39761 matches found
Azure Linux 3.0 Security Update: kernel (CVE-2025-38429)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38429 advisory. - In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Update read pointer only...
Azure Linux 3.0 Security Update: kernel (CVE-2025-37997)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37997 advisory. - In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix region locking in...
Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-27009)
The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27009 advisory. - In the Linux kernel, the following vulnerability has been resolved: s390/cio: fix race condition...
Azure Linux 3.0 Security Update: kernel (CVE-2025-21947)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21947 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix type confusion via race...
Azure Linux 3.0 Security Update: kernel (CVE-2025-38107)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38107 advisory. - In the Linux kernel, the following vulnerability has been resolved: netsched: ets: fix a race in...
Azure Linux 3.0 Security Update: kernel (CVE-2025-38352)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38352 advisory. - In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between...
Azure Linux 3.0 Security Update: kernel (CVE-2024-50061)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50061 advisory. - In the Linux kernel, the following vulnerability has been resolved: i3c: master: cdns: Fix use after free...
Azure Linux 3.0 Security Update: kernel (CVE-2024-43891)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43891 advisory. - In the Linux kernel, the following vulnerability has been resolved: tracing: Have format file honor...
Azure Linux 3.0 Security Update: kernel (CVE-2024-49859)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49859 advisory. - In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to check atomicfile in f2fs...
Azure Linux 3.0 Security Update: kernel (CVE-2025-38321)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38321 advisory. - In the Linux kernel, the following vulnerability has been resolved: smb: Log an error when closeallcacheddir...
📄 macOS 10.12.2 XNU Kernel Race Condition
This proof of concept code demonstrates a race condition observed in the setdpcontrolport function within XNU kernel versions prior to macOS 10.12.2 and iOS 10.2...
PT-2026-4296
Name of the Vulnerable Software and Affected Versions Rufus versions 4.11 and below Description Rufus, a utility for formatting and creating bootable USB flash drives, contains a time-of-check to time-of-use TOCTOU race condition in the src/net.c file. This occurs during the creation, validation,...
Azure Linux 3.0 Security Update: kernel (CVE-2024-41054)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41054 advisory. - In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix ufshcdclearcmd raci...
Azure Linux 3.0 Security Update: kernel (CVE-2024-24861)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-24861 advisory. - A race condition was found in the Linux kernel's media/xc4000 device driver in xc4000 xc4000getfrequency...
Azure Linux 3.0 Security Update: kernel (CVE-2024-46693)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46693 advisory. - In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pmicglink: Fix race during...
Azure Linux 3.0 Security Update: kernel (CVE-2025-37838)
"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37838 advisory. - In the Linux kernel, the following vulnerability has been resolved: HSI: ssiprotocol: Fix use after free...
Azure Linux 3.0 Security Update: kernel (CVE-2025-37985)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37985 advisory. - In the Linux kernel, the following vulnerability has been resolved: USB: wdm: close race between wdmopen and...
CVE-2026-22702
A flaw was found in virtualenv, a tool for creating isolated virtual Python environments. A local attacker can exploit a Time-of-Check-Time-of-Use TOCTOU race condition during directory creation operations. By performing symlink-based attacks, the attacker can redirect virtualenv's application da...
CVE-2025-68132
EVerest is an EV charging software stack. Prior to version 2025.12.0, ismessagecrccorrect in the DZGGSH01 powermeter SLIP parser reads vecvec.size-1 and vecvec.size-2 without checking that at least two bytes are present. Malformed SLIP frames on the serial link can reach ismessagecrccorrect with...
