454 matches found
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to call sysfbdisable before removing a PCI device, which could result in multiple drivers accessin...
CVE-2025-55226
Concurrent execution using shared resource with improper synchronization 'race condition' in Graphics Kernel allows an authorized attacker to execute code locally...
iio: light: opt3001: fix deadlock due to concurrent flag access
...
DEBIAN-CVE-2025-38539
In the Linux kernel, the following vulnerability has been resolved: tracing: Add downwritetraceeventsem when adding trace event When a module is loaded, it adds trace events defined by the module. It may also need to modify the modules trace printk formats to replace enum names with their values...
CVE-2025-38505
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: discard erroneous disassoc frames on STA interface When operating in concurrent STA/AP mode with host MLME enabled, the firmware incorrectly sends disassociation frames to the STA interface when clients disconnect...
Linux Distros Unpatched Vulnerability : CVE-2023-52774
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/dasd: protect device queue against concurrent access In dasdprofilestart the amount of requests on the device queue are counted. The access to the device...
The vulnerability of the `net_sched` component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the netsched component in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability allows an attacker to cause service failures...
kernel: mm/huge_memory: fix dereferencing invalid pmd migration entry
In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: fix dereferencing invalid pmd migration entry When migrating a THP, concurrent access to the PMD migration entry during a deferred split scan can lead to an invalid address access, as illustrated below. To prevent...
PT-2025-34394
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A race condition in the pinmux functionality can lead to a NULL pointer dereference. This occurs due to improper handling of mux usecount and mux owner updates when multiple processes...
The vulnerabilities in the components cdev.c, debugfs.c, device.c, idxd.h, init.c, and irq.c of the Linux operating system’s kernel allow a hacker to cause a service failure.
The vulnerability in the components cdev.c, debugfs.c, device.c, idxd.h, init.c, and irq.c of the Linux operating system is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...
AZL-70630 CVE-2025-38117 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Protect mgmtpending list with its own lock This uses a mutex to protect from concurrent access of mgmtpending list which can cause crashes like: ==================================================================...
CVE-2025-38117
Summary: CVE-2025-38117 affects the Linux kernel Bluetooth MGMT path, specifically the mgmt_pending list. The root cause is a concurrency issue where the list access could lead to a slab-use-after-free in hci_sock_get_channel, triggering a crash under KASAN reports. The vulnerability is mitigated...
The vulnerability in the driver/nvme/host/tcp.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the drivers/nvme/host/tcp.c component of the Linux kernel lies in the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...
CVE-2025-38085 mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugepmdunshare vs GUP-fast race hugepmdunshare drops a reference on a page table that may have previously been shared across processes, potentially turning it into a normal page table used in another process in...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: cdx: A possible UAF error in driveroverrideshow has been fixed. A potential UAF issue in driveroverrideshow in drivers/cdx/cdx.c has been addressed. The function driveroverrideshow is part of DEVICEATTRRW, which includes both...
FreeScout Security Bypass Vulnerability (CNVD-2025-20784)
FreeScout is an ultra-lightweight free open source helpdesk and shared inbox built using PHP Laravel framework by FreeScout. FreeScout suffers from a security bypass vulnerability, which is due to a competitive conditions flaw. An attacker could exploit the vulnerability to perform concurrent...
FreeScout 竞争条件问题漏洞
FreeScout is an ultra-lightweight free open source helpdesk and shared inbox built using PHP Laravel framework by FreeScout. FreeScout suffers from a security bypass vulnerability, which is due to a competitive conditions flaw. An attacker could exploit the vulnerability to perform concurrent...
CVE-2025-37958
CVE-2025-37958 affects the Linux kernel THP path. The issue arises when migrating a THP: concurrent access to the PMD migration entry during a deferred split scan could dereference an invalid address. The fix adds a check of the PMD migration entry and returns early, since the PMD migration entry...
kernel: fs/netfs/fscache_cookie: add missing "n_accesses" check
A race condition vulnerability was found in the Linux kernel. A race condition in the fscachecookie subsystem leads to a NULL pointer dereference. The issue occurred when multiple processes accessed a cached file while it was being withdrawn, causing the cache's metadata to clear prematurely...
