Поиск уязвимостей
Количество 27
Количество 27
CVE-2025-38090
In the Linux kernel, the following vulnerability has been resolved: drivers/rapidio/rio_cm.c: prevent possible heap overwrite In riocm_cdev_ioctl(RIO_CM_CHAN_SEND) -> cm_chan_msg_send() -> riocm_ch_send() cm_chan_msg_send() checks that userspace didn't send too much data but riocm_ch_send() failed to check that userspace sent sufficient data. The result is that riocm_ch_send() can write to fields in the rio_ch_chan_hdr which were outside the bounds of the space which cm_chan_msg_send() allocated. Address this by teaching riocm_ch_send() to check that the entire rio_ch_chan_hdr was copied in from userspace.
CVE-2025-38090
In the Linux kernel, the following vulnerability has been resolved: drivers/rapidio/rio_cm.c: prevent possible heap overwrite In riocm_cdev_ioctl(RIO_CM_CHAN_SEND) -> cm_chan_msg_send() -> riocm_ch_send() cm_chan_msg_send() checks that userspace didn't send too much data but riocm_ch_send() failed to check that userspace sent sufficient data. The result is that riocm_ch_send() can write to fields in the rio_ch_chan_hdr which were outside the bounds of the space which cm_chan_msg_send() allocated. Address this by teaching riocm_ch_send() to check that the entire rio_ch_chan_hdr was copied in from userspace.
CVE-2025-38090
In the Linux kernel, the following vulnerability has been resolved: drivers/rapidio/rio_cm.c: prevent possible heap overwrite In riocm_cdev_ioctl(RIO_CM_CHAN_SEND) -> cm_chan_msg_send() -> riocm_ch_send() cm_chan_msg_send() checks that userspace didn't send too much data but riocm_ch_send() failed to check that userspace sent sufficient data. The result is that riocm_ch_send() can write to fields in the rio_ch_chan_hdr which were outside the bounds of the space which cm_chan_msg_send() allocated. Address this by teaching riocm_ch_send() to check that the entire rio_ch_chan_hdr was copied in from userspace.
CVE-2025-38090
drivers/rapidio/rio_cm.c: prevent possible heap overwrite
CVE-2025-38090
In the Linux kernel, the following vulnerability has been resolved: d ...
GHSA-vjwf-vf62-c8wp
In the Linux kernel, the following vulnerability has been resolved: drivers/rapidio/rio_cm.c: prevent possible heap overwrite In riocm_cdev_ioctl(RIO_CM_CHAN_SEND) -> cm_chan_msg_send() -> riocm_ch_send() cm_chan_msg_send() checks that userspace didn't send too much data but riocm_ch_send() failed to check that userspace sent sufficient data. The result is that riocm_ch_send() can write to fields in the rio_ch_chan_hdr which were outside the bounds of the space which cm_chan_msg_send() allocated. Address this by teaching riocm_ch_send() to check that the entire rio_ch_chan_hdr was copied in from userspace.
BDU:2025-14095
Уязвимость функции cm_chan_msg_send() модуля drivers/rapidio/rio_cm.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260211-80-0014
Уязвимость kernel-lt
ROS-20260211-73-0010
Уязвимость kernel-lt
ALT-PU-2025-16617
ALT-PU-2025-16617: package `kernel-image-rt` update to version 5.10.239-alt1.rt133
SUSE-SU-2025:03023-1
Security update for the Linux Kernel
SUSE-SU-2025:02996-1
Security update for the Linux Kernel
SUSE-SU-2025:02969-1
Security update for the Linux Kernel
ALT-PU-2025-16605
ALT-PU-2025-16605: package `kernel-image-std-def` update to version 5.10.240-alt1
SUSE-SU-2025:02853-1
Security update for the Linux Kernel
SUSE-SU-2025:02997-1
Security update for the Linux Kernel
SUSE-SU-2025:03011-1
Security update for the Linux Kernel
ELSA-2025-20551
ELSA-2025-20551: Unbreakable Enterprise kernel security update (IMPORTANT)
ALT-PU-2025-16596
ALT-PU-2025-16596: package `kernel-image-un-def` update to version 6.1.144-alt1
SUSE-SU-2025:02923-1
Security update for the Linux Kernel
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-38090 In the Linux kernel, the following vulnerability has been resolved: drivers/rapidio/rio_cm.c: prevent possible heap overwrite In riocm_cdev_ioctl(RIO_CM_CHAN_SEND) -> cm_chan_msg_send() -> riocm_ch_send() cm_chan_msg_send() checks that userspace didn't send too much data but riocm_ch_send() failed to check that userspace sent sufficient data. The result is that riocm_ch_send() can write to fields in the rio_ch_chan_hdr which were outside the bounds of the space which cm_chan_msg_send() allocated. Address this by teaching riocm_ch_send() to check that the entire rio_ch_chan_hdr was copied in from userspace. | CVSS3: 5.5 | 0% Низкий | больше 1 года назад |
 | CVE-2025-38090 In the Linux kernel, the following vulnerability has been resolved: drivers/rapidio/rio_cm.c: prevent possible heap overwrite In riocm_cdev_ioctl(RIO_CM_CHAN_SEND) -> cm_chan_msg_send() -> riocm_ch_send() cm_chan_msg_send() checks that userspace didn't send too much data but riocm_ch_send() failed to check that userspace sent sufficient data. The result is that riocm_ch_send() can write to fields in the rio_ch_chan_hdr which were outside the bounds of the space which cm_chan_msg_send() allocated. Address this by teaching riocm_ch_send() to check that the entire rio_ch_chan_hdr was copied in from userspace. | 0% Низкий | больше 1 года назад | |
 | CVE-2025-38090 In the Linux kernel, the following vulnerability has been resolved: drivers/rapidio/rio_cm.c: prevent possible heap overwrite In riocm_cdev_ioctl(RIO_CM_CHAN_SEND) -> cm_chan_msg_send() -> riocm_ch_send() cm_chan_msg_send() checks that userspace didn't send too much data but riocm_ch_send() failed to check that userspace sent sufficient data. The result is that riocm_ch_send() can write to fields in the rio_ch_chan_hdr which were outside the bounds of the space which cm_chan_msg_send() allocated. Address this by teaching riocm_ch_send() to check that the entire rio_ch_chan_hdr was copied in from userspace. | CVSS3: 5.5 | 0% Низкий | больше 1 года назад |
 | CVE-2025-38090 drivers/rapidio/rio_cm.c: prevent possible heap overwrite | CVSS3: 7.8 | 0% Низкий | больше 1 года назад |
| CVE-2025-38090 In the Linux kernel, the following vulnerability has been resolved: d ... | CVSS3: 5.5 | 0% Низкий | больше 1 года назад |
| GHSA-vjwf-vf62-c8wp In the Linux kernel, the following vulnerability has been resolved: drivers/rapidio/rio_cm.c: prevent possible heap overwrite In riocm_cdev_ioctl(RIO_CM_CHAN_SEND) -> cm_chan_msg_send() -> riocm_ch_send() cm_chan_msg_send() checks that userspace didn't send too much data but riocm_ch_send() failed to check that userspace sent sufficient data. The result is that riocm_ch_send() can write to fields in the rio_ch_chan_hdr which were outside the bounds of the space which cm_chan_msg_send() allocated. Address this by teaching riocm_ch_send() to check that the entire rio_ch_chan_hdr was copied in from userspace. | CVSS3: 5.5 | 0% Низкий | больше 1 года назад |
 | BDU:2025-14095 Уязвимость функции cm_chan_msg_send() модуля drivers/rapidio/rio_cm.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7 | 0% Низкий | больше 1 года назад |
 | ROS-20260211-80-0014 Уязвимость kernel-lt | CVSS3: 7 | 0% Низкий | 9 месяцев назад |
| ROS-20260211-73-0010 Уязвимость kernel-lt | CVSS3: 7 | 0% Низкий | 9 месяцев назад |
| ALT-PU-2025-16617 ALT-PU-2025-16617: package `kernel-image-rt` update to version 5.10.239-alt1.rt133 | CVSS3: 8 | больше 1 года назад | |
 | SUSE-SU-2025:03023-1 Security update for the Linux Kernel | около 1 года назад | ||
| SUSE-SU-2025:02996-1 Security update for the Linux Kernel | около 1 года назад | ||
| SUSE-SU-2025:02969-1 Security update for the Linux Kernel | около 1 года назад | ||
| ALT-PU-2025-16605 ALT-PU-2025-16605: package `kernel-image-std-def` update to version 5.10.240-alt1 | CVSS3: 8 | больше 1 года назад | |
| SUSE-SU-2025:02853-1 Security update for the Linux Kernel | около 1 года назад | ||
| SUSE-SU-2025:02997-1 Security update for the Linux Kernel | около 1 года назад | ||
| SUSE-SU-2025:03011-1 Security update for the Linux Kernel | около 1 года назад | ||
| ELSA-2025-20551 ELSA-2025-20551: Unbreakable Enterprise kernel security update (IMPORTANT) | около 1 года назад | ||
| ALT-PU-2025-16596 ALT-PU-2025-16596: package `kernel-image-un-def` update to version 6.1.144-alt1 | CVSS3: 9.3 | больше 1 года назад | |
| SUSE-SU-2025:02923-1 Security update for the Linux Kernel | около 1 года назад |
Уязвимостей на страницу