcount leak foreachpcidev is implemented by pcigetdevice. The comment of pcigetdevice says that it will increase the reference count for the returned pcidev and also decrease the reference count fo...

6.4AI score0.00272EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/12/10 12:38 a.m.•15 views

SUSE CVE-2022-50673

In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in ext4orphancleanup I caught a issue as follows: ================================================================== BUG: KASAN: use-after-free in listaddvalid+0x28/0x1a0 Read of size 8 at addr...

7CVSS6.5AI score0.00206EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
•added 2025/12/10 12:38 a.m.•15 views

SUSE CVE-2022-50675

In the Linux kernel, the following vulnerability has been resolved: arm64: mte: Avoid setting PGmtetagged if no tags cleared or restored Prior to commit 69e3b846d8a7 "arm64: mte: Sync tags for pages where PTE is untagged", mtesynctags was only called for ptetagged entries those mapped with PROTMT...

5.5CVSS6.4AI score0.00236EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2025/12/10 12:35 a.m.•15 views

SUSE CVE-2023-53804

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix use-after-free bug of nilfsroot in nilfsevictinode During unmount process of nilfs2, nothing holds nilfsroot structure after nilfs2 detaches its writer in nilfsdetachlogwriter. However, since nilfsevictinode uses...

5.5CVSS6.5AI score0.00136EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2025/12/10 12:26 a.m.•15 views

SUSE CVE-2025-40342

In the Linux kernel, the following vulnerability has been resolved: nvme-fc: use lock accessing portstate and rport state nvmefcunregisterremote removes the remote port on a lport object at any point in time when there is no active association. This races with with the reconnect logic, because...

6.4CVSS6.5AI score0.0036EPSS
SaveExploits0References23
SUSE CVE
SUSE CVE
•added 2025/12/08 12:23 a.m.•15 views

SUSE CVE-2025-40280

In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipcmonreinitself. syzbot reported use-after-free of tipcnetnet-monitors in tipcmonreinitself. 0 The array is protected by RTNL, but tipcmonreinitself iterates over it without RTNL. tipcmonreinitself i...

7CVSS6.5AI score0.00143EPSS
SaveExploits0References28
SUSE CVE
SUSE CVE
•added 2025/11/13 12:24 a.m.•15 views

SUSE CVE-2025-40149

In the Linux kernel, the following vulnerability has been resolved: tls: Use skdstget and dstdevrcu in getnetdevforsock. getnetdevforsock is called during setsockopt, so not under RCU. Using skdstgetsk-dev could trigger UAF. Let's use skdstget and dstdevrcu. Note that the only -ndoskgetlowerdev...

6.3CVSS6.5AI score0.00161EPSS
SaveExploits0References21
SUSE CVE
SUSE CVE
•added 2025/10/29 12:25 a.m.•15 views

SUSE CVE-2025-40044

In the Linux kernel, the following vulnerability has been resolved: fs: udf: fix OOB read in lengthAllocDescs handling When parsing Allocation Extent Descriptor, lengthAllocDescs comes from on-disk data and must be validated against the block size. Crafted or corrupted images may set...

6.3CVSS6.4AI score0.00161EPSS
SaveExploits0References28
SUSE CVE
SUSE CVE
•added 2025/10/29 12:24 a.m.•15 views

SUSE CVE-2025-40078

In the Linux kernel, the following vulnerability has been resolved: bpf: Explicitly check accesses to bpfsockaddr Syzkaller found a kernel warning on the following sockaddr program: 0: r0 = 0 1: r2 = u32 r1 +60 2: exit which triggers: verifier bug: error during ctx access conversion 0 This is...

5.5CVSS6.4AI score0.00222EPSS
SaveExploits0References20
SUSE CVE
SUSE CVE
•added 2025/10/09 11:23 p.m.•15 views

SUSE CVE-2025-39955

In the Linux kernel, the following vulnerability has been resolved: tcp: Clear tcpsksk-fastopenrsk in tcpdisconnect. syzbot reported the splat below where a socket had tcpsksk-fastopenrsk in the TCPESTABLISHED state. 0 syzbot reused the server-side TCP Fast Open socket as a new client before the...

6.1CVSS6.4AI score0.00147EPSS
SaveExploits0References23
SUSE CVE
SUSE CVE
•added 2025/10/08 11:22 p.m.•15 views

SUSE CVE-2025-58183

tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a...

3.3CVSS6.8AI score0.00413EPSS
SaveExploits0References32
SUSE CVE
SUSE CVE
•added 2025/10/05 2:57 a.m.•15 views

SUSE CVE-2023-6378

A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.5CVSS7.2AI score0.009EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2025/10/01 11:30 p.m.•15 views

SUSE CVE-2023-53460

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix memory leak in rtwusbprobe drivers/net/wireless/realtek/rtw88/usb.c:876 rtwusbprobe warn: 'hw' from ieee80211allochw not released on lines: 811 Fix this by modifying return to a goto statement...

5.5CVSS6.4AI score0.00128EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/09/17 11:29 p.m.•15 views

SUSE CVE-2023-53151

In the Linux kernel, the following vulnerability has been resolved: md/raid10: prevent soft lockup while flush writes Currently, there is no limit for raid1/raid10 plugged bio. While flushing writes, raid1 has condresched while raid10 doesn't, and too many writes can cause soft lockup. Follow up...

5.5CVSS6.4AI score0.00111EPSS
SaveExploits0References20
SUSE CVE
SUSE CVE
•added 2025/09/16 11:23 p.m.•15 views

SUSE CVE-2025-39832

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix lockdep assertion on sync reset unload event Fix lockdep assertion triggered during sync reset unload event. When the sync reset flow is initiated using the devlink reload fwactivate option, the PF already holds the...

5.5CVSS6.5AI score0.00107EPSS
SaveExploits0References21
SUSE CVE
SUSE CVE
•added 2025/09/12 11:23 p.m.•15 views

SUSE CVE-2025-39787

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: mdtloader: Ensure we don't read past the ELF header When the MDT loader is used in remoteproc, the ELF header is sanitized beforehand, but that's not necessary the case for other clients. Validate the size of the...

4.4CVSS6.6AI score0.00167EPSS
SaveExploits0References22
SUSE CVE
SUSE CVE
•added 2025/09/11 11:24 p.m.•15 views

SUSE CVE-2025-39764

In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: remove refcounting in expectation dumpers Same pattern as previous patch: do not keep the expectation object alive via refcount, only store a cookie value and then use that as the skip hint for dump...

5.5CVSS6.5AI score0.00165EPSS
SaveExploits0References22
SUSE CVE
SUSE CVE
•added 2025/09/05 11:22 p.m.•15 views

SUSE CVE-2025-39713

In the Linux kernel, the following vulnerability has been resolved: media: rainshadow-cec: fix TOCTOU race condition in raininterrupt In the interrupt handler raininterrupt, the buffer full check on rain-buflen is performed before acquiring rain-buflock. This creates a Time-of-Check to Time-of-Us...

5.5CVSS6.8AI score0.00134EPSS
SaveExploits0References21
SUSE CVE
SUSE CVE
•added 2025/09/04 11:23 p.m.•15 views

SUSE CVE-2025-38697

In the Linux kernel, the following vulnerability has been resolved: jfs: upper bound check of tree index in dbAllocAG When computing the tree index in dbAllocAG, we never check if we are out of bounds realative to the size of the stree. This could happen in a scenario where the filesystem metadat...

7CVSS6.5AI score0.00179EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2025/08/22 11:29 p.m.•15 views

SUSE CVE-2025-38618

In the Linux kernel, the following vulnerability has been resolved: vsock: Do not allow binding to VMADDRPORTANY It is possible for a vsock to autobind to VMADDRPORTANY. This can cause a use-after-free when a connection is made to the bound socket. The socket returned by accept also has port...

7CVSS7.7AI score0.00163EPSS
SaveExploits0References101
SUSE CVE
SUSE CVE
•added 2025/08/22 11:28 p.m.•15 views

SUSE CVE-2025-38660

In the Linux kernel, the following vulnerability has been resolved: ceph parselongname: strrchr expects NUL-terminated string ... and parselongname is not guaranteed that. That's the reason why it uses kmemdupnul to build the argument for kstrtou64; the problem is, kstrtou64 is not the only thing...

5.5CVSS6.5AI score0.0038EPSS
SaveExploits0References22
SUSE CVE
SUSE CVE
•added 2025/08/19 11:23 p.m.•15 views

SUSE CVE-2025-38565

In the Linux kernel, the following vulnerability has been resolved: perf/core: Exit early on perfmmap fail When perfmmap fails to allocate a buffer, it still invokes the eventmapped callback of the related event. On X86 this might increase the perfrdpmcallowed reference counter. But nothing undoe...

3.3CVSS6.5AI score0.0018EPSS
SaveExploits0References29
SUSE CVE
SUSE CVE
•added 2025/08/19 11:23 p.m.•15 views

SUSE CVE-2025-38582

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix double destruction of rsvqp rsvqp may be double destroyed in error flow, first in freemrinit, and then in hnsroceexit. Fix it by moving the freemrinit call into hnsrocev2init. listdel corruption, ffff589732eb9b50-ne...

6.1CVSS6.6AI score0.00165EPSS
SaveExploits0References22
SUSE CVE
SUSE CVE
•added 2025/08/16 11:22 p.m.•15 views

SUSE CVE-2025-38516

In the Linux kernel, the following vulnerability has been resolved: pinctrl: qcom: msm: mark certain pins as invalid for interrupts On some platforms, the UFS-reset pin has no interrupt logic in TLMM but is nevertheless registered as a GPIO in the kernel. This enables the user-space to trigger a...

5.5CVSS6.4AI score0.0016EPSS
SaveExploits0References20
SUSE CVE
SUSE CVE
•added 2025/08/16 11:22 p.m.•15 views

SUSE CVE-2025-38520

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Don't call mmput from MMU notifier callback If the process is exiting, the mmput inside mmu notifier callback from compactd or fork or numa balancing could release the last reference of mm struct to call exitmmap and...

4.7CVSS6.4AI score0.00114EPSS
SaveExploits0References20
SUSE CVE
SUSE CVE
•added 2025/07/25 11:23 p.m.•15 views

SUSE CVE-2025-38365

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a race between renames and directory logging We have a race between a rename and directory inode logging that if it happens and we crash/power fail before the rename completes, the next time the filesystem is mounted,...

6.3CVSS6.6AI score0.00297EPSS
SaveExploits0References22
SUSE CVE
SUSE CVE
•added 2025/07/07 11:24 p.m.•15 views

SUSE CVE-2025-38177

In the Linux kernel, the following vulnerability has been resolved: schhfsc: make hfscqlennotify idempotent hfscqlennotify is not idempotent either and not friendly to its callers, like fqcodeldequeue. Let's make it idempotent to ease qdisctreereducebacklog callers' life: 1. updatevf decreases...

7CVSS6.5AI score0.00162EPSS
SaveExploits0References88
SUSE CVE
SUSE CVE
•added 2025/07/04 11:21 p.m.•15 views

SUSE CVE-2025-38234

In the Linux kernel, the following vulnerability has been resolved: sched/rt: Fix race in pushrttask Overview ======== When a CPU chooses to call pushrttask and picks a task to push to another CPU's runqueue then it will call findlocklowestrq method which would take a double lock on both CPUs'...

4.7CVSS6.3AI score0.00142EPSS
SaveExploits0References30
SUSE CVE
SUSE CVE
•added 2025/07/03 11:23 p.m.•15 views

SUSE CVE-2025-38124

In the Linux kernel, the following vulnerability has been resolved: net: fix udp gso skbsegment after pull from fraglist Commit a1e40ac5b5e9 "net: gso: fix udp gso fraglist segmentation after pull from fraglist" detected invalid geometry in fraglist skbs and redirects them from skbsegmentlist to...

5.5CVSS6.5AI score0.00387EPSS
SaveExploits0References23
SUSE CVE
SUSE CVE
•added 2025/07/03 11:23 p.m.•15 views

SUSE CVE-2025-38136

In the Linux kernel, the following vulnerability has been resolved: usb: renesasusbhs: Reorder clock handling and power management in probe Reorder the initialization sequence in usbhsprobe to enable runtime PM before accessing registers, preventing potential crashes due to uninitialized clocks...

5.5CVSS6.2AI score0.00176EPSS
SaveExploits0References22
SUSE CVE
SUSE CVE
•added 2025/06/19 3:45 a.m.•15 views

SUSE CVE-2022-49950

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix memory corruption on open The probe session-duplication overflow check incremented the session count also when there were no more available sessions so that memory beyond the fixed-size slab-allocated session...

5.5CVSS6.6AI score0.00206EPSS
SaveExploits0References11
SUSE CVE
SUSE CVE
•added 2025/06/19 3:43 a.m.•15 views

SUSE CVE-2022-50026

In the Linux kernel, the following vulnerability has been resolved: habanalabs/gaudi: fix shift out of bounds When validating NIC queues, queue offset calculation must be performed only for NIC queues...

5.5CVSS6.4AI score0.00161EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
•added 2025/06/19 3:42 a.m.•15 views

SUSE CVE-2022-50066

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix aqvec index out of range error The final update statement of the for loop exceeds the array range, the dereference of self-aqveci is not checked and then leads to the index out of range error. Also fixed this...

5.5CVSS6.4AI score0.00169EPSS
SaveExploits0References11
SUSE CVE
SUSE CVE
•added 2025/06/19 3:42 a.m.•15 views

SUSE CVE-2022-50079

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check correct bounds for stream encoder instances for DCN303 Why & How engid for DCN303 cannot be more than 1, since we have only two instances of stream encoders. Check the correct boundary condition for engine ...

5.5CVSS6.5AI score0.00224EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
•added 2025/06/19 3:40 a.m.•15 views

SUSE CVE-2022-50151

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: fix random warning message when driver load Warning log: 4.141392 Unexpected gfp: 0x4 GFPDMA32. Fixing up to gfp: 0xa20 GFPATOMIC. Fix your code! 4.150340 CPU: 1 PID: 175 Comm: 1-0050 Not tainted...

5.5CVSS6.3AI score0.00166EPSS
SaveExploits0References9
Total number of security vulnerabilities5000