CVE-2025-68961

Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-68955

Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-68969

CVE-2025-68969 affects Huawei HarmonyOS (versions 6.0.0, 5.1.0, 5.0.1) with a multi-thread race condition in the thermal management module. Impact from exploitation is availability-related. Root cause: race condition in the thermal management subsystem; public references describe the issue in Har...

CVE-2025-68962

CVE-2025-68962 affects Huawei HarmonyOS Camera Framework module, where a multi-thread race condition can impact availability. Public documentation consistently describes this vulnerability in the camera framework, with Huawei-specific reference to HarmonyOS 5.0.1 noted by CNNVD. Root cause: race ...

CVE-2025-68962

Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-68962

Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-68961

This CVE refers to a multi-thread race condition in Huawei HarmonyOS's camera framework module. The vulnerability affects the camera framework component and is described as a multi-thread contention issue that can impact availability. The public materials do not specify exact affected versions, r...

CVE-2025-68961

Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-68958

CVE-2025-68958 is described across connected sources as a multi-thread race condition in the card framework module, with potential impact to availability. Affected platforms include Huawei HarmonyOS (per CNNVD and Huawei bulletins) and related ecosystem entries. The CVSS vectors vary: NVD lists C...

CVE-2025-68957

Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-68957

CVE-2025-68957 is a multi-thread race condition in Huawei HarmonyOS’s Card Framework module. Affected component: Card Framework; affected product/version: HarmonyOS (notably v6.0.0 per CNNVD). Impact: availability can be affected if exploited. Exploitability indicators from sources include local ...

CVE-2025-68956

CVE-2025-68956 corresponds to a multi-thread race condition in the Card Framework module of Huawei HarmonyOS. Multiple connected sources (Red Hat, CIRCL, CNNVD, CVE databases, PT-Security) describe a vulnerability that could affect system availability. The Huawei/NVD entries indicate a local atta...

kernel: libceph: fix potential use-after-free in have_mon_and_osd_map()

A use-after-free vulnerability was found in the Ceph client session initialization in the Linux kernel. The havemonandosdmap function checks map epochs without holding the appropriate locks, racing with concurrent map updates that free the old map. This can result in dereferencing freed memory...

kernel: libceph: fix potential use-after-free in have_mon_and_osd_map()

A use-after-free vulnerability was found in the Ceph client session initialization in the Linux kernel. The havemonandosdmap function checks map epochs without holding the appropriate locks, racing with concurrent map updates that free the old map. This can result in dereferencing freed memory...

kernel: smb: client: Fix use-after-free in cifs_fill_dirent

A use-after-free flaw was found in cifsfilldirent in fs/cifs/readdir.c in smb client in the Linux Kernel. This flaw could allow an attacker to crash the system due to race problem. This vulnerability could even lead to a kernel information leak problem...

SUSE CVE-2025-71066

In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Always remove class from active list before deleting in etsqdiscchange [email protected] says: The vulnerability is a race condition between etsqdiscdequeue and etsqdiscchange. It leads to UAF on stru...

kernel: libceph: fix potential use-after-free in have_mon_and_osd_map()

A use-after-free vulnerability was found in the Ceph client session initialization in the Linux kernel. The havemonandosdmap function checks map epochs without holding the appropriate locks, racing with concurrent map updates that free the old map. This can result in dereferencing freed memory...

kernel: smb: client: fix race with concurrent opens in rename(2)

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix race with concurrent opens in rename2 Besides sending the rename request to the server, the rename process also involves closing any deferred close, waiting for outstanding I/O to complete as well as marking all...

SUSE CVE-2025-71074

In the Linux kernel, the following vulnerability has been resolved: functionfs: fix the open/removal races ffsepfileopen can race with removal, ending up with file-privatedata pointing to freed object. There is a total count of opened files on functionfs both ep0 and dynamic ones and when it hits...

SUSE CVE-2025-71080

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix a BUG in rt6getpcpuroute under PREEMPTRT On PREEMPTRT kernels, after rt6getpcpuroute returns NULL, the current task can be preempted. Another task running on the same CPU may then execute rt6makepcpuroute and successful...