2693 matches found
UBUNTU-CVE-2024-58240
In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handling is much simpler. There's no reference counting, we just need to wait for the completion to wake us up and return its result. We...
CVE-2024-58240 tls: separate no-async decryption request handling from async
In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handling is much simpler. There's no reference counting, we just need to wait for the completion to wake us up and return its result. We...
CVE-2024-58240
The CVE-2024-58240 entry concerns the Linux kernel TLS path, specifically separating no-async decryption request handling from async flow. The described issue centers on a race in the TLS decryption handling (no-async vs async) and notes that a prior patch (aec7961916f3) addressed a UAF risk rela...
CVE-2024-58240 tls: separate no-async decryption request handling from async
In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handling is much simpler. There's no reference counting, we just need to wait for the completion to wake us up and return its result. We...
Linux Distros Unpatched Vulnerability : CVE-2023-46445
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message RFC 8308 via a man-in-the-middle attack, aka a Rogue Extension...
a2 (>=0.5.0-alpha.1, <=0.5.0), a_chat (0.1.0) +2625 more potentially affected by unknown CVE via async-std (>=0.99.4, <=1.13.2)
async-std CARGO version =0.99.4, =0.5.0-alpha.1, =0.1.0, =0.3.1, =0.1.0, =0.1.0, =0.7.0, =0.3.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.4 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0052...
RUSTSEC-2025-0052 async-std has been discontinued
The async-std has been discontinued. Alternatives: - smol...
async-std has been discontinued
The async-std has been discontinued. Alternatives: - smol...
UBUNTU-CVE-2025-38628
In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix release of uninitialized resources on error path The commit in the fixes tag made sure that mlx5vdpafree is the single entrypoint for removing the vdpa device resources added in mlx5vdpadevadd, even in the cleanup...
PT-2026-24113
Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.15.1 vLLM version 0.17.0 Description vLLM is an inference and serving engine for large language models LLMs. A Server-Side Request Forgery SSRF protection mechanism implemented in version 0.15.1 can be bypassed in the...
Linux Distros Unpatched Vulnerability : CVE-2023-52459
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: media: v4l: async: Fix duplicated list deletion The list deletion call dropped here is alrea...
Linux Distros Unpatched Vulnerability : CVE-2023-48184
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - QuickJS before 7414e5f has a quickjs.h JSFreeValueRT use-after-free because of incorrect garbage collection of async functions with closures. CVE-2023-48184 Not...
Linux Distros Unpatched Vulnerability : CVE-2025-38358
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between async reclaim worker and closectree Syzbot reported an assertion...
Linux Distros Unpatched Vulnerability : CVE-2021-28692
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - inappropriate x86 IOMMU timeout detection / handling IOMMUs process commands issued to them in parallel with the operation of the CPUs issuing such commands. In...
Linux Distros Unpatched Vulnerability : CVE-2025-38488
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - smb: client: fix use-after-free in cryptmessage when using async crypto The CVE-2024-50047 fix removed asynchronous crypto handling from...
Linux Distros Unpatched Vulnerability : CVE-2023-28858
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an...
Malicious code in yyf-async (npm)
The package yyf-async was found to contain malicious code...
Malicious code in parse-async-theta-user-thread (npm)
The package parse-async-theta-user-thread was found to contain malicious code...