CVE-2025-48618

In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to improper locking. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48618

In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to improper locking. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48618

In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to improper locking. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48618

CVE-2025-48618 is an Android framework elevation-of-privilege vulnerability. In CommandParamsFactory.java, processLaunchBrowser could allow a browser interaction from the lockscreen due to improper locking, enabling physical escalation of privilege without user interaction. Impact is described as...

CVE-2025-48618: Improper Locking

In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to improper locking. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by attackers to cause an elevation of physical privileges...

The vulnerability of the rtl8150_start_xmit() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rtl8150startxmit function in the Linux operating system is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the cpuset_write_resmask() function in the kernel/cgroup/cpuset.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the cpusetwriteresmask function in the kernel/cgroup/cpuset.c module of the Linux operating system is related to improper locking of resources. Exploiting this vulnerability can allow a attacker to cause service failures...

The vulnerability of the iso_conn_big_sync() function in the net/bluetooth/iso.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to cause a service failure.

The vulnerability of the isoconnbigsync function in the net/bluetooth/iso.c module of the Linux kernel’s Bluetooth subsystem is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `__folio_undo_large_rmappable` function in the `mm/huge_memory.c` module of the Linux kernel’s memory management subsystem allows a hacker to trigger a system failure.

The vulnerability of the folioundolargermappable function in the mm/hugememory.c module of the Linux kernel’s memory management subsystem is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

PUB-A-419088687

In aoccread of aocchanneldev.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of the spi_add_device() function in the drivers/spi/spi.c module of the Linux kernel’s SPI device support driver allows a attacker to cause a service failure.

The vulnerability of the spiadddevice function in the drivers/spi/spi.c module of the Linux kernel’s SPI device support driver relates to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

Siemens SCALANCE and RUGGEDCOM Devices Improper Locking (CVE-2024-46791)

can: mcp251x: fix deadlock if an interrupt occurs during mcp251xopen The mcp251xhwwake function is called with the mpclock mutex held and disables the interrupt handler so that no interrupts can be processed while waking the device. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices Improper Locking (CVE-2024-44952)

driver core: vulnerability due to a potential deadlock due to improper handling of device attributes and driver detachment, which has been fixed by using synchronizercu to prevent race conditions. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for...

The vulnerability of the j1939_netdev_start() function in the net/can/j1939/main.c module allows a hacker to cause a service failure for Linux kernel-based CAN bus interfaces.

The vulnerability of the j1939netdevstart function in the net/can/j1939/main.c module, which supports J1939 CAN interfaces in Linux kernels, is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-63396: Improper Locking

An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop can cause torch.profiler.profile PythonTracer to crash or hang during finalization, leading to a Denial of Service DoS...

The vulnerability of the `ring_buffer_subbuf_order_set()` function in the kernel/trace/ring_buffer.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ringbuffersubbuforderset function in the kernel/trace/ringbuffer.c module of the Linux operating system is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the erofs_show_options() function in the fs/erofs/super.c module of the Linux operating system allows for a denial-of-service attack to be executed.

The vulnerability of the erofsshowoptions function in the fs/erofs/super.c module of the Linux kernel is related to improper locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-10151

Improper locking vulnerability in Softing Industrial Automation GmbH gateways allows infected memory and/or resource leak exposure.This issue affects smartLink HW-PN: from 1.02 through 1.03 smartLink HW-DP: 1.31...

Siemens SIMATIC Devices Improper Locking (CVE-2024-38780)

In the Linux kernel, the following vulnerability has been resolved: dma-buf/sw-sync: don't enable IRQ from syncprintobj. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; ...