Lucene search
+L

436 matches found

OSV
OSV
added 2024/11/21 7:15 p.m.3 views

DEBIAN-CVE-2024-53090

In the Linux kernel, the following vulnerability has been resolved: afs: Fix lock recursion afswakeupasynccall can incur lock recursion. The problem is that it is called from AFRXRPC whilst holding the -notifylock, but it tries to take a ref on the afscall struct in order to pass it to a work que...

5.5CVSS5.7AI score0.0046EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/21 7:15 p.m.22 views

AZL-54608 CVE-2024-53090 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: afs: Fix lock recursion afswakeupasynccall can incur lock recursion. The problem is that it is called from AFRXRPC whilst holding the -notifylock, but it tries to take a ref on the afscall struct in order to pass it to a work que...

5.5CVSS6.4AI score0.0046EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/21 7:15 p.m.6 views

UBUNTU-CVE-2024-53090

In the Linux kernel, the following vulnerability has been resolved: afs: Fix lock recursion afswakeupasynccall can incur lock recursion. The problem is that it is called from AFRXRPC whilst holding the -notifylock, but it tries to take a ref on the afscall struct in order to pass it to a work que...

7.5CVSS6.2AI score0.0046EPSS
SaveExploits0References34
Vulnrichment
Vulnrichment
added 2024/11/21 6:17 p.m.12 views

CVE-2024-53090 afs: Fix lock recursion

In the Linux kernel, the following vulnerability has been resolved: afs: Fix lock recursion afswakeupasynccall can incur lock recursion. The problem is that it is called from AFRXRPC whilst holding the -notifylock, but it tries to take a ref on the afscall struct in order to pass it to a work que...

7.6AI score0.0046EPSS
SaveExploits0References2
CVE
CVE
added 2024/11/21 6:17 p.m.164 views

CVE-2024-53090

CVE-2024-53090 : In the Linux kernel, the afs lock recursion issue occurred when afs_wake_up_async_call() could incur lock recursion if called from AF_RXRPC while holding the notify_lock and trying to pass an afs_call ref to a work queue. If the afs_call was already queued, an extraneous ref coul...

7.5CVSS6.8AI score0.0046EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/11/21 6:17 p.m.33 views

CVE-2024-53090 afs: Fix lock recursion

In the Linux kernel, the following vulnerability has been resolved: afs: Fix lock recursion afswakeupasynccall can incur lock recursion. The problem is that it is called from AFRXRPC whilst holding the -notifylock, but it tries to take a ref on the afscall struct in order to pass it to a work que...

7.5CVSS0.0046EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2024/11/21 6:17 p.m.10 views

CVE-2024-53090

In the Linux kernel, the following vulnerability has been resolved: afs: Fix lock recursion afswakeupasynccall can incur lock recursion. The problem is that it is called from AFRXRPC whilst holding the -notifylock, but it tries to take a ref on the afscall struct in order to pass it to a work que...

7.5CVSS5.7AI score0.0046EPSS
SaveExploits0
OSV
OSV
added 2024/11/14 8:15 p.m.11 views

UBUNTU-CVE-2024-10397

A malicious server can crash the OpenAFS cache manager and other client utilities, and possibly execute arbitrary code...

7.8CVSS6AI score0.00406EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/11/14 12:0 a.m.7 views

OpenAFS 输入验证错误漏洞

OpenAFS is an OpenAFS open source set of distributed file systems. It allows files and resources to be shared between systems over LANs and WANs. OpenAFS suffers from an input validation error vulnerability that stems from the fact that a local user can bypass the process authentication group...

8.4CVSS6.4AI score0.00202EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2024/10/22 2:22 p.m.8 views

SUSE CVE-2022-49012

In the Linux kernel, the following vulnerability has been resolved: afs: Fix server-active leak in afsputserver The atomicread was accidentally replaced with atomicincreturn, which prevents the server from getting cleaned up and causes rmmod to hang with a warning: Can't purge s=00000001...

5.5CVSS6.4AI score0.00205EPSS
SaveExploits0References8
Redos
Redos
added 2024/10/22 12:0 a.m.57 views

ROS-20241021-09

A vulnerability in the ntfs3 component of the Linux operating system kernel is related to read errors outside the bounds in the ntfslistea function in fs/ntfs3/xattr.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the qedr component of...

8.1CVSS8.2AI score0.00723EPSS
SaveExploits0
NVD
NVD
added 2024/10/21 8:15 p.m.17 views

CVE-2022-49012

In the Linux kernel, the following vulnerability has been resolved: afs: Fix server-active leak in afsputserver The atomicread was accidentally replaced with atomicincreturn, which prevents the server from getting cleaned up and causes rmmod to hang with a warning: Can't purge s=00000001...

5.5CVSS0.00205EPSS
SaveExploits0References2
OSV
OSV
added 2024/10/21 8:15 p.m.4 views

DEBIAN-CVE-2022-49012

In the Linux kernel, the following vulnerability has been resolved: afs: Fix server-active leak in afsputserver The atomicread was accidentally replaced with atomicincreturn, which prevents the server from getting cleaned up and causes rmmod to hang with a warning: Can't purge s=00000001...

5.5CVSS4.6AI score0.00205EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/21 8:15 p.m.9 views

UBUNTU-CVE-2022-49012

In the Linux kernel, the following vulnerability has been resolved: afs: Fix server-active leak in afsputserver The atomicread was accidentally replaced with atomicincreturn, which prevents the server from getting cleaned up and causes rmmod to hang with a warning: Can't purge s=00000001...

5.5CVSS5.7AI score0.00205EPSS
SaveExploits0References5
OSV
OSV
added 2024/10/21 8:6 p.m.13 views

CVE-2022-49012 afs: Fix server->active leak in afs_put_server

In the Linux kernel, the following vulnerability has been resolved: afs: Fix server-active leak in afsputserver The atomicread was accidentally replaced with atomicincreturn, which prevents the server from getting cleaned up and causes rmmod to hang with a warning: Can't purge s=00000001...

5.8AI score
SaveExploits0References5
CVE
CVE
added 2024/10/21 8:6 p.m.102 views

CVE-2022-49012

In CVE-2022-49012, the Linux kernel fixes an afs_put_server cleanup leak where atomic_read was inadvertently replaced with atomic_inc_return, preventing server cleanup and causing rmmod to hang with a purge warning. The vulnerability is tied to the AFS server cleanup path and affects server deall...

5.5CVSS5.2AI score0.00205EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2024/10/21 6:15 p.m.13 views

CVE-2024-49999

In the Linux kernel, the following vulnerability has been resolved: afs: Fix the setting of the server responding flag In afswaitforoperation, we set transcribe the call responded flag to the server record that we used after doing the fileserver iteration loop - but it's possible to exit the loop...

7.5CVSS0.00572EPSS
SaveExploits0References3
OSV
OSV
added 2024/10/21 6:15 p.m.17 views

UBUNTU-CVE-2024-49999

In the Linux kernel, the following vulnerability has been resolved: afs: Fix the setting of the server responding flag In afswaitforoperation, we set transcribe the call responded flag to the server record that we used after doing the fileserver iteration loop - but it's possible to exit the loop...

7.5CVSS6.2AI score0.00572EPSS
SaveExploits0References20
Vulnrichment
Vulnrichment
added 2024/10/21 6:2 p.m.11 views

CVE-2024-49999 afs: Fix the setting of the server responding flag

In the Linux kernel, the following vulnerability has been resolved: afs: Fix the setting of the server responding flag In afswaitforoperation, we set transcribe the call responded flag to the server record that we used after doing the fileserver iteration loop - but it's possible to exit the loop...

6.8AI score0.00572EPSS
SaveExploits0References3
CVE
CVE
added 2024/10/21 6:2 p.m.149 views

CVE-2024-49999

The CVE-2024-49999 issue is in the Linux kernel afs client (afs_wait_for_operation in fs/afs/fs_operation.c). A loop could exit after receiving a server response that was discarded, leaving op->server possibly NULL and then the code could set a server flag. The fix adds a guard and proper book...

7.5CVSS5.2AI score0.00572EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder