Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: cdx: A possible UAF Uninitialized Address Fault error in driveroverrideshow has been fixed. A potential UAF issue in the driveroverrideshow function in drivers/cdx/cdx.c has been addressed. The driveroverrideshow function is...

FreeScout Security Bypass Vulnerability (CNVD-2025-20784)

FreeScout is an ultra-lightweight free open source helpdesk and shared inbox built using PHP Laravel framework by FreeScout. FreeScout suffers from a security bypass vulnerability, which is due to a competitive conditions flaw. An attacker could exploit the vulnerability to perform concurrent...

FreeScout 竞争条件问题漏洞

FreeScout is an ultra-lightweight free open source helpdesk and shared inbox built using PHP Laravel framework by FreeScout. FreeScout suffers from a security bypass vulnerability, which is due to a competitive conditions flaw. An attacker could exploit the vulnerability to perform concurrent...

CVE-2025-37958

CVE-2025-37958 affects the Linux kernel THP path. The issue arises when migrating a THP: concurrent access to the PMD migration entry during a deferred split scan could dereference an invalid address. The fix adds a check of the PMD migration entry and returns early, since the PMD migration entry...

kernel: fs/netfs/fscache_cookie: add missing "n_accesses" check

A race condition vulnerability was found in the Linux kernel. A race condition in the fscachecookie subsystem leads to a NULL pointer dereference. The issue occurred when multiple processes accessed a cached file while it was being withdrawn, causing the cache's metadata to clear prematurely...

CVE-2024-45562

Memory corruption during concurrent access to server info object due to unprotected critical field...

CVE-2024-45564

Memory corruption during concurrent access to server info object due to incorrect reference count update...

PT-2025-20329

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential NULL pointer dereference in the dev uevent function has been resolved. This issue occurs when userspace reads the "uevent" device attribute at the same time as another thread...

CVE-2024-45564

Memory corruption during concurrent access to server info object due to incorrect reference count update...

CVE-2024-45562

Memory corruption during concurrent access to server info object due to unprotected critical field...

CVE-2024-45564

Memory corruption during concurrent access to server info object due to incorrect reference count update...

CVE-2024-45562 Use After Free in HLOS

Memory corruption during concurrent access to server info object due to unprotected critical field...

CVE-2024-45562 Use After Free in HLOS

Memory corruption during concurrent access to server info object due to unprotected critical field...

CVE-2024-45562

CVE-2024-45562 describes memory corruption during concurrent access to a server info object caused by an unprotected critical field. Sources (NVD, Red Hat, CVE List, CNNVD, VulnEnrichment) confirm the issue and its consistency across feeds. CVSS v3.1 base scores indicate high impact for confident...

Qualcomm Chipsets 资源管理错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A resource management error vulnerability exists in Qualcomm Chipsets that stems from an unprotected server information object key field, which could lead to memory corruption during concurrent access...

DEBIAN-CVE-2022-49930

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix NULL pointer problem in freemrinit Lock grab occurs in a concurrent scenario, resulting in stepping on a NULL pointer. It should be init mutexinit first before use the lock. Unable to handle kernel NULL pointer...

SUSE CVE-2025-22060

In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: Prevent parser TCAM memory corruption Protect the parser TCAM/SRAM memory, and the cached shadow SRAM information, from concurrent modifications. Both the TCAM and SRAM tables are indirectly accessed by configuring an...

UBUNTU-CVE-2025-21915

In the Linux kernel, the following vulnerability has been resolved: cdx: Fix possible UAF error in driveroverrideshow Fixed a possible UAF problem in driveroverrideshow in drivers/cdx/cdx.c This function driveroverrideshow is part of DEVICEATTRRW, which includes both driveroverrideshow and...

kernel: memcg: protect concurrent access to mem_cgroup_idr

memcg in linux kernel permit concurrent access to memcgroupidr which can lead to kernel crashes...

CVE-2025-21424

Memory corruption while calling the NPU driver APIs concurrently...