EUVD-2025-34589

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Fix UAF in hciconntxdequeue This fixes the following UAF caused by not properly locking hdev when processing HCIEVNUMCOMPPKTS: BUG: KASAN: slab-use-after-free in hciconntxdequeue+0x1be/0x220...

EUVD-2020-7655

Malware in sbrugna...

CVE-2023-53297

CVE-2023-53297 affects the Linux kernel Bluetooth L2CAP path, where conn->chan_lock was not held before l2cap_get_chan_by_scid; if that call returns NULL, a “bad unlock balance” condition is triggered. Multiple connected advisories (Astra Linux, MiracleLinux, RHEL kernels) document the fix as ...

smb3: missing lock when picking channel

...

DEBIAN-CVE-2025-38643

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Add missing lock in cfg80211checkandendcac Callers of wdevchandef must hold the wiphy mutex. But the worker cfg80211propagatecacdonewk never takes the lock. Which triggers the warning below with the...

AZL-71167 CVE-2025-38643 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Add missing lock in cfg80211checkandendcac Callers of wdevchandef must hold the wiphy mutex. But the worker cfg80211propagatecacdonewk never takes the lock. Which triggers the warning below with the...

CVE-2025-38643

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Add missing lock in cfg80211checkandendcac Callers of wdevchandef must hold the wiphy mutex. But the worker cfg80211propagatecacdonewk never takes the lock. Which triggers the warning below with the...

CVE-2025-38643 wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Add missing lock in cfg80211checkandendcac Callers of wdevchandef must hold the wiphy mutex. But the worker cfg80211propagatecacdonewk never takes the lock. Which triggers the warning below with the...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a lack of lock protection in cfg80211checkandendcac, which could lead to a null pointer dereference...

Linux Distros Unpatched Vulnerability : CVE-2022-2959

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A race condition was found in the Linux kernel's watch queue due to a missing lock in piperesizering. The specific flaw exists within the handling of pipe...

Linux Distros Unpatched Vulnerability : CVE-2025-38005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma: Add missing locking Recent kernels complain about a missing lock in...

CVE-2025-38005

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma: Add missing locking Recent kernels complain about a missing lock in k3-udma.c when the lock validator is enabled: 4.128073 WARNING: CPU: 0 PID: 746 at drivers/dma/ti/../virt-dma.h:169...

CVE-2025-38005 dmaengine: ti: k3-udma: Add missing locking

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma: Add missing locking Recent kernels complain about a missing lock in k3-udma.c when the lock validator is enabled: 4.128073 WARNING: CPU: 0 PID: 746 at drivers/dma/ti/../virt-dma.h:169...

CVE-2025-38005

CVE-2025-38005 affects the Linux kernel DMA engine TI k3-udma driver. The root cause is a missing locking in k3-udma.c; the provided docs note that a commit adding the missing locking resolves the issue. Remediation: apply the kernel patch/updated driver version that includes the locking fix (as ...

CVE-2020-15668

A lock was missing when accessing a data structure and importing certificate information into the trust database. This vulnerability affects Firefox 80 and Firefox for Android 80...

PT-2025-25780

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.9 Description A vulnerability in the Linux kernel has been resolved, related to a missing lock in the k3-udma.c file. This issue causes recent kernels to complain when the lock validator is enabled, resultin...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a lack of lock protection in the ath11khalsrng function, which could lead to data contention...

CVE-2025-30438

This issue was addressed with improved access restrictions. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to dismiss the system notification on the Lock Screen that a recording w...

Astra Linux – Vulnerability in xorg-server

In the X.Org X Server versions 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread without acquiring a lock, which is known as a race condition. Specifically, the AttachDevice function in...

PT-2025-34404

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 6.14.0-rc5-wt-g03960e6f9d47 33 and earlier. Description: A missing lock in the cfg80211 check and end cac function within the Linux kernel's wireless subsystem can lead to issues when callers of wdev chandef do not hold...