Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 32

Количество 32

ubuntu логотип

CVE-2025-21928

больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() The system can experience a random crash a few minutes after the driver is removed. This issue occurs due to improper handling of memory freeing in the ishtp_hid_remove() function. The function currently frees the `driver_data` directly within the loop that destroys the HID devices, which can lead to accessing freed memory. Specifically, `hid_destroy_device()` uses `driver_data` when it calls `hid_ishtp_set_feature()` to power off the sensor, so freeing `driver_data` beforehand can result in accessing invalid memory. This patch resolves the issue by storing the `driver_data` in a temporary variable before calling `hid_destroy_device()`, and then freeing the `driver_data` after the device is destroyed.

CVSS3: 7.8
EPSS: Низкий
redhat логотип

CVE-2025-21928

больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() The system can experience a random crash a few minutes after the driver is removed. This issue occurs due to improper handling of memory freeing in the ishtp_hid_remove() function. The function currently frees the `driver_data` directly within the loop that destroys the HID devices, which can lead to accessing freed memory. Specifically, `hid_destroy_device()` uses `driver_data` when it calls `hid_ishtp_set_feature()` to power off the sensor, so freeing `driver_data` beforehand can result in accessing invalid memory. This patch resolves the issue by storing the `driver_data` in a temporary variable before calling `hid_destroy_device()`, and then freeing the `driver_data` after the device is destroyed.

CVSS3: 6.7
EPSS: Низкий
nvd логотип

CVE-2025-21928

больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() The system can experience a random crash a few minutes after the driver is removed. This issue occurs due to improper handling of memory freeing in the ishtp_hid_remove() function. The function currently frees the `driver_data` directly within the loop that destroys the HID devices, which can lead to accessing freed memory. Specifically, `hid_destroy_device()` uses `driver_data` when it calls `hid_ishtp_set_feature()` to power off the sensor, so freeing `driver_data` beforehand can result in accessing invalid memory. This patch resolves the issue by storing the `driver_data` in a temporary variable before calling `hid_destroy_device()`, and then freeing the `driver_data` after the device is destroyed.

CVSS3: 7.8
EPSS: Низкий
msrc логотип

CVE-2025-21928

9 месяцев назад

HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()

CVSS3: 7.8
EPSS: Низкий
debian логотип

CVE-2025-21928

больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: H ...

CVSS3: 7.8
EPSS: Низкий
github логотип

GHSA-v2qv-44ch-jx7v

больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() The system can experience a random crash a few minutes after the driver is removed. This issue occurs due to improper handling of memory freeing in the ishtp_hid_remove() function. The function currently frees the `driver_data` directly within the loop that destroys the HID devices, which can lead to accessing freed memory. Specifically, `hid_destroy_device()` uses `driver_data` when it calls `hid_ishtp_set_feature()` to power off the sensor, so freeing `driver_data` beforehand can result in accessing invalid memory. This patch resolves the issue by storing the `driver_data` in a temporary variable before calling `hid_destroy_device()`, and then freeing the `driver_data` after the device is destroyed.

CVSS3: 7.8
EPSS: Низкий
fstec логотип

BDU:2025-11776

больше 1 года назад

Уязвимость функции ishtp_hid_remove() ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.8
EPSS: Низкий
redos логотип

ROS-20260120-7339

10 месяцев назад

Уязвимость kernel-lt

CVSS3: 7.8
EPSS: Низкий
rocky логотип

RLSA-2025:12752

около 1 года назад

Important: kernel security update

EPSS: Низкий
oracle-oval логотип

ELSA-2025-12752

больше 1 года назад

ELSA-2025-12752: kernel security update (IMPORTANT)

EPSS: Низкий
rocky логотип

RLSA-2025:12746

около 1 года назад

Important: kernel security update

EPSS: Низкий
oracle-oval логотип

ELSA-2025-14748

около 1 года назад

ELSA-2025-14748: kernel security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-12746

больше 1 года назад

ELSA-2025-12746: kernel security update (IMPORTANT)

EPSS: Низкий
rocky логотип

RLSA-2025:12662

около 1 года назад

Important: kernel security update

EPSS: Низкий
oracle-oval логотип

ELSA-2025-12662

больше 1 года назад

ELSA-2025-12662: kernel security update (IMPORTANT)

EPSS: Низкий
altlinux логотип

ALT-PU-2025-16594

больше 1 года назад

ALT-PU-2025-16594: package `kernel-image-un-def` update to version 6.1.131-alt1

CVSS3: 8
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02846-1

около 1 года назад

Security update for the Linux Kernel

EPSS: Низкий
altlinux логотип

ALT-PU-2025-16505

больше 1 года назад

ALT-PU-2025-16505: package `kernel-image-6.12` update to version 6.12.19-alt1

CVSS3: 8
EPSS: Низкий
altlinux логотип

ALT-PU-2025-5012

больше 1 года назад

ALT-PU-2025-5012: package `kernel-image-rt` update to version 5.10.235-alt1.rt129

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2025-4689

больше 1 года назад

ALT-PU-2025-4689: package `kernel-image-std-def` update to version 5.10.235-alt1

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-21928

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() The system can experience a random crash a few minutes after the driver is removed. This issue occurs due to improper handling of memory freeing in the ishtp_hid_remove() function. The function currently frees the `driver_data` directly within the loop that destroys the HID devices, which can lead to accessing freed memory. Specifically, `hid_destroy_device()` uses `driver_data` when it calls `hid_ishtp_set_feature()` to power off the sensor, so freeing `driver_data` beforehand can result in accessing invalid memory. This patch resolves the issue by storing the `driver_data` in a temporary variable before calling `hid_destroy_device()`, and then freeing the `driver_data` after the device is destroyed.

CVSS3: 7.8
0%
Низкий
больше 1 года назад
redhat логотип
CVE-2025-21928

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() The system can experience a random crash a few minutes after the driver is removed. This issue occurs due to improper handling of memory freeing in the ishtp_hid_remove() function. The function currently frees the `driver_data` directly within the loop that destroys the HID devices, which can lead to accessing freed memory. Specifically, `hid_destroy_device()` uses `driver_data` when it calls `hid_ishtp_set_feature()` to power off the sensor, so freeing `driver_data` beforehand can result in accessing invalid memory. This patch resolves the issue by storing the `driver_data` in a temporary variable before calling `hid_destroy_device()`, and then freeing the `driver_data` after the device is destroyed.

CVSS3: 6.7
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2025-21928

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() The system can experience a random crash a few minutes after the driver is removed. This issue occurs due to improper handling of memory freeing in the ishtp_hid_remove() function. The function currently frees the `driver_data` directly within the loop that destroys the HID devices, which can lead to accessing freed memory. Specifically, `hid_destroy_device()` uses `driver_data` when it calls `hid_ishtp_set_feature()` to power off the sensor, so freeing `driver_data` beforehand can result in accessing invalid memory. This patch resolves the issue by storing the `driver_data` in a temporary variable before calling `hid_destroy_device()`, and then freeing the `driver_data` after the device is destroyed.

CVSS3: 7.8
0%
Низкий
больше 1 года назад
msrc логотип
CVE-2025-21928

HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()

CVSS3: 7.8
0%
Низкий
9 месяцев назад
debian логотип
CVE-2025-21928

In the Linux kernel, the following vulnerability has been resolved: H ...

CVSS3: 7.8
0%
Низкий
больше 1 года назад
github логотип
GHSA-v2qv-44ch-jx7v

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() The system can experience a random crash a few minutes after the driver is removed. This issue occurs due to improper handling of memory freeing in the ishtp_hid_remove() function. The function currently frees the `driver_data` directly within the loop that destroys the HID devices, which can lead to accessing freed memory. Specifically, `hid_destroy_device()` uses `driver_data` when it calls `hid_ishtp_set_feature()` to power off the sensor, so freeing `driver_data` beforehand can result in accessing invalid memory. This patch resolves the issue by storing the `driver_data` in a temporary variable before calling `hid_destroy_device()`, and then freeing the `driver_data` after the device is destroyed.

CVSS3: 7.8
0%
Низкий
больше 1 года назад
fstec логотип
BDU:2025-11776

Уязвимость функции ishtp_hid_remove() ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.8
0%
Низкий
больше 1 года назад
redos логотип
ROS-20260120-7339

Уязвимость kernel-lt

CVSS3: 7.8
0%
Низкий
10 месяцев назад
rocky логотип
RLSA-2025:12752

Important: kernel security update

около 1 года назад
oracle-oval логотип
ELSA-2025-12752

ELSA-2025-12752: kernel security update (IMPORTANT)

больше 1 года назад
rocky логотип
RLSA-2025:12746

Important: kernel security update

около 1 года назад
oracle-oval логотип
ELSA-2025-14748

ELSA-2025-14748: kernel security update (IMPORTANT)

около 1 года назад
oracle-oval логотип
ELSA-2025-12746

ELSA-2025-12746: kernel security update (IMPORTANT)

больше 1 года назад
rocky логотип
RLSA-2025:12662

Important: kernel security update

около 1 года назад
oracle-oval логотип
ELSA-2025-12662

ELSA-2025-12662: kernel security update (IMPORTANT)

больше 1 года назад
altlinux логотип
ALT-PU-2025-16594

ALT-PU-2025-16594: package `kernel-image-un-def` update to version 6.1.131-alt1

CVSS3: 8
больше 1 года назад
suse-cvrf логотип
SUSE-SU-2025:02846-1

Security update for the Linux Kernel

около 1 года назад
altlinux логотип
ALT-PU-2025-16505

ALT-PU-2025-16505: package `kernel-image-6.12` update to version 6.12.19-alt1

CVSS3: 8
больше 1 года назад
altlinux логотип
ALT-PU-2025-5012

ALT-PU-2025-5012: package `kernel-image-rt` update to version 5.10.235-alt1.rt129

CVSS3: 9.8
больше 1 года назад
altlinux логотип
ALT-PU-2025-4689

ALT-PU-2025-4689: package `kernel-image-std-def` update to version 5.10.235-alt1

CVSS3: 9.8
больше 1 года назад

Уязвимостей на страницу