PT-2021-30198

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.10 Description A potential issue exists in the Linux Kernel, specifically in the cpufreq: schedutil component. The problem arises from the destruction of a mutex before the kobject put function frees the...

PT-2021-29981

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.285 Description A potential issue exists where a mutex is destroyed before the memory is freed by kobject put. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-30002

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.249 Description A potential issue exists in the Linux Kernel, specifically in the cpufreq: schedutil component. The problem arises from the destruction of a mutex before the kobject put function frees the...

PT-2021-26126

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description A potential issue exists in the Linux Kernel related to the cpufreq schedutil component. The problem arises from the destruction of a mutex before the kobject put function frees the memory...

PT-2021-30066

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.151 Description A potential issue exists in the Linux Kernel related to the cpufreq schedutil component. The problem arises from the destruction of a mutex before the kobject put function frees the memory...

PT-2021-30121

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue is related to the cpufreq schedutil component. It involves a mutex being destroyed before the memory is freed by kobject put, which may have potential security implications. The...

PT-2021-25986

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.285 Description The issue is related to the cpufreq schedutil component. It involves a mutex being destroyed before the memory is freed by kobject put, which could potentially lead to security vulnerabilitie...

PT-2021-26203

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.10 Description: A potential issue exists in the Linux Kernel, specifically in the cpufreq: schedutil component. The problem arises from the destruction of a mutex before the memory is freed by kobject put...

PT-2021-8222

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the use of an uninitialized resource in the mxl111sf init and mxl111sf get stream config dvbt functions. The problem arises from the wrong location of the mutex...

Mozilla Rust Buffer Overflow Vulnerability (CNVD-2021-85294)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. Mozilla Rust is vulnerable to a buffer overflow vulnerability, which can be exploited by attackers to unlock a mutex lock from an unlocked thread, leading to memory corruption...

GHSA-F6G6-54HM-FHXV Data races in libsbc

Affected versions of this crate implements Send for Decoder for any R: Read. This allows Decoder to contain R: !Send and carry move it to another thread. This can result in undefined behavior such as memory corruption from data race on R, or dropping R = MutexGuard from a thread that didn't lock...

a2 (>=0.2.0, <=0.5.0-alpha.7), a2d (>=0.1.0, <=0.1.11) +5215 more potentially affected by CVE-2020-35910 +4 more via lock_api (>=0.1.5, <=0.3.4)

lockapi CARGO version =0.1.5, =0.2.0, =0.1.0, =0.5.3, =0.1.0, =0.2.1, =0.1.1, =0.0.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.9.1 and more Source cves: CVE-2020-35910, CVE-2020-35911, CVE-2020-35912, CVE-2020-35913, CVE-2020-35914 Source advisory: OSV:GHSA-HJ9H-WRGG-HGMX...

async-mutex (>=1.0.1, <=1.4.1), blocking-permit (>=0.1.0, <=1.2.1) +18 more potentially affected by CVE-2020-35915 via futures-intrusive (>=0.2.2, <=0.3.1)

futures-intrusive CARGO version =0.2.2, =1.0.1, =0.1.0, =0.4.0, =0.4.0, =0.4.0, =0.2.0, =0.10.0, =0.3.6, =0.3.7 - raii-counter-futures 0.1.0 - stm32f1xx-futures 0.1.0 - switchyard 0.1.0 and more Source cves: CVE-2020-35915 Source advisory: OSV:GHSA-4HJG-CX88-G9F9...

a2 (>=0.2.0, <=0.5.0-alpha.7), a2d (>=0.1.0, <=0.1.11) +5215 more potentially affected by CVE-2020-35910 +4 more via lock_api (>=0.1.5, <=0.3.4)

lockapi CARGO version =0.1.5, =0.2.0, =0.1.0, =0.5.3, =0.1.0, =0.2.1, =0.1.1, =0.0.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.9.1 and more Source cves: CVE-2020-35910, CVE-2020-35911, CVE-2020-35912, CVE-2020-35913, CVE-2020-35914 Source advisory: OSV:GHSA-GMV4-VMX3-X9F3...

a2 (>=0.2.0, <=0.5.0-alpha.7), a2d (>=0.1.0, <=0.1.11) +5215 more potentially affected by CVE-2020-35910 +4 more via lock_api (>=0.1.5, <=0.3.4)

lockapi CARGO version =0.1.5, =0.2.0, =0.1.0, =0.5.3, =0.1.0, =0.2.1, =0.1.1, =0.0.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.9.1 and more Source cves: CVE-2020-35910, CVE-2020-35911, CVE-2020-35912, CVE-2020-35913, CVE-2020-35914 Source advisory: OSV:GHSA-PPJ3-7JW3-8VC4...

Rust 缓冲区错误漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. Mozilla Rust is vulnerable to a buffer overflow vulnerability, which can be exploited by attackers to unlock a mutex lock from an unlocked thread, leading to memory corruption...

SUSE-SU-2021:2480-1 Security update for glibc

This update for glibc fixes the following issues: Security issues fixed: - CVE-2021-35942: wordexp: Fixed handle overflow in positional parameter number bsc1187911 - CVE-2016-10228: Rewrite iconv option parsing bsc1027496 Other fixes: - Fixed race in pthreadmutexlock while promoting to...

PT-2024-11284 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: There is a time-of-check-to-time-of-use error in drm getunique due to retrieving file priv-master prior to locking the device's master mutex. This error can cause a use-after-free read...

PT-2021-8256 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a deadlock in AP/VLAN handling. When AP VLAN interfaces are up and the AP interface they belong to is closed, a deadlock occurs because the wiphy mutex is held...

kernel: Use after free via PI futex state

A flaw was found in the Linux kernel. A use-after-free memory flaw in the Fast Userspace Mutexes functionality allowing a local user to crash the system or escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as syste...