Linux Distros Unpatched Vulnerability : CVE-2021-47281

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: seq: Fix race of sndseqtimeropen The timer instance per queue is exclusive, and sndseqtimeropen should have managed the concurrent accesses. It looks as i...

CVE-2022-49632

A flaw was found in the Linux kernel's ICMP protocol. A race condition can occur when reading the sysctlicmperrorsuseinboundifaddr resource due to a missing lock, potentially impacting system stability and resulting in a denial of service. Mitigation Mitigation for this issue is either not...

DEBIAN-CVE-2022-49639

In the Linux kernel, the following vulnerability has been resolved: cipso: Fix data-races around sysctl. While reading cipso sysctl variables, they can be changed concurrently. So, we need to add READONCE to avoid data-races...

CVE-2022-49600 ip: Fix a data-race around sysctl_ip_autobind_reuse.

In the Linux kernel, the following vulnerability has been resolved: ip: Fix a data-race around sysctlipautobindreuse. While reading sysctlipautobindreuse, it can be changed concurrently. Thus, we need to add READONCE to its reader...

CVE-2022-49059

The CVE-2022-49059 issue is a Linux kernel vulnerability in NFC/NCI where a race between a delayed mechanism (timer) and a workqueue can lead to a use-after-free when detaching an NCI device. The fix added flush_workqueue to prevent this UAF by ensuring the timer/workqueue lifecycle cannot race w...

CVE-2021-47632

CVE-2021-47632 affects the Linux kernel on PowerPC where a spin_lock in change_page_attr() for set_memory caused spinlock recursion. The fix removes the read/modify/write sequence and the spin_lock(), and uses atomic handling of page-flag sets (_PAGE_KERNEL_RO/ROX/RW/RWX) by comparing flag sets t...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly handling concurrent accesses to sysctltcpthinlineartimeouts, which could lead to data contentio...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from concurrent accesses to sysctltcprecovery not being handled correctly, which could lead to data contention...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly handling concurrent accesses to sysctltcpearlyretrans, which could lead to data contention...

OESA-2025-1113 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: pinmux: Use sequential access to access desc-pinmux data When two client of the same gpio call pinctrlselectstate for the same functionality, we are seeing NULL...

The vulnerability in macOS operating systems, related to concurrent access to resources (race condition), allows a perpetrator to disclose protected information.

The vulnerability of macOS operating systems is related to competitive access to resources a state of competition. Exploiting this vulnerability can allow a perpetrator to disclose protected information...

CVE-2024-33060

Memory corruption when two threads try to map and unmap a single node simultaneously...

The vulnerability in the Firefox web browser and the Thunderbird email client arises from the simultaneous execution using a shared resource with incorrect synchronization, allowing an attacker to cause a service failure.

The vulnerability in the Firefox web browser and the Thunderbird email client is related to the simultaneous execution of processes using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...

SUSE CVE-2024-47141

In the Linux kernel, the following vulnerability has been resolved: pinmux: Use sequential access to access desc-pinmux data When two client of the same gpio call pinctrlselectstate for the same functionality, we are seeing NULL pointer issue while accessing desc-muxowner. Let's say two processes...

AZL-56143 CVE-2024-47141 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved: pinmux: Use sequential access to access desc-pinmux data When two client of the same gpio call pinctrlselectstate for the same functionality, we are seeing NULL pointer issue while accessing desc-muxowner. Let's say two processes...

DEBIAN-CVE-2024-47141

In the Linux kernel, the following vulnerability has been resolved: pinmux: Use sequential access to access desc-pinmux data When two client of the same gpio call pinctrlselectstate for the same functionality, we are seeing NULL pointer issue while accessing desc-muxowner. Let's say two processes...

CVE-2024-56779

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfs4openowner leak when concurrent nfsd4open occur The action force umountumount -f will attempt to kill all rpctask even umount operation may ultimately fail if some files remain open. Consequently, if an action attemp...

SUSE CVE-2024-56670

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: userial: Fix the issue that gsstartio crashed due to accessing null pointer Considering that in some extreme cases, when userial driver is accessed by multiple threads, Thread A is executing the open operation and...

The vulnerability of the pci_bridge_wait_for_secondary_bus() function in the Linux operating system’s PCI bus driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pcibridgewaitforsecondarybus function in the drivers/pci/pci.c file of the Linux kernel’s PCI bus driver is related to the reutilization of previously freed memory due to concurrent access to resources race condition. Exploiting this vulnerability could allow an attacker ...

The vulnerability of the bprm_fill_uid() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bprmfilluid function in the fs/exec.c module of the Linux operating system is related to insufficient access control due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...