Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: virtioring: Fixed a data race by marking eventtriggered as “racy” for KCSAN. The syzbot reported a data race when accessing eventTriggered. Here is the simplified stack when the issue occurred:...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

A flaw was discovered in vringhkiovadvance in drivers/vhost/vringh.c, located in the host side of a virtio ring within the Linux Kernel. This issue may lead to a denial of service from the guest to the host through zero-length descriptors...

The vulnerability of the virtqueue_add_indirect_packed() function in the drivers/virtio/virtio_ring.c module, which supports the virtio bus in Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the virtqueueaddindirectpacked function in the drivers/virtio/virtioring.c module, which supports the virtio bus in Linux kernel, is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20260205-73-0018

A vulnerability in the virtqueueenablecbdelayed function of the drivers/virtio/virtioring.c module of the Linux operating systems kernel is related to race condition. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38048)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38048 advisory. - In the Linux kernel, the following vulnerability has been resolved: virtioring: Fix data race by tagging...

EUVD-2023-57496

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2023-5158

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in vringhkiovadvance in drivers/vhost/vringh.c in the host side of a virtio ring in the Linux Kernel. This issue may result in a denial of...

virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN

...

The vulnerability of the virtqueue_enable_cb_delayed() function in the drivers/virtio/virtio_ring.c module of Linux kernel allows a attacker to cause a service failure.

The vulnerability of the virtqueueenablecbdelayed function in the drivers/virtio/virtioring.c kernel module of Linux operating systems is related to the race condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: schhfsc: Fix qlen accounting bug when using peek in hfscenqueue CVE-2025-38000 In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing rcu read protection for procfs content...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: btrfs: check folio mapping after unlock in relocateonefolio CVE-2024-56758 In the Linux kernel, the following vulnerability has been resolved: hrtimers: Force migrate away hrtimers queued after CPUHPAPHRTIMERSDYIN...

SUSE CVE-2025-38048

In the Linux kernel, the following vulnerability has been resolved: virtioring: Fix data race by tagging eventtriggered as racy for KCSAN syzbot reports a data-race when accessing the eventtriggered, here is the simplified stack when the issue occurred:...

DEBIAN-CVE-2025-38048

In the Linux kernel, the following vulnerability has been resolved: virtioring: Fix data race by tagging eventtriggered as racy for KCSAN syzbot reports a data-race when accessing the eventtriggered, here is the simplified stack when the issue occurred:...

UBUNTU-CVE-2025-38048

In the Linux kernel, the following vulnerability has been resolved: virtioring: Fix data race by tagging eventtriggered as racy for KCSAN syzbot reports a data-race when accessing the eventtriggered, here is the simplified stack when the issue occurred:...

CVE-2025-38048

In the Linux kernel, the following vulnerability has been resolved: virtioring: Fix data race by tagging eventtriggered as racy for KCSAN syzbot reports a data-race when accessing the eventtriggered, here is the simplified stack when the issue occurred:...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the presence of data contention in eventtriggered in virtioring...

PT-2025-25823

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data-race issue has been identified in the Linux kernel, specifically in the virtio ring component. The issue occurs when accessing the event triggered variable, which can lead to a ra...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from a logic error in the code in vringinit in external/headers/include/virtio/virtioring.h, where an out-of-bounds write may exist...

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from an integer overflow vulnerability that originates from an integer overflow in vringsize in external/headers/include/virtio/virtioring.h, which can be exploited by an attacker to cause an out-of-bounds...

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-6549-5)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6549-5 advisory. It was discovered that the USB subsystem in the Linux kernel contained a race condition while handling device descriptors in certain situations, leading ...