CVE-2021-3735

A deadlock issue was found in the AHCI controller device of QEMU. It occurs on a software reset ahciresetport while handling a host-to-device Register FIS Frame Information Structure packet from the guest. A privileged user inside the guest could use this flaw to hang the QEMU process on the host...

CVE-2021-3735

CVE-2021-3735 describes a deadlock in the AHCI controller device of QEMU. The issue occurs during a software reset (ahci_reset_port) while processing a host-to-device Register FIS from a guest, allowing a privileged guest user to hang the QEMU process on the host and cause a denial of service. Co...

PT-2022-10649 · Qemu +1 · Qemu +1

Name of the Vulnerable Software and Affected Versions: QEMU affected versions not specified Description: A deadlock issue was found in the AHCI controller device of QEMU, occurring on a software reset while handling a host-to-device Register FIS packet from the guest. This could allow a privilege...

QEMU 安全漏洞

QEMU Quick Emulator is a set of emulated processor software from Fabrice Bellard, a French personal developer. QEMU has a denial of service vulnerability, which stems from a deadlock problem in its AHCI controller during a software reset ahciresetport while processing host-to-device registration...

Security Bulletin: IBM MQ is vulnerable to a deadlock in the IBM MQ PAM feature. (CVE-2018-1419)

Summary Users of the IBM MQ PAM module feature can experience a deadlock causing further authentication attempts to fail resulting in a denial of service. Vulnerability Details CVEID: CVE-2018-1419 DESCRIPTION: IBM MQ, when configured to use a PAM module for authentication, could allow a user to...

mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dscompress.cc, when an error occurs i.e., going to the err label while executing the method createworkerthreads, the held lock thd-ctrlmutex is not released correctly, which allows local users to trigger a denial ...

MariaDB 10.3.0 < 10.3.36 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.3.36. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.3.36 advisory. - A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a...

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. The vulnerability exists in dscompress.cc because of the deadlock via the component which allows an attacker to cause an application crash...

Denial Of Service (DoS)

MariaDB Server is vulnerable to denial of service DoS attacks. When an error occurs while executing the method createworkerthreads, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: race condition in perfeventopen leads to privilege escalation CVE-2022-1729 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...

ALSA-2022:5564 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: race condition in perfeventopen leads to privilege escalation CVE-2022-1729 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...

PT-2025-26042

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18.0 Description A deadlock and link starvation issue in the outgoing data path of the Linux kernel's n gsm implementation has been resolved. The issue occurred due to the hard coupling of the upper and lower...

GSD-2022-1004064 PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store()

PCI: Avoid pcidevlock AB/BA deadlock with sriovnumvfsstore This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by commit...

GSD-2022-1004062 tty: fix deadlock caused by calling printk() under tty_port->lock

tty: fix deadlock caused by calling printk under ttyport-lock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by commit...

CVE-2021-3433

Invalid channel map in CONNECTIND results to Deadlock. Zephyr versions = v2.5.0 Improper Check or Handling of Exceptional Conditions CWE-703. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3c2f-w4v6-qxrp...

CVE-2021-3433

Invalid channel map in CONNECTIND results to Deadlock. Zephyr versions = v2.5.0 Improper Check or Handling of Exceptional Conditions CWE-703. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3c2f-w4v6-qxrp...

Design/Logic Flaw

Invalid channel map in CONNECTIND results to Deadlock. Zephyr versions = v2.5.0 Improper Check or Handling of Exceptional Conditions CWE-703. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3c2f-w4v6-qxrp...

GSD-2022-1004028 drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop()

drivers: staging: rtl8192e: Fix deadlock in rtllibbeaconsstop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by commit...

GSD-2022-1004003 tty: fix deadlock caused by calling printk() under tty_port->lock

tty: fix deadlock caused by calling printk under ttyport-lock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...