Lucene search
+L
SusecveMost viewed

63077 matches found

SUSE CVE
SUSE CVE
•added 2024/10/21 3:45 p.m.•15 views

SUSE CVE-2024-49855

In the Linux kernel, the following vulnerability has been resolved: nbd: fix race between timeout and normal completion If request timetout is handled by nbdrequeuecmd, normal completion has to be stopped for avoiding to complete this requeued request, other use-after-free can be triggered. Fix t...

7CVSS6.3AI score0.00463EPSS
SaveExploits0References31
SUSE CVE
SUSE CVE
•added 2024/10/09 3:41 a.m.•15 views

SUSE CVE-2023-2314

Insufficient data validation in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

6.5CVSS8.6AI score0.00372EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2024/09/28 2:51 a.m.•15 views

SUSE CVE-2024-46826

In the Linux kernel, the following vulnerability has been resolved: ELF: fix kernel.randomizevaspace double read ELF loader uses "randomizevaspace" twice. It is sysctl and can change at any moment, so 2 loads could see 2 different values in theory with unpredictable consequences. Issue exactly on...

5.5CVSS6.8AI score0.00248EPSS
SaveExploits0References20
SUSE CVE
SUSE CVE
•added 2024/09/19 3:10 a.m.•15 views

SUSE CVE-2024-46743

In the Linux kernel, the following vulnerability has been resolved: of/irq: Prevent device address out-of-bounds read in interrupt map walk When ofirqparseraw is invoked with a device address smaller than the interrupt parent node from address-cells property, KASAN detects the following...

4.4CVSS6.2AI score0.00295EPSS
SaveExploits0References18
SUSE CVE
SUSE CVE
•added 2024/09/19 3:10 a.m.•15 views

SUSE CVE-2024-46777

In the Linux kernel, the following vulnerability has been resolved: udf: Avoid excessive partition lengths Avoid mounting filesystems where the partition would overflow the 32-bits used for block number. Also refuse to mount filesystems where the partition length is so large we cannot safely inde...

5.5CVSS6.6AI score0.00248EPSS
SaveExploits0References18
SUSE CVE
SUSE CVE
•added 2024/09/19 3:10 a.m.•15 views

SUSE CVE-2024-46782

In the Linux kernel, the following vulnerability has been resolved: ila: call nfunregisternethooks sooner syzbot found an use-after-free Read in ilanfinput 1 Issue here is that ilaxlatexitnet frees the rhashtable, then call nfunregisternethooks. It should be done in the reverse way, with a...

5.5CVSS6.2AI score0.00233EPSS
SaveExploits0References15
SUSE CVE
SUSE CVE
•added 2024/09/14 2:51 a.m.•15 views

SUSE CVE-2024-46679

In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link settings A sysfs reader can race with a device reset or removal, attempting to read device state when the device is not actually present. eg: exception RIP: qedgetcurrentlink+17 ...

4.1CVSS6.3AI score0.00246EPSS
SaveExploits0References17
SUSE CVE
SUSE CVE
•added 2024/08/27 2:24 a.m.•15 views

SUSE CVE-2024-43889

In the Linux kernel, the following vulnerability has been resolved: padata: Fix possible divide-by-0 panic in padatamthelper We are hit with a not easily reproducible divide-by-0 panic in padata.c at bootup time. 10.017908 Oops: divide error: 0000 1 PREEMPT SMP NOPTI 10.017908 CPU: 26 PID: 2627...

4.7CVSS6.4AI score0.00239EPSS
SaveExploits0References15
SUSE CVE
SUSE CVE
•added 2024/08/22 2:58 a.m.•15 views

SUSE CVE-2024-43863

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix a deadlock in dma buf fence polling Introduce a version of the fence ops that on release doesn't remove the fence from the pending list, and thus doesn't require a lock to fix poll-fence wait-fence unref deadlocks...

5.5CVSS6.5AI score0.00166EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2024/08/22 2:58 a.m.•15 views

SUSE CVE-2024-43873

In the Linux kernel, the following vulnerability has been resolved: vhost/vsock: always initialize seqpacketallow There are two issues around seqpacketallow: 1. seqpacketallow is not initialized when socket is created. Thus if features are never set, it will be read uninitialized. 2. if...

5.5CVSS6.5AI score0.00218EPSS
SaveExploits0References14
SUSE CVE
SUSE CVE
•added 2024/08/18 2:1 a.m.•15 views

SUSE CVE-2024-43834

In the Linux kernel, the following vulnerability has been resolved: xdp: fix invalid wait context of pagepooldestroy If the driver uses a page pool, it creates a page pool with pagepoolcreate. The reference count of page pool is 1 as default. A page pool will be destroyed only when a reference...

5.5CVSS6.3AI score0.00247EPSS
SaveExploits0References14
SUSE CVE
SUSE CVE
•added 2024/08/06 2:1 a.m.•15 views

SUSE CVE-2024-41055

In the Linux kernel, the following vulnerability has been resolved: mm: prevent derefencing NULL ptr in pfnsectionvalid Commit 5ec8e8ea8b77 "mm/sparsemem: fix race in accessing memorysection-usage" changed pfnsectionvalid to add a READONCE call around "ms-usage" to fix a race with sectiondeactiva...

5.5CVSS6.3AI score0.00255EPSS
SaveExploits0References15
SUSE CVE
SUSE CVE
•added 2024/08/06 2:1 a.m.•15 views

SUSE CVE-2024-41072

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: wext: add extra SIOCSIWSCAN data check In 'cfg80211wextsiwscan', add extra check whether number of channels passed via 'ioctlsock, SIOCSIWSCAN, ...' doesn't exceed IWMAXFREQUENCIES and reject invalid request with...

4.4CVSS6.6AI score0.00233EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2024/08/06 1:59 a.m.•15 views

SUSE CVE-2024-42120

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check pipe offset before setting vblank pipectx has a size of MAXPIPES so checking its index before accessing the array. This fixes an OVERRUN issue reported by Coverity...

5.5CVSS6.4AI score0.00263EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2024/07/26 3:11 a.m.•15 views

SUSE CVE-2024-41012

In the Linux kernel, the following vulnerability has been resolved: filelock: Remove locks reliably when fcntl/close race is detected When fcntlsetlk races with close, it removes the created lock with dolockfilewait. However, LSMs can allow the first dolockfilewait that created the lock while...

6.3CVSS6.3AI score0.0023EPSS
SaveExploits0References19
SUSE CVE
SUSE CVE
•added 2024/07/16 2:34 a.m.•15 views

SUSE CVE-2024-40932

In the Linux kernel, the following vulnerability has been resolved: drm/exynos/vidi: fix memory leak in .getmodes The duplicated EDID is never freed. Fix it...

4.4CVSS6.5AI score0.00261EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2024/07/16 2:34 a.m.•15 views

SUSE CVE-2024-40940

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail In case of flow rule creation fail in mlx5lagcreateportseltable, instead of previously created rules, the tainted pointer is deleted deveral times. Fix this...

5.5CVSS6.8AI score0.00259EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2024/07/16 2:34 a.m.•15 views

SUSE CVE-2024-40983

In the Linux kernel, the following vulnerability has been resolved: tipc: force a dst refcount before doing decryption As it says in commit 3bc07321ccc2 "xfrm: Force a dst refcount before entering the xfrm type handlers": "Crypto requests might return asynchronous. In this case we leave the rcu...

5.5CVSS6.7AI score0.00881EPSS
SaveExploits0References15
SUSE CVE
SUSE CVE
•added 2024/07/16 2:33 a.m.•15 views

SUSE CVE-2024-41006

In the Linux kernel, the following vulnerability has been resolved: netrom: Fix a memory leak in nrheartbeatexpiry syzbot reported a memory leak in nrcreate 0. Commit 409db27e3a2e "netrom: Fix use-after-free of a listening socket." added sockhold to the nrheartbeatexpiry function, where a a socke...

4.4CVSS6.3AI score0.00242EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2024/07/13 2:37 a.m.•15 views

SUSE CVE-2024-39494

In the Linux kernel, the following vulnerability has been resolved: ima: Fix use-after-free on a dentry's dname.name -dname.name can change on rename and the earlier value can be freed; there are conditions sufficient to stabilize it -dlock on dentry, -dlock on its parent, -irwsem exclusive on th...

7.8CVSS6.3AI score0.00309EPSS
SaveExploits0References22
SUSE CVE
SUSE CVE
•added 2024/06/25 11:18 p.m.•15 views

SUSE CVE-2024-36479

In the Linux kernel, the following vulnerability has been resolved: fpga: bridge: add owner module and take its refcount The current implementation of the fpga bridge assumes that the low-level module registers a driver for the parent device and uses its owner pointer to take the module's refcoun...

5.5CVSS6.3AI score0.00213EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2024/06/22 3:34 a.m.•15 views

SUSE CVE-2024-38583

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix use-after-free of timer for log writer thread Patch series "nilfs2: fix log writer related issues". This bug fix series covers three nilfs2 log writer-related issues, including a timer use-after-free issue and potenti...

7CVSS6.2AI score0.00258EPSS
SaveExploits0References14
SUSE CVE
SUSE CVE
•added 2024/06/13 4:0 a.m.•15 views

SUSE CVE-2024-5837

Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.8AI score0.00525EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2024/06/08 2:59 a.m.•15 views

SUSE CVE-2024-26920

In the Linux kernel, the following vulnerability has been resolved: tracing/trigger: Fix to return error if failed to alloc snapshot Fix registersnapshottrigger to return error code if it failed to allocate a snapshot instead of 0 success. Unless that, it will register snapshot trigger without an...

5.5CVSS6.2AI score0.00256EPSS
SaveExploits0References24
SUSE CVE
SUSE CVE
•added 2024/06/04 12:42 p.m.•15 views

SUSE CVE-2022-31159

The AWS SDK for Java enables Java developers to work with Amazon Web Services. A partial-path traversal issue exists within the downloadDirectory method in the AWS S3 TransferManager component of the AWS SDK for Java v1 prior to version 1.12.261. Applications using the SDK control the...

7.9CVSS7AI score0.01431EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2024/06/04 12:37 p.m.•15 views

SUSE CVE-2023-1390

A remote denial of service vulnerability was found in the Linux kernel's TIPC kernel module. The while loop in tipclinkxmit hits an unknown state while attempting to parse SKBs, which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization...

7.5CVSS5.9AI score0.05095EPSS
SaveExploits0References36
SUSE CVE
SUSE CVE
•added 2024/06/04 12:27 p.m.•15 views

SUSE CVE-2023-52449

In the Linux kernel, the following vulnerability has been resolved: mtd: Fix gluebi NULL pointer dereference caused by ftl notifier If both ftl.ko and gluebi.ko are loaded, the notifier of ftl triggers NULL pointer dereference when trying to access 'gluebi-desc' in gluebiread. ubigluebiinit...

5.5CVSS6AI score0.00242EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2024/06/01 2:23 a.m.•15 views

SUSE CVE-2024-36920

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Avoid memcpy field-spanning write WARNING When the "storcli2 show" command is executed for eHBA-9600, mpi3mr driver prints this WARNING message: memcpy: detected field-spanning write size 128 of single field...

6.6AI score0.00228EPSS
SaveExploits0References14
SUSE CVE
SUSE CVE
•added 2024/05/29 2:36 a.m.•15 views

SUSE CVE-2023-52819

In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga For pptable structs that use flexible array sizes, use flexible arrays...

6.6CVSS6.6AI score0.00244EPSS
SaveExploits0References18
SUSE CVE
SUSE CVE
•added 2024/05/28 3:1 p.m.•15 views

SUSE CVE-2023-52752

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free bug in cifsdebugdataprocshow Skip SMB sessions that are being teared down e.g. @ses-sesstatus == SESEXITING in cifsdebugdataprocshow to avoid use-after-free in @ses. This fixes the following GPF wh...

7.8CVSS6.3AI score0.00246EPSS
SaveExploits0References148
SUSE CVE
SUSE CVE
•added 2024/05/21 2:2 a.m.•15 views

SUSE CVE-2023-52667

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix a potential double-free in fsanycreategroups When kcalloc for ft-g succeeds but kvzalloc for in fails, fsanycreategroups will free ft-g. However, its caller fsanycreatetable will free ft-g again through calling...

5.5CVSS6.5AI score0.00269EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2024/05/21 2:2 a.m.•15 views

SUSE CVE-2023-52678

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Confirm list is non-empty before utilizing listfirstentry in kfdtopology.c Before using listfirstentry, make sure to check that list is not empty, if list is empty return -ENODATA. Fixes the below:...

5.5CVSS6.3AI score0.00231EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2024/05/21 2:1 a.m.•15 views

SUSE CVE-2023-52697

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdwrtsdcajackcommon: ctx-headsetcodecdev = NULL sofsdwrtsdcajackexit are used by different codecs, and some of them use the same dai name. For example, rt712 and rt713 both use "rt712-sdca-aif1" and...

5.5CVSS6.7AI score0.00207EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2024/05/21 2:0 a.m.•15 views

SUSE CVE-2024-27416

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Fix handling of HCIEVIOCAPAREQUEST If we received HCIEVIOCAPAREQUEST while HCIOPREADREMOTEEXTFEATURES is yet to be responded assume the remote does support SSP since otherwise this event shouldn't be generate...

5.5CVSS6.3AI score0.00353EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2024/05/21 1:59 a.m.•15 views

SUSE CVE-2024-35888

In the Linux kernel, the following vulnerability has been resolved: erspan: make sure erspanbasehdr is present in skb-head syzbot reported a problem in ip6erspanrcv 1 Issue is that ip6erspanrcv and erspanrcv no longer make sure erspanbasehdr is present in skb linear part skb-head before getting...

5.5CVSS6.4AI score0.00601EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2024/05/21 1:58 a.m.•15 views

SUSE CVE-2024-35958

In the Linux kernel, the following vulnerability has been resolved: net: ena: Fix incorrect descriptor free behavior ENA has two types of TX queues: - queues which only process TX packets arriving from the network stack - queues which only process TX packets forwarded to it by XDPREDIRECT or XDPT...

5.5CVSS6.5AI score0.00256EPSS
SaveExploits0References19
SUSE CVE
SUSE CVE
•added 2024/05/18 2:46 a.m.•15 views

SUSE CVE-2024-27410

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject iftype change with mesh ID change It's currently possible to change the mesh ID when the interface isn't yet in mesh mode, at the same time as changing it into mesh mode. This leads to an overwrite of data i...

5.5CVSS6.4AI score0.00255EPSS
SaveExploits0References19
SUSE CVE
SUSE CVE
•added 2024/05/17 2:56 a.m.•15 views

SUSE CVE-2024-4948

Use after free in Dawn in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

6.5CVSS9.2AI score0.00939EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2024/05/14 3:34 a.m.•15 views

SUSE CVE-2023-52655

In the Linux kernel, the following vulnerability has been resolved: usb: aqc111: check packet for fixup for true limit If a device sends a packet that is inbetween 0 and sizeofu64 the value passed to skbtrim as length will wrap around ending up as some very large value. The driver will then proce...

6.6CVSS6.2AI score0.00274EPSS
SaveExploits0References21
SUSE CVE
SUSE CVE
•added 2024/05/03 2:9 a.m.•15 views

SUSE CVE-2024-26962

In the Linux kernel, the following vulnerability has been resolved: dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape For raid456, if reshape is still in progress, then IO across reshape position will wait for reshape to make progress. However, for dm-raid, in...

5.5CVSS6.4AI score0.00174EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2024/05/03 2:9 a.m.•15 views

SUSE CVE-2024-26973

In the Linux kernel, the following vulnerability has been resolved: fat: fix uninitialized field in nostale filehandles When fatencodefhnostale encodes file handle without a parent it stores only first 10 bytes of the file handle. However the length of the file handle must be a multiple of 4 so t...

5.5CVSS6.1AI score0.00255EPSS
SaveExploits0References19
SUSE CVE
SUSE CVE
•added 2024/05/03 2:9 a.m.•15 views

SUSE CVE-2024-27003

In the Linux kernel, the following vulnerability has been resolved: clk: Get runtime PM before walking tree for clksummary Similar to the previous commit, we should make sure that all devices are runtime resumed before printing the clksummary through debugfs. Failure to do so would result in a...

3.3CVSS6.7AI score0.00173EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2024/04/30 2:26 a.m.•15 views

SUSE CVE-2022-48631

In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug in extents parsing when ehentries == 0 and ehdepth 0 When walking through an inode extents, the ext4extbinsearchidx function assumes that the extent header has been previously validated. However, there are no checks...

5.5CVSS6.4AI score0.00235EPSS
SaveExploits0References12
SUSE CVE
SUSE CVE
•added 2024/04/23 1:44 a.m.•15 views

SUSE CVE-2024-26884

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix hashtab overflow check on 32-bit arches The hashtab code relies on rounduppowoftwo to compute the number of hash buckets, and contains an overflow check by checking if the resulting value is 0. However, on 32-bit arches,...

5.5CVSS6.5AI score0.00251EPSS
SaveExploits0References18
SUSE CVE
SUSE CVE
•added 2024/04/19 2:18 a.m.•15 views

SUSE CVE-2024-26846

In the Linux kernel, the following vulnerability has been resolved: nvme-fc: do not wait in vain when unloading module The module exit path has race between deleting all controllers and freeing 'left over IDs'. To prevent double free a synchronization between nvmedeletectrl and idadestroy has bee...

4.4CVSS6.6AI score0.00218EPSS
SaveExploits0References20
SUSE CVE
SUSE CVE
•added 2024/04/15 11:20 p.m.•15 views

SUSE CVE-2021-47194

In the Linux kernel, the following vulnerability has been resolved: cfg80211: call cfg80211stopap when switch from P2PGO type If the userspace tools switch from NL80211IFTYPEP2PGO to NL80211IFTYPEADHOC via sendmsgNL80211CMDSETINTERFACE, it does not call the cleanup cfg80211stopap, this leads to t...

5.5CVSS7.5AI score0.00249EPSS
SaveExploits0References14
SUSE CVE
SUSE CVE
•added 2024/04/15 11:12 p.m.•15 views

SUSE CVE-2024-26812

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Create persistent INTx handler A vulnerability exists where the eventfd for INTx signaling can be deconfigured, which unregisters the IRQ handler but still allows eventfds to be signaled with a NULL context through the...

4.4CVSS6.4AI score0.00248EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2024/04/10 2:16 a.m.•15 views

SUSE CVE-2024-26697

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix data corruption in dsync block recovery for small block sizes The helper function nilfsrecoverycopyblock of nilfsrecoverydsyncblocks, which recovers data from logs created by data sync writes during a mount after an...

5.5CVSS6.5AI score0.00243EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2024/04/05 2:21 a.m.•15 views

SUSE CVE-2024-26659

In the Linux kernel, the following vulnerability has been resolved: xhci: handle isoc Babble and Buffer Overrun events properly xHCI 4.9 explicitly forbids assuming that the xHC has released its ownership of a multi-TRB TD when it reports an error on one of the early TRBs. Yet the driver makes su...

5.5CVSS6.6AI score0.0024EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2024/03/27 4:26 a.m.•15 views

SUSE CVE-2021-47146

In the Linux kernel, the following vulnerability has been resolved: mld: fix panic in mldnewpack mldnewpack doesn't allow to allocate high order page, only order-0 allocation is allowed. If headroom size is too large, a kernel panic could occur in skbput. Test commands: ip netns del A ip netns de...

5.5CVSS6.2AI score0.00238EPSS
SaveExploits0References8
Total number of security vulnerabilities5000