28 matches found
CVE-2026-5774 Juju API Server Denial of Service and Authentication Replay via Unsynchronized Token Map
Improper synchronization of the userTokens map in the API server in Canonical Juju 4.0.5, 3.6.20, and 2.9.56 may allow an authenticated user to possibly cause a denial of service on the server or possibly reuse a single-use discharge token...
Linux DMA Driver Heap Buffer Overflow DoS
The vulnerability of the xdmachannelisr function in the drivers/dma/xilinx/xdma.c file of the Linux kernel’s DMA driver support module is related to the lack of synchronization. Exploiting this vulnerability could allow an attacker to cause a system failure...
Linux kernel Temperature Management Buffer Overflow DoS
The vulnerability of the tzeseqstart function in the drivers/thermal/thermal Debugfs.c module of the Linux kernel’s temperature control driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
Atheros Wireless Driver Heap Buffer Overflow DoS
The vulnerability of the ath11kmacopsetbitratemask function in the drivers/net/wireless/ath/ath11k/mac.c module of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a servi...
imx95-blk-ctl Kernel DoS
The vulnerability of the imx95-blk-ctl component in the Linux operating system’s kernel is related to the lack of synchronization. Exploiting this vulnerability allows an attacker to cause a service failure...
EUVD-2025-27305
Malicious code in bioql PyPI...
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
Intel microprogramming software Disclosure
The vulnerability of Intel microprogramming software is related to synchronization errors in the control logic. Exploiting this vulnerability can allow an attacker to disclose protected information...
Undertow parseProxyProtocolV1() function Privilege Escalation
The vulnerability of the parseProxyProtocolV1 function in the ProxyProtocolReadListener class of the Undertow web server is related to the synchronization of requests and responses when processing the StringBuilder parameter. Exploiting this vulnerability can allow a remote attacker to gain...
Design/Logic Flaw
An issue exists in SoftIron HyperCloud where drive caddy removal and reinsertion without a reboot may erroneously cause the system to recognize the caddy as new media and wipe all data on the drives due to a missing synchronization flaw, which impacts data availability and integrity. This issue...
CVE-2023-45084
SoftIron HyperCloud CVE-2023-45084 affects density storage nodes running HyperCloud 1.0–pre-2.0.3. A missing synchronization flaw allows removing and reinserting a drive caddy without reboot to cause the system to treat the caddy as new media, wiping all data on the drives. Impact: data availabil...
CVE-2023-45084 Media caddy removal and reinsertion without reboot may cause data loss
An issue exists in SoftIron HyperCloud where drive caddy removal and reinsertion without a reboot may erroneously cause the system to recognize the caddy as new media and wipe all data on the drives due to a missing synchronization flaw, which impacts data availability and integrity. This issue...
CVE-2023-45084 Media caddy removal and reinsertion without reboot may cause data loss
An issue exists in SoftIron HyperCloud where drive caddy removal and reinsertion without a reboot may erroneously cause the system to recognize the caddy as new media and wipe all data on the drives due to a missing synchronization flaw, which impacts data availability and integrity. This issue...
PT-2023-29401
Name of the Vulnerable Software and Affected Versions SoftIron HyperCloud versions 1.0 through 2.0.2 Description An issue exists in SoftIron HyperCloud where drive caddy removal and reinsertion without a reboot may erroneously cause the system to recognize the caddy as new media and wipe all data...
kernel: Linux kernel KVM: Denial of Service due to incorrect kvm_arm_init failure handling in finalize_pkvm
A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for arm64 architectures. This vulnerability arises from a lack of synchronization between the finalizepkvm and kvmarminit initialization calls. A local attacker with low privileges could exploit this by triggering a scenario...
Linux DVB Kernel Heap Buffer Overflow DoS
The vulnerability of the function dvbfrontendtestevent in the driver drivers/media/dvb-core/dvbfrontend.c of the Linux operating system’s DVB kernel is related to incorrect use of synchronization mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...
macOS iOS iPadOS Race Conditions File Read
The vulnerability of operating systems macOS, iOS, and iPadOS is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability allows an attacker to read arbitrary files...
PT-2022-5375 · Apache +2 · Apache Tomcat +2
Name of the Vulnerable Software and Affected Versions: Apache Tomcat affected versions not specified Pandora FMS version 7.65 Description: The issue concerns errors in synchronization when using a shared resource in Apache Tomcat, potentially allowing a remote attacker to gain unauthorized access...
OverlayFS DoS
The vulnerability of the OverlayFS subsystem in Linux operating systems is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...
October CMS fromData Code Execution
The vulnerability of the fromData method implementation in October CMS is related to the use of a shared resource with incorrect synchronization. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...