Lucene search
+L

5837 matches found

osv_oesa
osv_oesa
•added 2025/10/31 11:09 a.m.•27 views

OESA-2025-2555 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ext4: fix potential out of bound read in ext4fcreplayscan For scan loop must ensure that at least EXT4FCTAGBASELEN space. If remain space less than...

7.8CVSS6.9AI score0.0039EPSS
SaveExploits0References25
Microsoft CVE
Microsoft CVE
•added 2025/10/31 1:10 a.m.•22 views

ksmbd: fix recursive locking in RPC handle list access

...

7.5CVSS6.1AI score0.00282EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/10/31 12:25 a.m.•12 views

SUSE CVE-2025-40090

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix recursive locking in RPC handle list access Since commit 305853cce3794 "ksmbd: Fix race condition in RPC handle list access", ksmbdsessionrpcmethod attempts to lock sess-rpclock. This causes hung connections / tasks wh...

5.5CVSS5.9AI score0.00282EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2025/10/31 12:00 a.m.•9 views

Linux fs/hugetlbfs/inode.c Heap Buffer Overflow DoS

The vulnerability of the remove inodesinglefolio function in the fs/hugetlbfs/inode.c module of the Linux operating system is related to insufficient locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS7.5AI score0.00202EPSS
SaveExploits0References13Affected Software3
NVD
NVD
•added 2025/10/30 10:15 a.m.•23 views

CVE-2025-40090

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix recursive locking in RPC handle list access Since commit 305853cce3794 "ksmbd: Fix race condition in RPC handle list access", ksmbdsessionrpcmethod attempts to lock sess-rpclock. This causes hung connections / tasks wh...

7.5CVSS0.00282EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu
•added 2025/10/30 10:15 a.m.•13 views

UBUNTU-CVE-2025-40090

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix recursive locking in RPC handle list access Since commit 305853cce3794 "ksmbd: Fix race condition in RPC handle list access", ksmbdsessionrpcmethod attempts to lock sess-rpclock. This causes hung connections / tasks wh...

7.5CVSS5.9AI score0.00282EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2025/10/30 9:47 a.m.•14 views

CVE-2025-40090

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix recursive locking in RPC handle list access Since commit 305853cce3794 "ksmbd: Fix race condition in RPC handle list access", ksmbdsessionrpcmethod attempts to lock sess-rpclock. This causes hung connections / tasks wh...

5.9AI score0.00282EPSS
SaveExploits0References6Affected Software1
osv_cve
osv_cve
•added 2025/10/30 9:47 a.m.•18 views

CVE-2025-40090 ksmbd: fix recursive locking in RPC handle list access

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix recursive locking in RPC handle list access Since commit 305853cce3794 "ksmbd: Fix race condition in RPC handle list access", ksmbdsessionrpcmethod attempts to lock sess-rpclock. This causes hung connections / tasks wh...

7.5CVSS6.3AI score
SaveExploits0References8
RedhatCVE
RedhatCVE
•added 2025/10/29 7:32 a.m.•19 views

CVE-2025-10151

Improper locking vulnerability in Softing Industrial Automation GmbH gateways allows infected memory and/or resource leak exposure.This issue affects smartLink HW-PN: from 1.02 through 1.03 smartLink HW-DP: 1.31...

7.2CVSS6.9AI score0.00234EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/10/29 12:00 a.m.•13 views

Siemens SIMATIC and SCALANCE Devices Improper Locking (CVE-2025-21694)

fs/proc: softlockup in readvmcore This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503774; scriptversion"1.2";...

5.5CVSS6.6AI score0.00242EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2025/10/29 12:00 a.m.•20 views

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Improper Resource Locking (CVE-2024-46750)

In the Linux kernel, the following vulnerability has been resolved: PCI: Add missing bridge lock to pcibuslock. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

7.8CVSS6.1AI score0.00224EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2025/10/29 12:00 a.m.•5 views

Siemens SIMATIC Devices Improper Locking (CVE-2024-38780)

In the Linux kernel, the following vulnerability has been resolved: dma-buf/sw-sync: don't enable IRQ from syncprintobj. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; ...

5.5CVSS6AI score0.00189EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/10/29 12:00 a.m.•24 views

ZITADEL security vulnerabilities

ZITADEL is a modern open source alternative to Auth0, Firebase Auth, AWS Cognito, and Keycloak built for the age of containers and serverless, open sourced by ZITADEL in Switzerland. A security vulnerability exists in ZITADEL versions prior to 4.6.0, prior to 3.4.3, and prior to 2.71.18, which...

9.8CVSS7.8AI score0.0037EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/10/29 12:00 a.m.•8 views

Siemens SIMATIC Devices Improper Locking (CVE-2024-38598)

In the Linux kernel, the following vulnerability has been resolved: md: fix resync softlockup when bitmap size is less than array size. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

5.5CVSS6.2AI score0.00197EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2025/10/28 12:15 p.m.•5 views

DEBIAN-CVE-2025-40039

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix race condition in RPC handle list access The 'sess-rpchandlelist' XArray manages RPC handles within a ksmbd session. Access to this list is intended to be protected by 'sess-rpclock' an rwsemaphore. However, the lockin...

4.7CVSS6.6AI score0.00312EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/28 12:15 p.m.•15 views

CVE-2025-40039

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix race condition in RPC handle list access The 'sess-rpchandlelist' XArray manages RPC handles within a ksmbd session. Access to this list is intended to be protected by 'sess-rpclock' an rwsemaphore. However, the lockin...

8.8CVSS0.00312EPSS
SaveExploits0References5
CVE
CVE
•added 2025/10/28 11:48 a.m.•69 views

CVE-2025-40039

The CVE-2025-40039 issue is a Linux kernel ksmbd race condition in RPC handle list access. The underlying bug was that ksmbd_session_rpc_open() used only a read lock before xa_store()/xa_erase() (modifications require a write lock), and ksmbd_session_rpc_method() read the list with xa_load() with...

8.8CVSS6.6AI score0.00312EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/28 7:25 a.m.•21 views

CVE-2025-10151 Malicious TCP/IP thread locking leads into diverse malfunctions

Improper locking vulnerability in Softing Industrial Automation GmbH gateways allows infected memory and/or resource leak exposure.This issue affects smartLink HW-PN: from 1.02 through 1.03 smartLink HW-DP: 1.31...

7.2CVSS5.7AI score0.00234EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/28 7:25 a.m.•35 views

CVE-2025-10151

CVE-2025-10151 affects Softing Industrial Automation GmbH gateways, specifically SmartLink HW-PN (versions 1.02–1.03) and SmartLink HW-DP (version 1.31). The issue stems from improper locking, potentially causing memory and/or resource leaks. Impact is described as exposure of infected memory and...

7.2CVSS5.7AI score0.00234EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/28 12:00 a.m.•10 views

CVE-2025-10151: Improper Locking

Improper locking vulnerability in Softing Industrial Automation GmbH gateways allows infected memory and/or resource leak exposure.This issue affects smartLink HW-PN: from 1.02 through 1.03 smartLink HW-DP: 1.31...

7.2CVSS5.7AI score0.00234EPSS
SaveExploits0References1
Rows per page
Query Builder