Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a race condition and system crash due to a missing lock...

kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge

CVE-2024-36000 addresses a synchronization issue in the Linux kernel's management of huge pages. The problem arises when multiple threads modify the reservation map concurrently without proper locking, leading to potential inconsistencies and system instability...

CVE-2024-42250 cachefiles: add missing lock protection when polling

In the Linux kernel, the following vulnerability has been resolved: cachefiles: add missing lock protection when polling Add missing lock protection in poll routine when iterating xarray, otherwise: Even with RCU read lock held, only the slot of the radix tree is ensured to be pinned there, while...

CVE-2024-42250

CVE-2024-42250 pertains to the Linux kernel, specifically the cachefiles subsystem. The root cause is a missing lock protection in the poll routine when iterating the xarray, which can lead to unsafe dereferencing of cachefiles_req objects stored in radix-tree slots even under an RCU read lock. T...

SUSE CVE-2024-35999

In the Linux kernel, the following vulnerability has been resolved: smb3: missing lock when picking channel Coverity spotted a place where we should have been holding the channel lock when accessing the ses channel index. Addresses-Coverity: 1582039 "Data race condition MISSINGLOCK"...

CVE-2024-35999

In the Linux kernel, the following vulnerability has been resolved: smb3: missing lock when picking channel Coverity spotted a place where we should have been holding the channel lock when accessing the ses channel index. Addresses-Coverity: 1582039 "Data race condition MISSINGLOCK"...

AZL-59474 CVE-2024-35999 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: smb3: missing lock when picking channel Coverity spotted a place where we should have been holding the channel lock when accessing the ses channel index. Addresses-Coverity: 1582039 "Data race condition MISSINGLOCK"...

CVE-2024-35999

CVE-2024-35999 concerns the Linux kernel where a data race could occur in the SMB3 path due to a missing lock when picking the channel. Coverity identified a missing channel lock when accessing the ses channel index (Address-Coverity: 1582039). The vulnerability was resolved in the Linux kernel a...

CVE-2024-35999 smb3: missing lock when picking channel

In the Linux kernel, the following vulnerability has been resolved: smb3: missing lock when picking channel Coverity spotted a place where we should have been holding the channel lock when accessing the ses channel index. Addresses-Coverity: 1582039 "Data race condition MISSINGLOCK"...

Synaptics SynHsaService 安全漏洞

Synaptics SynHsaService is a driver from Synaptics, Inc. A security vulnerability exists in Synaptics SynHsaService that stems from a missing lock check...

CVE-2023-5447 Use-After-Free in Service for Hardware Support App for Fingerprint Driver

Missing lock check in SynHsaService may create a use-after-free condition which causes abnormal termination of the service, resulting in denial of service for the Synaptics Hardware Support App...

PT-2024-26835

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description A missing lock when picking a channel in the smb3 module of the Linux kernel has been identified. This issue was spotted by Coverity, which reported a data race condition due to the missing loc...

Rocky Linux 9 : kernel-rt (RLSA-2023:0300)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:0300 advisory. - A race condition was found in the Linux kernel's watch queue due to a missing lock in piperesizering. The specific flaw exists within the handling of...

Design/Logic Flaw

A vulnerability was found due to missing lock for IOPOLL flaw in iocqringeventoverflow in iouring.c in Linux Kernel. This flaw allows a local attacker with user privilege to trigger a Denial of Service threat...

kernel: l2tp: missing lock when clearing sk_user_data can lead to NULL pointer dereference

A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol L2TP. A missing lock when clearing skuserdata can lead to a race condition and NULL pointer dereference. A local user could use this flaw to potentially crash the system causing a denial of service...

kernel: raw: Fix a data-race around sysctl_raw_l3mdev_accept.

A flaw was found in the RAW-IP module in the Linux kernel. A race condition can occur when reading the sysctlrawl3mdevaccept resource due to a missing lock, potentially impacting system stability and resulting in a denial of service...

kernel: icmp: Fix data-races around sysctl.

A flaw was found in the Linux kernel's ICMP protocol. A race condition can occur when reading the ICMP sysctl variables due to a missing lock, potentially impacting system stability and resulting in a denial of service...

kernel: l2tp: missing lock when clearing sk_user_data can lead to NULL pointer dereference

A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol L2TP. A missing lock when clearing skuserdata can lead to a race condition and NULL pointer dereference. A local user could use this flaw to potentially crash the system causing a denial of service...

NULL Pointer Dereference

linux-azure is vulnerable to NULL Pointer Dereference. A missing lock when clearing 'skuserdata' can lead to the vulnerability causing a potential denial of service...

CVE-2023-2430

A vulnerability was found due to a missing lock for the IOPOLL in iocqringeventoverflow in iouring.c in the Linux kernel. This flaw allows a local attacker with user privileges to trigger a denial of service. Mitigation Mitigation for this issue is either not available or the currently available...