50556 matches found
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: PM: runtime: Fixed a race condition related to device removal The following code in pmruntimework may cause dereferencing of the dev-parent pointer after the parent device has been freed: c / Maybe the parent is now able to...
Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: Reading txq-readptr under a lock condition. If we read txq-readptr without using a lock, we can read the same value twice. Then, after obtaining the lock, we can reclaim the memory from two different locations...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: When a multi-threaded process receives a stop signal e.g., SIGSTOP, dosignalstop sets JOBCTLSTOPPENDING and JOBCTLSTOPCONSUME on all threads, and sets signal-groupstopcount to the number of threads. If one of the threads...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: nvme-apple: Use acquire/release for queue-enabled state applenvmeinitqueue initializes the queue state and then marks the queue as enabled. The interrupt and request paths are checked before using that queue state. The old wmb...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt – restore callback for non-parallel fallback pcrypt installs pcryptaeaddone on the child AEAD request before attempting to submit it through padata. If padatadoparallel returns -EBUSY, pcrypt reverts to directly...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: char: tlclk: fixed a use-after-free in tlclkcleanup. This patch improves the module cleanup process in the tlclk driver to prevent potential use-after-free and race conditions. Currently, the fileoperations structure does not...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: parport: Fixed a race condition between port and client registration The parport subsystem registers port devices before they are fully initialized, resulting in a race condition where client drivers such as lp can attempt to...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fixed the race condition in agent registration for HV VHCA stats The mlx5ehvvhcastatscreate function registers the stats agent through mlx5hvvhcaagentcreate. The helper function publishes the agent in hvvhca-agentstype...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: - misc: bcm-vk: Use acquire/release for msgqinited. bcmvksyncmsgq fills the message queue information and then sets msgqinited. Readers should call bcmvkdrvaccessok before accessing the message queues and their cached queue...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: can: bcm: fixed the race condition involving lockless operations on bo-bound and bo-ifindex, as well as the silent failure during RXSETUP. The bcmsendmsg function reads the values of bo-ifindex and checks bo-bound before...
Astra Linux – Vulnerability in Firefox and Thunderbird
Race condition in the Graphics component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: A race condition between handleposixcputimers and posixcputimerdel has been fixed. If a task that exits without autoreaping has already called exitnotify and calls handleposixcputimers from the IRQ, it can be...
kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition
A use-after-free flaw was identified in the Linux kernel’s media tuner xc5000 driver. In the vulnerable code path, xc5000release calls canceldelayedwork to cancel a pending delayed work item timersleep without guaranteeing that the work handler has fully completed. Under a race condition, the...
kernel: gfs2: Fix unlikely race in gdlm_put_lock
A flaw was found in the Linux kernel’s Global File System 2 implementation affecting distributed lock manager DLM handling in the gdlmputlock function. During an unmount operation, if the DFLUNMOUNT flag is set but the lockspace has not yet been fully released, remote callbacks gdlmast or gdlmbas...
kernel: gfs2: add some missing log locking
A flaw was found in the Linux kernel's Global File System 2 GFS2 component. The gfs2logd function, responsible for log flushing, calls several log flushing functions without holding the required lock. This omission allows concurrent transactions to access shared resources without proper exclusion...
kernel: Linux kernel: Denial of Service in RDMA/bnxt_re driver due to race condition during QP destruction
A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA bnxtre driver. A local user could exploit a race condition that occurs when a Queue Pair QP is destroyed, but completion queue CQ polling continues. This can lead to a kernel panic, resulting in a Denial of Service DoS on the...
kernel: net/sched: act_ct: Only release RCU read lock after ct_ft
A flaw was found in the Linux kernel. A race condition in the actct module, specifically during the flow table lookup, can lead to a Use-After-Free UAF vulnerability. This occurs because a critical lock is released prematurely, allowing a memory object to be freed while still in use. An attacker...
CVE-2024-6387-OpenSSH-Analysis
CVE-2024-6387 OpenSSH Analysis Overview Security analysis of CVE-2024-6387 vulnerability affecting OpenSSH server. Tools Used Kali Linux Nmap Metasploitable 2 Vulnerability Details CVE-2024-6387 is a vulnerability in OpenSSH caused by a race condition in sshd, which may allow an unauthorised remo...
android-workprofile-exploit
Android Work Profile Security Research Controlled lab research on Android work-profile provisioning behavior, policy timing, and enterprise isolation boundaries. This repository documents academic security research performed in a controlled environment. It is not intended for unauthorized access,...