Linux nfs_local_open_fh DoS

The vulnerability of the nfslocalopenfh function in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2025-39697: Concurrent Execution using Shared Resource with Improper Synchronization

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a race when updating an existing write After nfslockandjoinrequests tests for whether the request is still attached to the mapping, nothing prevents a call to nfsinoderemoverequest from succeeding until we actually lock...

CVE-2025-39726: Concurrent Execution using Shared Resource with Improper Synchronization

In the Linux kernel, the following vulnerability has been resolved: s390/ism: fix concurrency management in ismcmd The s390x ISM device data sheet clearly states that only one request-response sequence is allowable per ISM function at any point in time. Unfortunately as of today the s390/ism driv...

SMB Server Heap Buffer Overflow DoS

The vulnerability of the smb2sesssetup function in the fs/smb/server/smb2pdu.c module of the SMB server support in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality,...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the redchange function in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Linux pnfs_update_layout DoS

The vulnerability of the pnfsupdatelayout function in the Linux operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2025-38717

In the Linux kernel, the following vulnerability has been resolved: net: kcm: Fix race condition in kcmunattach syzbot found a race condition when kcmunattachpsock and kcmreleasekcm are executed at the same time. kcmunattach is missing a check of the flag kcm-txstopped before calling queuework. I...

Qemu: denial of service via improper synchronization in qemu nbd server during socket closure

...

md: Don't register sync_thread for reshape directly

...

drm/msm/dpu: Add mutex lock in control vblank irq

...

kernel: Bluetooth: hci_core: Fix use-after-free in vhci_flush()

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Fix use-after-free in vhciflush syzbot reported use-after-free in vhciflush without repro. 0 From the splat, a thread closed a vhci file descriptor while its device was being used by iotcl on another thread...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from KCM not synchronizing the handling of detach operations...

CVE-2025-23259: Concurrent Execution using Shared Resource with Improper Synchronization

NVIDIA Mellanox DPDK contains a vulnerability in Poll Mode Driver PMD, where an attacker on a VM in the system might be able to cause information disclosure and denial of service on the network interface...

media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode()

...

gpio: pca953x: fix pca953x_irq_bus_sync_unlock race

...

DRUPAL-CONTRIB-2025-105

This module enables you to connect a Drupal site to the Acquia DAM service, which syncs media from the third party service to the site. The module doesn't sufficiently validate authorization to a list of DAM assets currently synced to the website creating an access bypass vulnerability. This...

The provided one-time code is incorrect. Check if the backup server time is correct.

Challenge When attempting to connect to the Veeam Host Management Console, after entering the MFA TOTP code, the following error occurs: The provided one-time code is incorrect. Check if the backup server time is correct. Solution There are two potential causes for time mismatch: Cause 1:...

Linux Distros Unpatched Vulnerability : CVE-2025-58066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. In versions between 1.2.0 and 1.6.1 inclusive servers which...

kernel: padata: fix UAF in padata_reorder

A use-after-free vulnerability was found in the Linux kernel's padata subsystem, in the padatareorder function. Caused by improper synchronization controls, this vulnerability can occur when a reference-counted data structure pd is decremented in one thread, freeing it, while another thread still...

kernel: Bluetooth: hci_core: Fix use-after-free in vhci_flush()

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Fix use-after-free in vhciflush syzbot reported use-after-free in vhciflush without repro. 0 From the splat, a thread closed a vhci file descriptor while its device was being used by iotcl on another thread...