CVE-2025-37759 ublk: fix handling recovery & reissue in ublk_abort_queue()

In the Linux kernel, the following vulnerability has been resolved: ublk: fix handling recovery & reissue in ublkabortqueue Commit 8284066946e6 "ublk: grab request reference when the request is handled by userspace" doesn't grab request reference in case of recovery reissue. Then the request can ...

PT-2025-18440

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version containing commit 8284066946e6 Description A null pointer dereference issue has been identified in the Linux kernel's ublk driver, specifically in the handling of recovery and reissue in ublk abort...

PT-2025-20357

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition can occur between the MCQ completion path and the abort handler in the Linux kernel. Once a request completes, blk mq free request sets rq-mq hctx to NULL, meaning the...

CVE-2025-30080

Signalling in Pexip Infinity 29 through 36.2 before 37.0 has improper input validation that allows remote attackers to trigger a temporary denial of service software abort...

CVE-2025-30080

Signalling in Pexip Infinity 29 through 36.2 before 37.0 has improper input validation that allows remote attackers to trigger a temporary denial of service software abort...

CVE-2024-37917

The video conferencing cloud collaboration platform Pexip Infinity versions prior to 35.0 are vulnerable to a denial of service (software abort) . The root cause is improper input validation that allows a remote attacker to trigger the crash via a crafted signalling message . To resolve this issu...

CVE-2025-30080: Improper Input Validation

Signalling in Pexip Infinity 29 through 36.2 before 37.0 has improper input validation that allows remote attackers to trigger a temporary denial of service software abort...

SUSE CVE-2022-49761

In the Linux kernel, the following vulnerability has been resolved: btrfs: always report error in runonedelayedref Currently we have a btrfsdebug for runonedelayedref failure, but if end users hit such problem, there will be no chance that btrfsdebug is enabled. This can lead to very little usefu...

PT-2025-13600

Summary In a TUF repository, the targets role’s signature indicates which target files are trusted by clients. The role can delegate full or partial trust to other roles, meaning that that role is trusted to sign target file metadata. Delegated roles can further delegate trust to other delegated...

DEBIAN-CVE-2022-49761

In the Linux kernel, the following vulnerability has been resolved: btrfs: always report error in runonedelayedref Currently we have a btrfsdebug for runonedelayedref failure, but if end users hit such problem, there will be no chance that btrfsdebug is enabled. This can lead to very little usefu...

UBUNTU-CVE-2022-49761

In the Linux kernel, the following vulnerability has been resolved: btrfs: always report error in runonedelayedref Currently we have a btrfsdebug for runonedelayedref failure, but if end users hit such problem, there will be no chance that btrfsdebug is enabled. This can lead to very little usefu...

CVE-2022-49761

The Linux kernel contains a vulnerability in the btrfs filesystem component within the run_one_delayed_ref() function. The root cause involves a use-after-free condition where a @node could be freed by the caller while still being accessed for error reporting. To resolve this, the patch moves err...

PT-2025-29066

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.12.0-rc4-next-20170608+ and earlier Description: The Linux kernel contains an ACPICA cache leak in ACPI early abort cases. Specifically, the “Acpi-Parse” and “Acpi-parse ext” caches were found to be leaked due to the u...

Linux Kernel ufshcd_abort_one() DoS

The vulnerability of the ufshcdabortone function in the drivers/ufs/core/ufshcd.c file of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel abort() Buffer Overflow DoS

The vulnerability of the abort function in the Documentation/virt/kvm/api.rst of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Updated man2html packages fix security vulnerability

In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the heap. This at least causes the program to segmentation abort if the heap size parameter isn't aligned correctly. In versions before GLIBC version 2.29 and if aligned correctly, ...

Linux kernel rxrpc_abort_conn function DoS

The vulnerability of the functions rxrpcabortconn and rxrpcabortcalls net/rxrpc/connevent.c in Linux kernel systems is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to trigger a service failure...

SUSE CVE-2024-58053

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix handling of received connection abort Fix the handling of a connection abort that we've received. Though the abort is at the connection level, it needs propagating to the calls on that connection. Whilst the propagatio...

DEBIAN-CVE-2024-58053

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix handling of received connection abort Fix the handling of a connection abort that we've received. Though the abort is at the connection level, it needs propagating to the calls on that connection. Whilst the propagatio...

CVE-2024-58053

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix handling of received connection abort Fix the handling of a connection abort that we've received. Though the abort is at the connection level, it needs propagating to the calls on that connection. Whilst the propagatio...