CVE-2025-14338

Polkit authentication dis isabled by default and a race condition in the Polkit authorization check in versions before v0.69.0 can lead to the same issues as in CVE-2025-66005...

CVE-2025-14338 Polkit authentication dis isabled by default in inputplumber

Polkit authentication dis isabled by default and a race condition in the Polkit authorization check in versions before v0.69.0 can lead to the same issues as in CVE-2025-66005...

CVE-2025-14338

CVE-2025-14338 describes a Polkit-related race condition affecting authentication checks, tied to InputPlumber and echoing issues from CVE-2025-66005. Affected software/component: Polkit authorization checks in versions before v0.69.0, with the note that Polkit authentication is disabled by defau...

kernel: can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock

A vulnerability was found in the Linux kernel's Controller Area Network CAN protocol, within the J1939 protocol implementation. This issue occurs due to a potential deadlock caused by a race condition involving three locks: j1939sockslock, activesessionlistlock, and sksessionqueuelock. This issue...

kernel: net/mlx5e: Check for NOT_READY flag state after locking

A race condition was found in the Linux kernel Mellanox mlx5 network driver's traffic control offload flow management. A local user with privileges to configure traffic control flower filters can trigger concurrent flow deletion operations where the NOTREADY flag is checked before acquiring the...

kernel: Linux kernel: SCTP use-after-free due to race condition in sendmsg

A flaw was found in the Linux kernel's SCTP implementation. This vulnerability allows a use-after-free read via a race condition during SCTP message sending...

CVE-2025-68962

Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-68961

Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-68955

Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-68969

CVE-2025-68969 affects Huawei HarmonyOS (versions 6.0.0, 5.1.0, 5.0.1) with a multi-thread race condition in the thermal management module. Impact from exploitation is availability-related. Root cause: race condition in the thermal management subsystem; public references describe the issue in Har...

CVE-2025-68962

CVE-2025-68962 affects Huawei HarmonyOS Camera Framework module, where a multi-thread race condition can impact availability. Public documentation consistently describes this vulnerability in the camera framework, with Huawei-specific reference to HarmonyOS 5.0.1 noted by CNNVD. Root cause: race ...

CVE-2025-68962

Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-68962

Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-68961

This CVE refers to a multi-thread race condition in Huawei HarmonyOS's camera framework module. The vulnerability affects the camera framework component and is described as a multi-thread contention issue that can impact availability. The public materials do not specify exact affected versions, r...

CVE-2025-68961

Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-68958

CVE-2025-68958 is described across connected sources as a multi-thread race condition in the card framework module, with potential impact to availability. Affected platforms include Huawei HarmonyOS (per CNNVD and Huawei bulletins) and related ecosystem entries. The CVSS vectors vary: NVD lists C...

CVE-2025-68957

Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-68957

CVE-2025-68957 is a multi-thread race condition in Huawei HarmonyOS’s Card Framework module. Affected component: Card Framework; affected product/version: HarmonyOS (notably v6.0.0 per CNNVD). Impact: availability can be affected if exploited. Exploitability indicators from sources include local ...

CVE-2025-68956

CVE-2025-68956 corresponds to a multi-thread race condition in the Card Framework module of Huawei HarmonyOS. Multiple connected sources (Red Hat, CIRCL, CNNVD, CVE databases, PT-Security) describe a vulnerability that could affect system availability. The Huawei/NVD entries indicate a local atta...

kernel: libceph: fix potential use-after-free in have_mon_and_osd_map()

A use-after-free vulnerability was found in the Ceph client session initialization in the Linux kernel. The havemonandosdmap function checks map epochs without holding the appropriate locks, racing with concurrent map updates that free the old map. This can result in dereferencing freed memory...