4592 matches found
Siemens SIMATIC Devices Improper Locking (CVE-2024-50210)
In the Linux kernel, the following vulnerability has been resolved: posix-clock: posix-clock: Fix unbalanced locking in pcclocksettime If getclockdesc succeeds, it calls fget for the clockid's fd, and get the clk-rwsem read lock, so the error path should release the lock to make the lock balance...
Siemens SIMATIC Devices Improper Locking (CVE-2024-27004)
In the Linux kernel, the following vulnerability has been resolved: clk: Get runtime PM before walking tree during disableunused This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Improper Locking (CVE-2024-50095)
In the Linux kernel, the following vulnerability has been resolved: RDMA/mad: Improve handling of timed out WRs of mad agent Current timeout handler of mad agent acquires/releases madagentpriv lock for every timed out WRs. This causes heavy locking contention when higher no. of WRs are to be...
Siemens SIMATIC Devices Improper Locking (CVE-2024-35990)
dma: xilinxdpdma: Fix locking This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503700; scriptversion"1.2";...
Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Improper Locking (CVE-2024-50044)
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: FIX possible deadlock in rfcommskstatechange rfcommskstatechange attempts to use socklock so it must never be called with it locked but rfcommsockioctl always attempt to lock it. This plugin only works with...
Siemens SIMATIC Devices Improper Locking (CVE-2025-21859)
USB: gadget: fmidi: fmidicomplete to call queuework This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503474; scriptversion"1.2";...
Siemens SIMATIC Devices Improper Locking (CVE-2024-35805)
In the Linux kernel, the following vulnerability has been resolved: dm snapshot: fix lockup in dmexceptiontableexit There was reported lockup when we exit a snapshot with many exceptions. Fix this by adding condresched to the loop that frees the exceptions. This plugin only works with Tenable.ot...
The vulnerability of the wait_event_timeout() function in the Linux operating system, which allows a hacker to trigger a service failure
The vulnerability of the waiteventtimeout function in the Linux operating system is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to trigger a service failure...
Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Improper Resource Locking (CVE-2024-47660)
In the Linux kernel, the following vulnerability has been resolved: fsnotify: clear PARENTWATCHED flags lazily In some setups directories can have many usually negative dentries. Hence fsnotifyupdatechilddentryflags function can take a significant amount of time. Since the bulk of this function...
Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Improper Locking (CVE-2024-47735)
RDMA/hns: missuse of spinlockirq/spinunlockirq when spinlockirqsave/spinlockirqrestore was hold. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...
Siemens SIMATIC Devices Improper Locking (CVE-2024-26934)
In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in usbdeauthorizeinterface This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...
PT-2025-43495
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Framework component of Android operating systems due to insufficient input validation. This could allow an attacker to escalate privileges. Specifically, the issue reside...
EUVD-2022-54796
In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Prevent use of lock before it is initialized If there is a failure during probe of hfi1 before the sdmamaplock is initialized, the call to hfi1freedevdata will attempt to use a lock that has not been initialized. If th...
ROS-20251021-02
A vulnerability in the btrfs component of the Linux operating system kernel is related to an incorrect lock in the function clearextentuptodate in fs/btrfs/inode.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the KVM component of the...
The vulnerability of the btrfs_del inode_from_root() function in the fs/btrfs/inode.c module of the Linux kernel allows a attacker to cause a failure in the operation of the file system.
The vulnerability of the btrfsdel inodefromroot function in the fs/btrfs/inode.c module of the Linux kernel operating system is related to improper locking mechanisms. Exploiting this vulnerability could allow an attacker to cause service failures...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987562)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987562 advisory. In the Linux kernel, the following vulnerability has been resolved: cfg80211: fix management registrations locking The management registrations locking was broken, t...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987666)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987666 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix race between searching chunks and release journalhead from bufferhead Encountered a ra...
CVE-2025-40006
CVE-2025-40006 pertains to the Linux kernel mm/hugetlb subsystem. The issue arises when a folio becomes unmapped during a race between migration and hole allocation, where remove_inode_single_folio can unmap a folio only if the folio lock is held; if the folio migrates and the mapped PTE converts...
ROS-20251017-02
A vulnerability in the LoongArch component of the Linux operating system kernel is related to incorrect locking in the arch/loongarch/include/asm/io.h file. Exploitation of the vulnerability could allow an attacker to cause a denial of service denial of service Vulnerability of...
SUSE CVE-2025-39981
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible UAFs This attemps to fix possible UAFs caused by struct mgmtpending being freed while still being processed like in the following trace, in order to fix mgmtpendingvalid is introduce and use to check...