aoeblk_gdalloc Heap Buffer Overflow DoS

Vulnerability of the aoeblkgdalloc function in the drivers/block/aoe/aoeblk.c module – The Linux kernel’s block device support driver is vulnerable to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux net/core/sock.c sk_setsockopt() Buffer Overflow DoS

The vulnerability of the sksetsockopt function in the net/core/sock.c module related to Linux kernel network functions is associated with synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

dpll_nl_pin_get_dumpit Heap Buffer Overflow DoS

Vulnerability of the dpllnlpingetdumpit function in the drivers/dpll/dpllnetlink.c module – The DPLL driver support in Linux kernels is vulnerable to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to cause service failures...

Linux ARM64 KVM Heap Buffer Overflow DoS

The vulnerability of the kvmhypreserve function in the arch/arm64/kvm/pkvm.c module of the virtualization subsystem on the ARM 64-bit kernel of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause...

Windows Local Security Authority Privilege Escalation

The vulnerability of the Local Security Authority LSA service in the Windows operating system is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

Linux fs/quota/dquot.c DoS

The vulnerability in the fs/quota/dquot.c component of the Linux operating system is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the eventsbase.c component in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

WireGuard Receive Component DoS

The vulnerability of the wireguard/receive.c component in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-26649

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Secure Channel allows an authorized attacker to elevate privileges locally...

CVE-2025-27492

CVE-2025-27492 arises from a race condition in Windows Secure Channel (Schannel) due to improper synchronization on a shared resource, enabling a locally authenticated attacker to elevate privileges. The entry is supported by multiple sources noting a Windows Privilege Elevation vulnerability and...

CVE-2025-22014

CVE-2025-22014 relates to the Linux kernel, specifically the QCOM SoC PDR path. The issue is a potential deadlock between processes when a client adds a service lookup (pdr_add_lookup) and a server locator update (pdr_locator_new_server), which can cause the response to queue on the same workqueu...

CVE-2025-22009 regulator: dummy: force synchronous probing

In the Linux kernel, the following vulnerability has been resolved: regulator: dummy: force synchronous probing Sometimes I get a NULL pointer dereference at boot time in kobjectget with the following call stack: anatopregulatorprobe devmregulatorregister regulatorregister regulatorresolvesupply...

Windows Secure Channel Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Secure Channel allows an authorized attacker to elevate privileges locally...

CVE-2024-58131

FISCO BCOS 3.11.0 has an issue with synchronization of the transaction pool that can, for example, be observed when a malicious node that has modified the codebase to allow a large minsealtime value joins a blockchain network...

Linux Heap Buffer Overflow DoS

The vulnerability of the sectionnrtopfn function in the include/linux/mmzone.h module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

rkisp1_csi_disable Heap Buffer Overflow DoS

Vulnerability of the rkisp1csidisable function in the drivers/media/platform/rockchip/rkisp1/rkisp1-csi.c module – The Linux kernel’s multimedia device support driver is vulnerable to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to caus...

Synology Drive Server Unauthorized Access

The vulnerability of the webapi component of the cloud software for file storage, synchronization, and sharing with Synology Drive Server is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthoriz...

rt2x00lib_disable_radio DoS

Vulnerability of the function rt2x00libdisableradio in the module drivers/net/wireless/ralink/rt2x00/rt2x00dev.c – The driver for supporting Ralink wireless adapters in the Linux kernel is vulnerable to synchronization errors when using shared resources. Exploiting this vulnerability could allow ...

Incorrect Synchronization

Overview Affected versions of this package are vulnerable to Incorrect Synchronization in the checkCertId function, when processing multiple concurrent updates to a node's configuration, which can cause a panic. Remediation Upgrade chainmaker.org/chainmaker/net-libp2p/libp2pnet to version 1.2.7 o...

CVE-2024-58131

FISCO BCOS 3.11.0 has an issue with synchronization of the transaction pool that can, for example, be observed when a malicious node that has modified the codebase to allow a large minsealtime value joins a blockchain network...