Lucene search
+L
SusecveMost viewed

63077 matches found

SUSE CVE
SUSE CVE
•added 2025/06/19 3:39 a.m.•15 views

SUSE CVE-2022-50172

In the Linux kernel, the following vulnerability has been resolved: mt76: mt76x02u: fix possible memory leak in mt76x02umcusendmsg Free the skb if mt76ubulkmsg fails in mt76x02umcusendmsg routine...

5.5CVSS6.2AI score0.00202EPSS
SaveExploits0References11
SUSE CVE
SUSE CVE
•added 2025/06/19 3:16 a.m.•15 views

SUSE CVE-2025-38022

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix "KASAN: slab-use-after-free Read in ibregisterdevice" problem Call Trace: dumpstack lib/dumpstack.c:94 inline dumpstacklvl+0x116/0x1f0 lib/dumpstack.c:120 printaddressdescription mm/kasan/report.c:408 inline...

5.3CVSS7.9AI score0.00165EPSS
SaveExploits0References20
SUSE CVE
SUSE CVE
•added 2025/06/19 3:14 a.m.•15 views

SUSE CVE-2025-38053

In the Linux kernel, the following vulnerability has been resolved: idpf: fix null-ptr-deref in idpffeaturescheck idpffeaturescheck is used to validate the TX packet. skb header length is compared with the hardware supported value received from the device control plane. The value is stored in the...

5.5CVSS7.7AI score0.00157EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2025/05/21 12:47 a.m.•15 views

SUSE CVE-2025-37912

In the Linux kernel, the following vulnerability has been resolved: ice: Check VF VSI Pointer Value in icevcaddfdirfltr As mentioned in the commit baeb705fd6a7 "ice: always check VF VSI pointer values", we need to perform a null pointer check on the return value of icegetvfvsi before using it...

5.5CVSS7.7AI score0.00176EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2025/05/21 12:46 a.m.•15 views

SUSE CVE-2025-37970

In the Linux kernel, the following vulnerability has been resolved: iio: imu: stlsm6dsx: fix possible lockup in stlsm6dsxreadfifo Prevent stlsm6dsxreadfifo from falling in an infinite loop in case patternlen is equal to zero and the device FIFO is not empty...

5.5CVSS7.7AI score0.00142EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2025/05/10 2:53 a.m.•15 views

SUSE CVE-2025-37840

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: brcmnand: fix PM resume warning Fixed warning on PM resume as shown below caused due to uninitialized struct nandoperation that checks chip select field : WARNONop-cs = nanddevntargets&chip-base 14.588522 ----------...

5.5CVSS7.7AI score0.00312EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2025/05/10 2:52 a.m.•15 views

SUSE CVE-2025-37885

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Reset IRTE to host control if new route isn't postable Restore an IRTE back to host control remapped or posted MSI mode if the new GSI route prevents posting the IRQ directly to a vCPU, regardless of the GSI routing typ...

5.5CVSS6.4AI score0.00295EPSS
SaveExploits0References28
SUSE CVE
SUSE CVE
•added 2025/05/10 2:52 a.m.•15 views

SUSE CVE-2025-37887

In the Linux kernel, the following vulnerability has been resolved: pdscore: handle unsupported PDSCORECMDFWCONTROL result If the FW doesn't support the PDSCORECMDFWCONTROL command the driver might at the least print garbage and at the worst crash when the user runs the "devlink dev info" devlink...

5.5CVSS7.7AI score0.00267EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2025/05/09 4:54 a.m.•15 views

SUSE CVE-2022-49902

In the Linux kernel, the following vulnerability has been resolved: block: Fix possible memory leak for rqwb on adddisk failure kmemleak reported memory leaks in deviceadddisk: kmemleak: 3 new suspected memory leaks unreferenced object 0xffff88800f420800 size 512: comm "modprobe", pid 4275, jiffi...

5.5CVSS6.3AI score0.00186EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2025/05/09 3:23 a.m.•15 views

SUSE CVE-2025-37805

In the Linux kernel, the following vulnerability has been resolved: sound/virtio: Fix cancelsync warnings on uninitialized workstructs Betty reported hitting the following warning: 8.709131 T221 WARNING: CPU: 2 PID: 221 at kernel/workqueue.c:4182 ... 8.713282 T221 Call trace: 8.713365 T221...

2.5CVSS7.6AI score0.00191EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2025/05/07 2:20 a.m.•15 views

SUSE CVE-2022-49818

In the Linux kernel, the following vulnerability has been resolved: mISDN: fix misuse of putdevice in mISDNregisterdevice We should not release reference by putdevice before calling deviceinitialize...

5.3CVSS6.5AI score0.00189EPSS
SaveExploits0References12
SUSE CVE
SUSE CVE
•added 2025/05/02 2:3 a.m.•15 views

SUSE CVE-2025-23149

In the Linux kernel, the following vulnerability has been resolved: tpm: do not start chip while suspended Checking TPMCHIPFLAGSUSPENDED after the call to tpmfindgetops can lead to a spurious tpmchipstart call: 35985.503771 i2c i2c-1: Transfer while suspended 35985.503796 WARNING: CPU: 0 PID: 74 ...

5.5CVSS7.6AI score0.00189EPSS
SaveExploits0References17
SUSE CVE
SUSE CVE
•added 2025/05/02 2:3 a.m.•15 views

SUSE CVE-2025-37740

In the Linux kernel, the following vulnerability has been resolved: jfs: add sanity check for agwidth in dbMount The width in dmapctl of the AG is zero, it trigger a divide error when calculating the control page level in dbAllocAG. To avoid this issue, add a check for agwidth in dbAllocAG...

4.4CVSS7.7AI score0.00185EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2025/05/02 2:3 a.m.•15 views

SUSE CVE-2025-37747

In the Linux kernel, the following vulnerability has been resolved: perf: Fix hang while freeing sigtrap event Perf can hang while freeing a sigtrap event if a related deferred signal hadn't managed to be sent before the file got closed: perfeventoverflow taskworkaddperfpendingtask fput...

5.5CVSS7.5AI score0.00176EPSS
SaveExploits0References19
SUSE CVE
SUSE CVE
•added 2025/05/02 2:2 a.m.•15 views

SUSE CVE-2025-37752

In the Linux kernel, the following vulnerability has been resolved: netsched: schsfq: move the limit validation It is not sufficient to directly validate the limit on the data that the user passes as it can be updated based on how the other parameters are changed. Move the check at the end of the...

7CVSS6.5AI score0.00252EPSS
SaveExploits0References88
SUSE CVE
SUSE CVE
•added 2025/05/02 2:2 a.m.•15 views

SUSE CVE-2025-37787

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered Russell King reports that a system with mv88e6xxx dereferences a NULL pointer when unbinding this driver:...

5.5CVSS7.7AI score0.00176EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2025/04/23 2:38 a.m.•15 views

SUSE CVE-2025-22060

In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: Prevent parser TCAM memory corruption Protect the parser TCAM/SRAM memory, and the cached shadow SRAM information, from concurrent modifications. Both the TCAM and SRAM tables are indirectly accessed by configuring an...

5.5CVSS7.7AI score0.00139EPSS
SaveExploits0References20
SUSE CVE
SUSE CVE
•added 2025/04/18 11:19 p.m.•15 views

SUSE CVE-2025-37785

In the Linux kernel, the following vulnerability has been resolved: ext4: fix OOB read when checking dotdot dir Mounting a corrupted filesystem with directory which contains '.' dir entry with reclen == block size results in out-of-bounds read later on, when the corrupted directory is removed...

6CVSS6.3AI score0.00283EPSS
SaveExploits0References24
SUSE CVE
SUSE CVE
•added 2025/04/18 1:23 a.m.•15 views

SUSE CVE-2025-22053

In the Linux kernel, the following vulnerability has been resolved: net: ibmveth: make vethpoolstore stop hanging v2: - Created a single error handling unlock and exit in vethpoolstore - Greatly expanded commit message with previous explanatory-only text Summary: Use rtnlmutex to synchronize...

5.5CVSS7.6AI score0.00143EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2025/04/04 2:58 a.m.•15 views

SUSE CVE-2025-21995

In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix fence reference count leak The lastscheduled fence leaks when an entity is being killed and adding the cleanup callback fails. Decrement the reference count of prev when dmafenceaddcallback fails, ensuring proper...

5.5CVSS7.8AI score0.0018EPSS
SaveExploits0References15
SUSE CVE
SUSE CVE
•added 2025/03/07 2:37 a.m.•15 views

SUSE CVE-2025-21829

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix the warning "rxecleanup+0x12c/0x170 rdmarxe" The Call Trace is as below: " ? showregs.cold+0x1a/0x1f ? rxecleanup+0x12c/0x170 rdmarxe ? warn+0x84/0xd0 ? rxecleanup+0x12c/0x170 rdmarxe ? reportbug+0x105/0x180 ?...

5.5CVSS7.7AI score0.00393EPSS
SaveExploits0References14
SUSE CVE
SUSE CVE
•added 2025/02/28 2:22 a.m.•15 views

SUSE CVE-2025-21708

In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: enable basic endpoint checking Syzkaller reports 1 encountering a common issue of utilizing a wrong usb endpoint type during URB submitting stage. This, in turn, triggers a warning shown below. For now, enable...

5.5CVSS6.6AI score0.00201EPSS
SaveExploits0References14
SUSE CVE
SUSE CVE
•added 2025/02/27 3:11 a.m.•15 views

SUSE CVE-2022-49180

In the Linux kernel, the following vulnerability has been resolved: LSM: general protection fault in legacyparseparam The usual LSM hook "bail on fail" scheme doesn't work for cases where a security module may return an error code indicating that it does not recognize an input. In this particular...

5.5CVSS6.3AI score0.00264EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2025/02/27 3:5 a.m.•15 views

SUSE CVE-2022-49520

In the Linux kernel, the following vulnerability has been resolved: arm64: compat: Do not treat syscall number as ESRELx for a bad syscall If a compat process tries to execute an unknown system call above the ARMNRCOMPATEND number, the kernel sends a SIGILL signal to the offending process...

3.3CVSS6.6AI score0.00297EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2025/02/27 3:4 a.m.•15 views

SUSE CVE-2022-49604

In the Linux kernel, the following vulnerability has been resolved: ip: Fix data-races around sysctlipfwdusepmtu. While reading sysctlipfwdusepmtu, it can be changed concurrently. Thus, we need to add READONCE to its readers...

5.5CVSS6.5AI score0.00188EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
•added 2025/02/14 7:11 a.m.•15 views

SUSE CVE-2022-48921

In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix fault in reweightentity Syzbot found a GPF in reweightentity. This has been bisected to commit 4ef0c5c6b5ba "kernel/sched: Fix schedfork access an invalid schedtaskgroup" There is a race between schedpostfork and...

5.5CVSS6.1AI score0.00168EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2025/01/20 3:47 a.m.•15 views

SUSE CVE-2025-21650

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fixed hclgefetchpfreg accesses bar space out of bounds issue The TQP BAR space is divided into two segments. TQPs 0-1023 and TQPs 1024-1279 are in different BAR space addresses. However, hclgefetchpfreg does not...

5.5CVSS7.5AI score0.00201EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2025/01/09 12:21 a.m.•15 views

SUSE CVE-2024-56660

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, prevent potential error pointer dereference The drdomainaddvportcap function generally returns NULL on error but sometimes we want it to return ERRPTR-EBUSY so the caller can retry. The problem here is that "ret" ca...

5.5CVSS7.7AI score0.0022EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2025/01/09 12:20 a.m.•15 views

SUSE CVE-2024-56776

In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error pointers The return value of drmatomicgetcrtcstate needs to be checked. To avoid use of error pointer 'crtcstate' in case of the failure...

5.5CVSS7.7AI score0.00207EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2024/12/28 3:50 a.m.•15 views

SUSE CVE-2024-53214

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Properly hide first-in-list PCIe extended capability There are cases where a PCIe extended capability should be hidden from the user. For example, an unknown capability i.e., capability with ID greater than PCIEXTCAPIDM...

7.8CVSS7.6AI score0.00255EPSS
SaveExploits0References63
SUSE CVE
SUSE CVE
•added 2024/12/28 3:48 a.m.•15 views

SUSE CVE-2024-56573

In the Linux kernel, the following vulnerability has been resolved: efi/libstub: Free correct pointer on failure cmdlineptr is an out parameter, which is not allocated by the function itself, and likely points into the caller's stack. cmdline refers to the pool allocation that should be freed whe...

5.5CVSS7.6AI score0.00235EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2024/12/27 12:16 a.m.•15 views

SUSE CVE-2024-53163

In the Linux kernel, the following vulnerability has been resolved: crypto: qat/qat420xx - fix off by one in uofgetname This is called from uofgetname420xx where "numobjs" is the ARRAYSIZE of fwobjs. The needs to be = to prevent an out of bounds access...

6.6CVSS7.7AI score0.00248EPSS
SaveExploits0References15
SUSE CVE
SUSE CVE
•added 2024/10/26 3:2 a.m.•15 views

SUSE CVE-2024-49902

In the Linux kernel, the following vulnerability has been resolved: jfs: check if leafidx greater than num leaves per dmap tree syzbot report a out of bounds in dbSplit, it because dmtleafidx greater than num leaves per dmap tree, add a checking for dmtleafidx in dbFindLeaf. Shaggy: Modified sani...

7.8CVSS6.4AI score0.00287EPSS
SaveExploits0References19
SUSE CVE
SUSE CVE
•added 2024/10/26 3:2 a.m.•15 views

SUSE CVE-2024-49924

In the Linux kernel, the following vulnerability has been resolved: fbdev: pxafb: Fix possible use after free in pxafbtask In the pxafbprobe function, it calls the pxafbinitfbinfo function, after which &fbi-task is associated with pxafbtask. Moreover, within this pxafbinitfbinfo function, the...

6.4CVSS6.5AI score0.00249EPSS
SaveExploits0References20
SUSE CVE
SUSE CVE
•added 2024/10/24 3:18 a.m.•15 views

SUSE CVE-2024-49946

In the Linux kernel, the following vulnerability has been resolved: ppp: do not assume bh is held in pppchannelbridgeinput Networking receive path is usually handled from BH handler. However, some protocols need to acquire the socket lock, and packets might be stored in the socket backlog is the...

5.5CVSS6.2AI score0.00236EPSS
SaveExploits0References19
SUSE CVE
SUSE CVE
•added 2024/10/22 2:23 p.m.•15 views

SUSE CVE-2022-48967

In the Linux kernel, the following vulnerability has been resolved: NFC: nci: Bounds check struct nfctarget arrays While running under CONFIGFORTIFYSOURCE=y, syzkaller reported: memcpy: detected field-spanning write size 129 of single field "target-sensfres" at net/nfc/nci/ntf.c:260 size 18 This...

7.3CVSS6.5AI score0.00343EPSS
SaveExploits0References14
SUSE CVE
SUSE CVE
•added 2024/10/22 2:50 a.m.•15 views

SUSE CVE-2024-50007

In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access ASIHPI driver stores some values in the static array upon a response from the driver, and its index depends on the firmware. We shouldn't trust it blindly. This patch adds a sanity che...

6.4CVSS6.5AI score0.0025EPSS
SaveExploits0References20
SUSE CVE
SUSE CVE
•added 2024/10/21 3:47 p.m.•15 views

SUSE CVE-2024-47701

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid OOB when system.data xattr changes underneath the filesystem When looking up for an entry in an inlined directory, if evalueoffs is changed underneath the filesystem by some change in the block device, it will lead to...

5.3CVSS6.2AI score0.00247EPSS
SaveExploits0References32
SUSE CVE
SUSE CVE
•added 2024/10/21 3:45 p.m.•15 views

SUSE CVE-2024-49855

In the Linux kernel, the following vulnerability has been resolved: nbd: fix race between timeout and normal completion If request timetout is handled by nbdrequeuecmd, normal completion has to be stopped for avoiding to complete this requeued request, other use-after-free can be triggered. Fix t...

7CVSS6.3AI score0.00463EPSS
SaveExploits0References31
SUSE CVE
SUSE CVE
•added 2024/10/09 3:41 a.m.•15 views

SUSE CVE-2023-2314

Insufficient data validation in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

6.5CVSS8.6AI score0.00372EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2024/09/28 2:52 a.m.•15 views

SUSE CVE-2024-46815

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check numvalidsets before accessing readerwmsets WHY & HOW numvalidsets needs to be checked to avoid a negative index when accessing readerwmsetsnumvalidsets - 1. This fixes an OVERRUN issue reported by Coverity...

7.8CVSS6.5AI score0.00263EPSS
SaveExploits0References35
SUSE CVE
SUSE CVE
•added 2024/09/28 2:51 a.m.•15 views

SUSE CVE-2024-46826

In the Linux kernel, the following vulnerability has been resolved: ELF: fix kernel.randomizevaspace double read ELF loader uses "randomizevaspace" twice. It is sysctl and can change at any moment, so 2 loads could see 2 different values in theory with unpredictable consequences. Issue exactly on...

5.5CVSS6.8AI score0.00248EPSS
SaveExploits0References20
SUSE CVE
SUSE CVE
•added 2024/09/19 3:10 a.m.•15 views

SUSE CVE-2024-46743

In the Linux kernel, the following vulnerability has been resolved: of/irq: Prevent device address out-of-bounds read in interrupt map walk When ofirqparseraw is invoked with a device address smaller than the interrupt parent node from address-cells property, KASAN detects the following...

4.4CVSS6.2AI score0.00295EPSS
SaveExploits0References18
SUSE CVE
SUSE CVE
•added 2024/09/19 3:10 a.m.•15 views

SUSE CVE-2024-46782

In the Linux kernel, the following vulnerability has been resolved: ila: call nfunregisternethooks sooner syzbot found an use-after-free Read in ilanfinput 1 Issue here is that ilaxlatexitnet frees the rhashtable, then call nfunregisternethooks. It should be done in the reverse way, with a...

5.5CVSS6.2AI score0.00233EPSS
SaveExploits0References15
SUSE CVE
SUSE CVE
•added 2024/09/14 2:51 a.m.•15 views

SUSE CVE-2024-46679

In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link settings A sysfs reader can race with a device reset or removal, attempting to read device state when the device is not actually present. eg: exception RIP: qedgetcurrentlink+17 ...

4.1CVSS6.3AI score0.00246EPSS
SaveExploits0References17
SUSE CVE
SUSE CVE
•added 2024/08/27 2:24 a.m.•15 views

SUSE CVE-2024-43889

In the Linux kernel, the following vulnerability has been resolved: padata: Fix possible divide-by-0 panic in padatamthelper We are hit with a not easily reproducible divide-by-0 panic in padata.c at bootup time. 10.017908 Oops: divide error: 0000 1 PREEMPT SMP NOPTI 10.017908 CPU: 26 PID: 2627...

4.7CVSS6.4AI score0.00239EPSS
SaveExploits0References15
SUSE CVE
SUSE CVE
•added 2024/08/22 2:58 a.m.•15 views

SUSE CVE-2024-43863

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix a deadlock in dma buf fence polling Introduce a version of the fence ops that on release doesn't remove the fence from the pending list, and thus doesn't require a lock to fix poll-fence wait-fence unref deadlocks...

5.5CVSS6.5AI score0.00166EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2024/08/22 2:58 a.m.•15 views

SUSE CVE-2024-43873

In the Linux kernel, the following vulnerability has been resolved: vhost/vsock: always initialize seqpacketallow There are two issues around seqpacketallow: 1. seqpacketallow is not initialized when socket is created. Thus if features are never set, it will be read uninitialized. 2. if...

5.5CVSS6.5AI score0.00218EPSS
SaveExploits0References14
SUSE CVE
SUSE CVE
•added 2024/08/18 2:1 a.m.•15 views

SUSE CVE-2024-43834

In the Linux kernel, the following vulnerability has been resolved: xdp: fix invalid wait context of pagepooldestroy If the driver uses a page pool, it creates a page pool with pagepoolcreate. The reference count of page pool is 1 as default. A page pool will be destroyed only when a reference...

5.5CVSS6.3AI score0.00247EPSS
SaveExploits0References14
SUSE CVE
SUSE CVE
•added 2024/08/06 2:1 a.m.•15 views

SUSE CVE-2024-41055

In the Linux kernel, the following vulnerability has been resolved: mm: prevent derefencing NULL ptr in pfnsectionvalid Commit 5ec8e8ea8b77 "mm/sparsemem: fix race in accessing memorysection-usage" changed pfnsectionvalid to add a READONCE call around "ms-usage" to fix a race with sectiondeactiva...

5.5CVSS6.3AI score0.00255EPSS
SaveExploits0References15
Total number of security vulnerabilities5000