CVE-2023-52774 s390/dasd: protect device queue against concurrent access

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: protect device queue against concurrent access In dasdprofilestart the amount of requests on the device queue are counted. The access to the device queue is unprotected against concurrent access. With a lot of parallel...

CVE-2023-52774: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: protect device queue against concurrent access In dasdprofilestart the amount of requests on the device queue are counted. The access to the device queue is unprotected against concurrent access. With a lot of parallel...

The vulnerability of the sco_sock_timeout() function in the Linux kernel’s Bluetooth subsystem allows a hacker to trigger a service failure.

The vulnerability of the scosocktimeout function in the net/bluetooth/sco.c module of the Linux kernel’s Bluetooth subsystem is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow a attacker to cause service...

CVE-2024-35793

In the Linux kernel, the following vulnerability has been resolved: debugfs: fix wait/cancellation handling during remove Ben Greear further reports deadlocks during concurrent debugfs remove while files are being accessed, even though the code in question now uses debugfs cancellations. Turns ou...

PT-2024-29258

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue occurs when the mcp251xfd start xmit function fails, causing the driver to stop processing messages and the interrupt routine to run indefinitely. This can happen when multiple...

The vulnerability of the `btrfs_use_block_rsv()` function in the `fs/btrfs/block-rsv.c` file of the Linux kernel’s file system allows a malicious actor to cause a service failure.

The vulnerability of the btrfsuseblockrsv function in the fs/btrfs/block-rsv.c file of the btrfs file system in the Linux kernel is related to concurrent resource access race condition. Exploiting this vulnerability could allow a attacker to cause service failures...

The vulnerability of the `bnx2x_set_fw_mac_addr()` function in the `drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h` file of the Broadcom NetXtremeII 10Gb driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the bnx2xsetfwmacaddr function in the drivers/net/ethernet/broadcom/bnx2x/bnx2xcmn.h file of the Broadcom NetXtremeII 10Gb driver for the Linux operating system is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this...

The vulnerability of the __i915_vma_active() function in the drivers/gpu/drm/i915/i915_vma.c file of the Intel graphics adapter driver for Linux-based systems can be exploited by attackers to cause service interruptions.

The vulnerability of the i915vmaactive function in the drivers/gpu/drm/i915/i915vma.c file of the Intel 8xx/9xx/G3x/G4x/HD graphics controller driver for the Linux operating system is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this...

The vulnerability of the free_swap_and_cache() function in the mm/swapfile.c module of the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.

The vulnerability of the freeswapandcache function in the mm/swapfile.c file, a memory management subsystem of the Linux kernel, is related to concurrent access to resources. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the pmic_glink_altmode_probe() function in the driver drivers/soc/qcom/pmic_glink_altmode.c of the Qualcomm PMIC GLINK kernel for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the pmicglinkaltmodeprobe function in the driver drivers/soc/qcom/pmicglinkaltmode.c of the Qualcomm PMIC GLINK driver for the Linux operating system is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability...

The vulnerability of the binder_alloc_free_page() function in the drivers/android/binder_alloc.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the binderallocfreepage function in the drivers/android/binderalloc.c driver of the Linux operating system’s drivers/android/binder kernel is related to the use of memory after it is freed due to concurrent access to resources race condition. Exploiting this vulnerability cou...

The vulnerabilities of the functions pdsc_process_adminq() and pdsc_adminq_isr() in the driver drivers.net/ethernet/amd/pds_core/adminq.c of the AMD network adapter driver for the Linux operating system allow a attacker to cause a service failure.

The vulnerability of the functions pdscprocessadminq and pdscadminqisr in the drivers/net/ethernet/amd/pdscore/adminq.c file of the AMD network adapter driver for the Linux operating system is related to the swapping of a zero pointer due to concurrent access to resources. Exploiting this...

AZL-42214 CVE-2024-27019 affecting package kernel for versions less than 5.15.158.1-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: Fix potential data-race in nftobjtypeget nftunregisterobj can concurrent with nftobjtypeget, and there is not any protection when iterate over nftablesobjects list in nftobjtypeget. Therefore, there is...

kernel: iommufd: IOMMUFD_DESTROY should not increase the refcount

A race condition was identified in the iommufd subsystem of the Linux kernel where the IOMMUFDDESTROY command incorrectly increments an object’s reference count without holding the expected exclusive synchronization destroyrwsem. This violates the assumption that temporary reference count...

DEBIAN-CVE-2024-26731

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix NULL pointer dereference in skpsockverdictdataready syzbot reported the following NULL pointer dereference issue 1: BUG: kernel NULL pointer dereference, address: 0000000000000000 ... RIP: 0010:0x0 ... Call Trac...

AMD CPU Competitive Conditions Vulnerability

AMD CPUs are a family of CPUs from AMD. The AMD CPUs suffer from a competitive condition vulnerability that arises from improper handling of concurrent access when concurrent code requires mutually exclusive access to shared resources during operation of a networked system or product. An attacker...

Apache Answer Competitive Conditions Issue Vulnerability

Apache Answer is a community platform of the Apache USA Foundation. Apache Answer 1.2.1 and prior versions suffer from a Competing Conditions vulnerability, which arises from improper handling of concurrent access when concurrent code requires mutually exclusive access to shared resources during...

SUSE CVE-2024-26623

In the Linux kernel, the following vulnerability has been resolved: pdscore: Prevent race issues involving the adminq There are multiple paths that can result in using the pdsc's adminq. 1 pdscadminqisr and the resulting work from queuework, i.e. pdscworkthread-pdscprocessadminq 2 pdscadminqpost...

Apache Answer 竞争条件问题漏洞

Apache Answer is a community platform of the Apache USA Foundation. Apache Answer 1.2.1 and prior versions suffer from a Competing Conditions vulnerability, which arises from improper handling of concurrent access when concurrent code requires mutually exclusive access to shared resources during...

The vulnerability of the amdgpu_cs_wait_all_fences() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c driver for AMD Radeon graphics cards in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the amdgpucswaitallfences function in the drivers/gpu/drm/amd/amdgpu/amdgpucs.c driver for AMD Radeon graphics cards in the Linux operating system is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability...