655 matches found
CVE-2025-39826
CVE-2025-39826 : In the Linux kernel, the net/rose_neigh struct’s use field was a non-atomic reference counter, risking use-after-free if the rose_neigh is freed while still referenced. The fix converts the field from unsigned short to refcount_t and switches code paths to rose_neigh_hold() and r...
CVE-2025-39826 net: rose: convert 'use' field to refcount_t
In the Linux kernel, the following vulnerability has been resolved: net: rose: convert 'use' field to refcountt The 'use' field in struct roseneigh is used as a reference counter but lacks atomicity. This can lead to race conditions where a roseneigh structure is freed while still being reference...
CVE-2025-39826 net: rose: convert 'use' field to refcount_t
In the Linux kernel, the following vulnerability has been resolved: net: rose: convert 'use' field to refcountt The 'use' field in struct roseneigh is used as a reference counter but lacks atomicity. This can lead to race conditions where a roseneigh structure is freed while still being reference...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a lack of atomicity in the use field of the roseneigh structure, which could lead to post-release reuse issu...
CVE-2025-39827: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net: rose: include node references in roseneigh refcount Current implementation maintains two separate reference counting mechanisms: the 'count' field in struct roseneigh tracks references from rosenode structures, while the 'us...
Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20552)
The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20552 advisory. - usb: typec: displayport: Fix potential deadlock Andrei Kuchynski Orabug: 38309912 CVE-2025-38404 - i2c/designware: Fix an initialization issue...
MAL-2025-45254 Malicious code in myth-rose-mqm027-project (npm)
The package myth-rose-mqm027-project was found to contain malicious code...
Malicious code in myth-rose-mqm027-project (npm)
The package myth-rose-mqm027-project was found to contain malicious code...
rose: fix dangling neighbour pointers in rose_rt_device_down()
...
Linux Distros Unpatched Vulnerability : CVE-2023-51782
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 6.6.8. roseioctl in net/rose/afrose.c has a use- after-free because of a roseaccept race condition...
Linux Distros Unpatched Vulnerability : CVE-2025-38377
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rose: fix dangling neighbour pointers in rosertdevicedown There are two bugs in rosertdevicedown that can cause use-after-free: 1. The loop bound t-count is...
Malicious code in rose-ehpcl-0rkjr-twilight-project (npm)
The package rose-ehpcl-0rkjr-twilight-project was found to contain malicious code...
Malicious code in solace-qxoli-6mtci-rose-project (npm)
The package solace-qxoli-6mtci-rose-project was found to contain malicious code...
Malicious code in rose-opal-sya256-project (npm)
The package rose-opal-sya256-project was found to contain malicious code...
Malicious code in rose-aroma-jsi289-project (npm)
The package rose-aroma-jsi289-project was found to contain malicious code...
Malicious code in rose-koala-cxl197-project (npm)
The package rose-koala-cxl197-project was found to contain malicious code...
Malicious code in rose-elephant-ylu913-project (npm)
The package rose-elephant-ylu913-project was found to contain malicious code...
Malicious code in quail-rose-pcs068-project (npm)
The package quail-rose-pcs068-project was found to contain malicious code...