Поиск уязвимостей
Количество 28
Количество 28
CVE-2025-39787
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: mdt_loader: Ensure we don't read past the ELF header When the MDT loader is used in remoteproc, the ELF header is sanitized beforehand, but that's not necessary the case for other clients. Validate the size of the firmware buffer to ensure that we don't read past the end as we iterate over the header. e_phentsize and e_shentsize are validated as well, to ensure that the assumptions about step size in the traversal are valid.
CVE-2025-39787
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: mdt_loader: Ensure we don't read past the ELF header When the MDT loader is used in remoteproc, the ELF header is sanitized beforehand, but that's not necessary the case for other clients. Validate the size of the firmware buffer to ensure that we don't read past the end as we iterate over the header. e_phentsize and e_shentsize are validated as well, to ensure that the assumptions about step size in the traversal are valid.
CVE-2025-39787
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: mdt_loader: Ensure we don't read past the ELF header When the MDT loader is used in remoteproc, the ELF header is sanitized beforehand, but that's not necessary the case for other clients. Validate the size of the firmware buffer to ensure that we don't read past the end as we iterate over the header. e_phentsize and e_shentsize are validated as well, to ensure that the assumptions about step size in the traversal are valid.
CVE-2025-39787
soc: qcom: mdt_loader: Ensure we don't read past the ELF header
CVE-2025-39787
In the Linux kernel, the following vulnerability has been resolved: s ...
GHSA-xj56-cgwf-vr6c
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: mdt_loader: Ensure we don't read past the ELF header When the MDT loader is used in remoteproc, the ELF header is sanitized beforehand, but that's not necessary the case for other clients. Validate the size of the firmware buffer to ensure that we don't read past the end as we iterate over the header. e_phentsize and e_shentsize are validated as well, to ensure that the assumptions about step size in the traversal are valid.
BDU:2025-15226
Уязвимость компонента drivers/soc/qcom/mdt_loader.c ядра операционной системы Linux, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ROS-20260408-80-0034
Уязвимость kernel-lt
ROS-20260408-73-0026
Уязвимость kernel-lt
SUSE-SU-2025:3725-1
Security update for the Linux Kernel
SUSE-SU-2025:03601-1
Security update for the Linux Kernel
ELSA-2025-25757
ELSA-2025-25757: Unbreakable Enterprise kernel security update (IMPORTANT)
ELSA-2025-20663
ELSA-2025-20663: Unbreakable Enterprise kernel security update (IMPORTANT)
SUSE-SU-2025:03614-1
Security update for the Linux Kernel
SUSE-SU-2025:03633-1
Security update for the Linux Kernel
ALT-PU-2025-16619
ALT-PU-2025-16619: package `kernel-image-rt` update to version 5.10.241-alt1.rt135
ALT-PU-2025-16606
ALT-PU-2025-16606: package `kernel-image-std-def` update to version 5.10.241-alt1
ALT-PU-2025-16600
ALT-PU-2025-16600: package `kernel-image-un-def` update to version 6.1.151-alt1
ALT-PU-2025-16510
ALT-PU-2025-16510: package `kernel-image-6.12` update to version 6.12.45-alt1
ALT-PU-2025-16465
ALT-PU-2025-16465: package `kernel-image-rt` update to version 6.12.45-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-39787 In the Linux kernel, the following vulnerability has been resolved: soc: qcom: mdt_loader: Ensure we don't read past the ELF header When the MDT loader is used in remoteproc, the ELF header is sanitized beforehand, but that's not necessary the case for other clients. Validate the size of the firmware buffer to ensure that we don't read past the end as we iterate over the header. e_phentsize and e_shentsize are validated as well, to ensure that the assumptions about step size in the traversal are valid. | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
 | CVE-2025-39787 In the Linux kernel, the following vulnerability has been resolved: soc: qcom: mdt_loader: Ensure we don't read past the ELF header When the MDT loader is used in remoteproc, the ELF header is sanitized beforehand, but that's not necessary the case for other clients. Validate the size of the firmware buffer to ensure that we don't read past the end as we iterate over the header. e_phentsize and e_shentsize are validated as well, to ensure that the assumptions about step size in the traversal are valid. | CVSS3: 6 | 0% Низкий | около 1 года назад |
 | CVE-2025-39787 In the Linux kernel, the following vulnerability has been resolved: soc: qcom: mdt_loader: Ensure we don't read past the ELF header When the MDT loader is used in remoteproc, the ELF header is sanitized beforehand, but that's not necessary the case for other clients. Validate the size of the firmware buffer to ensure that we don't read past the end as we iterate over the header. e_phentsize and e_shentsize are validated as well, to ensure that the assumptions about step size in the traversal are valid. | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
 | CVE-2025-39787 soc: qcom: mdt_loader: Ensure we don't read past the ELF header | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
| CVE-2025-39787 In the Linux kernel, the following vulnerability has been resolved: s ... | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
| GHSA-xj56-cgwf-vr6c In the Linux kernel, the following vulnerability has been resolved: soc: qcom: mdt_loader: Ensure we don't read past the ELF header When the MDT loader is used in remoteproc, the ELF header is sanitized beforehand, but that's not necessary the case for other clients. Validate the size of the firmware buffer to ensure that we don't read past the end as we iterate over the header. e_phentsize and e_shentsize are validated as well, to ensure that the assumptions about step size in the traversal are valid. | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
 | BDU:2025-15226 Уязвимость компонента drivers/soc/qcom/mdt_loader.c ядра операционной системы Linux, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
 | ROS-20260408-80-0034 Уязвимость kernel-lt | CVSS3: 5.5 | 0% Низкий | 7 месяцев назад |
| ROS-20260408-73-0026 Уязвимость kernel-lt | CVSS3: 5.5 | 0% Низкий | 7 месяцев назад |
 | SUSE-SU-2025:3725-1 Security update for the Linux Kernel | около 1 года назад | ||
| SUSE-SU-2025:03601-1 Security update for the Linux Kernel | около 1 года назад | ||
| ELSA-2025-25757 ELSA-2025-25757: Unbreakable Enterprise kernel security update (IMPORTANT) | 12 месяцев назад | ||
| ELSA-2025-20663 ELSA-2025-20663: Unbreakable Enterprise kernel security update (IMPORTANT) | около 1 года назад | ||
| SUSE-SU-2025:03614-1 Security update for the Linux Kernel | около 1 года назад | ||
| SUSE-SU-2025:03633-1 Security update for the Linux Kernel | около 1 года назад | ||
| ALT-PU-2025-16619 ALT-PU-2025-16619: package `kernel-image-rt` update to version 5.10.241-alt1.rt135 | CVSS3: 8.1 | около 1 года назад | |
| ALT-PU-2025-16606 ALT-PU-2025-16606: package `kernel-image-std-def` update to version 5.10.241-alt1 | CVSS3: 8.1 | около 1 года назад | |
| ALT-PU-2025-16600 ALT-PU-2025-16600: package `kernel-image-un-def` update to version 6.1.151-alt1 | CVSS3: 9.8 | около 1 года назад | |
| ALT-PU-2025-16510 ALT-PU-2025-16510: package `kernel-image-6.12` update to version 6.12.45-alt1 | CVSS3: 9.8 | около 1 года назад | |
| ALT-PU-2025-16465 ALT-PU-2025-16465: package `kernel-image-rt` update to version 6.12.45-alt1 | CVSS3: 9.8 | около 1 года назад |
Уязвимостей на страницу