Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 19

Количество 19

ubuntu логотип

CVE-2025-38067

больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: rseq: Fix segfault on registration when rseq_cs is non-zero The rseq_cs field is documented as being set to 0 by user-space prior to registration, however this is not currently enforced by the kernel. This can result in a segfault on return to user-space if the value stored in the rseq_cs field doesn't point to a valid struct rseq_cs. The correct solution to this would be to fail the rseq registration when the rseq_cs field is non-zero. However, some older versions of glibc will reuse the rseq area of previous threads without clearing the rseq_cs field and will also terminate the process if the rseq registration fails in a secondary thread. This wasn't caught in testing because in this case the leftover rseq_cs does point to a valid struct rseq_cs. What we can do is clear the rseq_cs field on registration when it's non-zero which will prevent segfaults on registration and won't break the glibc versions that reuse rs...

CVSS3: 5.5
EPSS: Низкий
redhat логотип

CVE-2025-38067

больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: rseq: Fix segfault on registration when rseq_cs is non-zero The rseq_cs field is documented as being set to 0 by user-space prior to registration, however this is not currently enforced by the kernel. This can result in a segfault on return to user-space if the value stored in the rseq_cs field doesn't point to a valid struct rseq_cs. The correct solution to this would be to fail the rseq registration when the rseq_cs field is non-zero. However, some older versions of glibc will reuse the rseq area of previous threads without clearing the rseq_cs field and will also terminate the process if the rseq registration fails in a secondary thread. This wasn't caught in testing because in this case the leftover rseq_cs does point to a valid struct rseq_cs. What we can do is clear the rseq_cs field on registration when it's non-zero which will prevent segfaults on registration and won't break the glibc versions that reuse rs...

CVSS3: 5.5
EPSS: Низкий
nvd логотип

CVE-2025-38067

больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: rseq: Fix segfault on registration when rseq_cs is non-zero The rseq_cs field is documented as being set to 0 by user-space prior to registration, however this is not currently enforced by the kernel. This can result in a segfault on return to user-space if the value stored in the rseq_cs field doesn't point to a valid struct rseq_cs. The correct solution to this would be to fail the rseq registration when the rseq_cs field is non-zero. However, some older versions of glibc will reuse the rseq area of previous threads without clearing the rseq_cs field and will also terminate the process if the rseq registration fails in a secondary thread. This wasn't caught in testing because in this case the leftover rseq_cs does point to a valid struct rseq_cs. What we can do is clear the rseq_cs field on registration when it's non-zero which will prevent segfaults on registration and won't break the glibc versions that reuse r

CVSS3: 5.5
EPSS: Низкий
msrc логотип

CVE-2025-38067

9 месяцев назад

rseq: Fix segfault on registration when rseq_cs is non-zero

CVSS3: 5.5
EPSS: Низкий
debian логотип

CVE-2025-38067

больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: r ...

CVSS3: 5.5
EPSS: Низкий
github логотип

GHSA-627j-hqc4-995q

больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: rseq: Fix segfault on registration when rseq_cs is non-zero The rseq_cs field is documented as being set to 0 by user-space prior to registration, however this is not currently enforced by the kernel. This can result in a segfault on return to user-space if the value stored in the rseq_cs field doesn't point to a valid struct rseq_cs. The correct solution to this would be to fail the rseq registration when the rseq_cs field is non-zero. However, some older versions of glibc will reuse the rseq area of previous threads without clearing the rseq_cs field and will also terminate the process if the rseq registration fails in a secondary thread. This wasn't caught in testing because in this case the leftover rseq_cs does point to a valid struct rseq_cs. What we can do is clear the rseq_cs field on registration when it's non-zero which will prevent segfaults on registration and won't break the glibc versions that reus...

CVSS3: 5.5
EPSS: Низкий
fstec логотип

BDU:2025-14933

больше 1 года назад

Уязвимость компонента rseq.c ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность и доступность защищаемой информации

CVSS3: 3.6
EPSS: Низкий
redos логотип

ROS-20260205-80-0038

9 месяцев назад

Уязвимость kernel-lt

CVSS3: 3.6
EPSS: Низкий
redos логотип

ROS-20260205-73-0027

9 месяцев назад

Уязвимость kernel-lt

CVSS3: 3.6
EPSS: Низкий
oracle-oval логотип

ELSA-2025-20716

около 1 года назад

ELSA-2025-20716: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS: Низкий
altlinux логотип

ALT-PU-2025-16597

больше 1 года назад

ALT-PU-2025-16597: package `kernel-image-un-def` update to version 6.1.146-alt1

CVSS3: 7.8
EPSS: Низкий
altlinux логотип

ALT-PU-2025-16618

больше 1 года назад

ALT-PU-2025-16618: package `kernel-image-rt` update to version 5.10.240-alt1.rt134

CVSS3: 8
EPSS: Низкий
altlinux логотип

ALT-PU-2025-16605

больше 1 года назад

ALT-PU-2025-16605: package `kernel-image-std-def` update to version 5.10.240-alt1

CVSS3: 8
EPSS: Низкий
oracle-oval логотип

ELSA-2025-20551

около 1 года назад

ELSA-2025-20551: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS: Низкий
altlinux логотип

ALT-PU-2025-16509

больше 1 года назад

ALT-PU-2025-16509: package `kernel-image-6.12` update to version 6.12.41-alt1

CVSS3: 8.8
EPSS: Низкий
altlinux логотип

ALT-PU-2025-16464

больше 1 года назад

ALT-PU-2025-16464: package `kernel-image-rt` update to version 6.12.41-alt1

CVSS3: 8.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-1529

10 месяцев назад

ALT-PU-2026-1529: package `kernel-image-pine` update to version 6.12.66-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2025-12647

около 1 года назад

ALT-PU-2025-12647: package `kernel-image-rpi-un` update to version 6.12.49-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-9924

5 месяцев назад

ALT-PU-2026-9924: package `kernel-image-rpi-un` update to version 6.12.94-alt1

CVSS3: 10
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-38067

In the Linux kernel, the following vulnerability has been resolved: rseq: Fix segfault on registration when rseq_cs is non-zero The rseq_cs field is documented as being set to 0 by user-space prior to registration, however this is not currently enforced by the kernel. This can result in a segfault on return to user-space if the value stored in the rseq_cs field doesn't point to a valid struct rseq_cs. The correct solution to this would be to fail the rseq registration when the rseq_cs field is non-zero. However, some older versions of glibc will reuse the rseq area of previous threads without clearing the rseq_cs field and will also terminate the process if the rseq registration fails in a secondary thread. This wasn't caught in testing because in this case the leftover rseq_cs does point to a valid struct rseq_cs. What we can do is clear the rseq_cs field on registration when it's non-zero which will prevent segfaults on registration and won't break the glibc versions that reuse rs...

CVSS3: 5.5
1%
Низкий
больше 1 года назад
redhat логотип
CVE-2025-38067

In the Linux kernel, the following vulnerability has been resolved: rseq: Fix segfault on registration when rseq_cs is non-zero The rseq_cs field is documented as being set to 0 by user-space prior to registration, however this is not currently enforced by the kernel. This can result in a segfault on return to user-space if the value stored in the rseq_cs field doesn't point to a valid struct rseq_cs. The correct solution to this would be to fail the rseq registration when the rseq_cs field is non-zero. However, some older versions of glibc will reuse the rseq area of previous threads without clearing the rseq_cs field and will also terminate the process if the rseq registration fails in a secondary thread. This wasn't caught in testing because in this case the leftover rseq_cs does point to a valid struct rseq_cs. What we can do is clear the rseq_cs field on registration when it's non-zero which will prevent segfaults on registration and won't break the glibc versions that reuse rs...

CVSS3: 5.5
1%
Низкий
больше 1 года назад
nvd логотип
CVE-2025-38067

In the Linux kernel, the following vulnerability has been resolved: rseq: Fix segfault on registration when rseq_cs is non-zero The rseq_cs field is documented as being set to 0 by user-space prior to registration, however this is not currently enforced by the kernel. This can result in a segfault on return to user-space if the value stored in the rseq_cs field doesn't point to a valid struct rseq_cs. The correct solution to this would be to fail the rseq registration when the rseq_cs field is non-zero. However, some older versions of glibc will reuse the rseq area of previous threads without clearing the rseq_cs field and will also terminate the process if the rseq registration fails in a secondary thread. This wasn't caught in testing because in this case the leftover rseq_cs does point to a valid struct rseq_cs. What we can do is clear the rseq_cs field on registration when it's non-zero which will prevent segfaults on registration and won't break the glibc versions that reuse r

CVSS3: 5.5
1%
Низкий
больше 1 года назад
msrc логотип
CVE-2025-38067

rseq: Fix segfault on registration when rseq_cs is non-zero

CVSS3: 5.5
1%
Низкий
9 месяцев назад
debian логотип
CVE-2025-38067

In the Linux kernel, the following vulnerability has been resolved: r ...

CVSS3: 5.5
1%
Низкий
больше 1 года назад
github логотип
GHSA-627j-hqc4-995q

In the Linux kernel, the following vulnerability has been resolved: rseq: Fix segfault on registration when rseq_cs is non-zero The rseq_cs field is documented as being set to 0 by user-space prior to registration, however this is not currently enforced by the kernel. This can result in a segfault on return to user-space if the value stored in the rseq_cs field doesn't point to a valid struct rseq_cs. The correct solution to this would be to fail the rseq registration when the rseq_cs field is non-zero. However, some older versions of glibc will reuse the rseq area of previous threads without clearing the rseq_cs field and will also terminate the process if the rseq registration fails in a secondary thread. This wasn't caught in testing because in this case the leftover rseq_cs does point to a valid struct rseq_cs. What we can do is clear the rseq_cs field on registration when it's non-zero which will prevent segfaults on registration and won't break the glibc versions that reus...

CVSS3: 5.5
1%
Низкий
больше 1 года назад
fstec логотип
BDU:2025-14933

Уязвимость компонента rseq.c ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность и доступность защищаемой информации

CVSS3: 3.6
1%
Низкий
больше 1 года назад
redos логотип
ROS-20260205-80-0038

Уязвимость kernel-lt

CVSS3: 3.6
1%
Низкий
9 месяцев назад
redos логотип
ROS-20260205-73-0027

Уязвимость kernel-lt

CVSS3: 3.6
1%
Низкий
9 месяцев назад
oracle-oval логотип
ELSA-2025-20716

ELSA-2025-20716: Unbreakable Enterprise kernel security update (IMPORTANT)

около 1 года назад
altlinux логотип
ALT-PU-2025-16597

ALT-PU-2025-16597: package `kernel-image-un-def` update to version 6.1.146-alt1

CVSS3: 7.8
больше 1 года назад
altlinux логотип
ALT-PU-2025-16618

ALT-PU-2025-16618: package `kernel-image-rt` update to version 5.10.240-alt1.rt134

CVSS3: 8
больше 1 года назад
altlinux логотип
ALT-PU-2025-16605

ALT-PU-2025-16605: package `kernel-image-std-def` update to version 5.10.240-alt1

CVSS3: 8
больше 1 года назад
oracle-oval логотип
ELSA-2025-20551

ELSA-2025-20551: Unbreakable Enterprise kernel security update (IMPORTANT)

около 1 года назад
altlinux логотип
ALT-PU-2025-16509

ALT-PU-2025-16509: package `kernel-image-6.12` update to version 6.12.41-alt1

CVSS3: 8.8
больше 1 года назад
altlinux логотип
ALT-PU-2025-16464

ALT-PU-2025-16464: package `kernel-image-rt` update to version 6.12.41-alt1

CVSS3: 8.8
больше 1 года назад
altlinux логотип
ALT-PU-2026-1529

ALT-PU-2026-1529: package `kernel-image-pine` update to version 6.12.66-alt1

CVSS3: 9.8
10 месяцев назад
altlinux логотип
ALT-PU-2025-12647

ALT-PU-2025-12647: package `kernel-image-rpi-un` update to version 6.12.49-alt1

CVSS3: 9.8
около 1 года назад
altlinux логотип
ALT-PU-2026-9924

ALT-PU-2026-9924: package `kernel-image-rpi-un` update to version 6.12.94-alt1

CVSS3: 10
5 месяцев назад

Уязвимостей на страницу