The vulnerability of the npm library for web development with LibJS in the Ladybird web browser allows a hacker to execute arbitrary code.

The vulnerability of the npm library for web development, LibJS, in the Ladybird web browser, is related to synchronization errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created JS file...

PT-2026-69660

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the drm gpuvm code, the find operation is not protected against the map operation. This lack of synchronization can lead to a NULL pointer dereference when a find operation is in...

dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning

...

CVE-2026-9030: Concurrent Execution using Shared Resource with Improper Synchronization

A denial-of-service vulnerability exists in httpd service on Archer A6 v4 where the asynchronous systool instruction handlng path in httpd does not properly synchronize or safely manage concurrent systool operations. By sending crafted systool instructions through the asynchronous request path,...

SUSE CVE-2026-64590

In the Linux kernel, the following vulnerability has been resolved: dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning When CONFIGDMAAPIDEBUGSG is enabled, importing a udmabuf into a DRM driver e.g. amdgpu for video playback in GNOME Videos / Showtime triggers a spurious...

Malicious code in @ch4acko3/frontal-lobe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b73f6f94b2fcc3ef2aabd490862d743e9722f891d2c41421b1352dc318294585 The package hardcodes the endpoint http://47.112.15.137:8789/frontal/trace-sync bare IPv4, plain HTTP in...

CVE-2026-53983 Ground Station prior to 0.6.0 Unauthenticated Persistent Blind Server-Side Request Forgery via Orbital Data Source URL

Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery vulnerability in the orbital-source configuration path that allows any unauthenticated Socket.IO client to cause the ground-station process to issue outbound HTTP requests to attacker-chosen destinations...

CVE-2026-64590

In the Linux kernel, the following vulnerability has been resolved: dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning When CONFIGDMAAPIDEBUGSG is enabled, importing a udmabuf into a DRM driver e.g. amdgpu for video playback in GNOME Videos / Showtime triggers a spurious...

CVE-2026-64590

In the Linux kernel, the following vulnerability has been resolved: dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning When CONFIGDMAAPIDEBUGSG is enabled, importing a udmabuf into a DRM driver e.g. amdgpu for video playback in GNOME Videos / Showtime triggers a spurious...

CVE-2026-64590

In the Linux kernel, the following vulnerability has been resolved: dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning When CONFIGDMAAPIDEBUGSG is enabled, importing a udmabuf into a DRM driver e.g. amdgpu for video playback in GNOME Videos / Showtime triggers a spurious...

CVE-2026-64590 dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning

In the Linux kernel, the following vulnerability has been resolved: dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning When CONFIGDMAAPIDEBUGSG is enabled, importing a udmabuf into a DRM driver e.g. amdgpu for video playback in GNOME Videos / Showtime triggers a spurious...

CVE-2026-64584

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: cancel pending IN work before freeing the midi object The fmidi driver embeds a work item midi-work whose handler, fmidiinwork, dereferences the enclosing struct fmidi through containerof. This work is armed...

CVE-2026-64584

Summary (CVE-2026-64584): Linux kernel usb gadget f_midi vulnerability. The f_midi driver’s work item (midi->work) can be dereferenced after the midi object is freed because cancellation is not performed by f_midi_disable()/f_midi_unbind(), allowing a use-after-free if a concurrent userspace w...

The vulnerability of the pci_slot_trylock() function in the drivers/pci/pci.c file of the Linux operating system’s PCI device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pcislottrylock function in the drivers/pci/pci.c file of the Linux system’s PCI device driver module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the __get_sregs2() function in the arch/x86/kvm/x86.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the getsregs2 function in the arch/x86/kvm/x86.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the...

ROS-20260805-73-0002

The vulnerability of the f2fsremount function in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge relates to the simultaneous execution using a shared resource with improper synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260804-73-0042

The vulnerability of the xskgenericrcv function in the net/xdp/xsk.c module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of...

ROS-20260804-73-0010

The vulnerability of the inode.c component in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

ROS-20260804-73-0032

The vulnerability of the padatareorder function in the kernel/padata.c module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...