UBUNTU-CVE-2023-53838

In the Linux kernel, the following vulnerability has been resolved: f2fs: synchronize atomic write aborts To fix a race condition between atomic write aborts, I use the inode lock and make COW inode to be re-usable thoroughout the whole atomic file inode lifetime...

Malicious code in graphsync (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dbb10327d6553750848c2b849abba1ed717438928a6cfdc148b73de73db8e9db This is a malicious copy of the networkx package. It contains an obfuscated script that downloads and runs further scripts from one of multiple locations, and...

CVE-2025-14310

CVE-2025-14310 describes a classic buffer overflow in rethinkdb caused by a buffer copy without checking input size, affecting rethinkdb before 2.4.4. According to connected sources, the flaw can enable arbitrary code execution or denial of service, with high impact to confidentiality, integrity,...

CVE-2025-40343

CVE-2025-40343 affects the Linux kernel nvmet-fc component. When forcefully shutting down a port via configfs, nvmet_port_subsys_drop_link() calls nvmet_port_del_ctrls() and then nvmet_disable_port(), which both schedule deletion of remaining associations. The bug allows the first scheduled work ...

CVE-2025-40343 nvmet-fc: avoid scheduling association deletion twice

In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: avoid scheduling association deletion twice When forcefully shutting down a port via the configfs interface, nvmetportsubsysdroplink first calls nvmetportdelctrls and then nvmetdisableport. Both functions will eventuall...

EUVD-2022-55713

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifscopyfilerange If the file is used by swap, before return -EOPNOTSUPP, should free the xid, otherwise, the xid will be leaked...

CVE-2023-53860 dm: don't attempt to queue IO under RCU protection

In the Linux kernel, the following vulnerability has been resolved: dm: don't attempt to queue IO under RCU protection dm looks up the table for IO based on the request type, with an assumption that if the request is marked REQNOWAIT, it's fine to attempt to submit that IO while under RCU read lo...

CVE-2023-53860

In the Linux kernel, the following vulnerability has been resolved: dm: don't attempt to queue IO under RCU protection dm looks up the table for IO based on the request type, with an assumption that if the request is marked REQNOWAIT, it's fine to attempt to submit that IO while under RCU read lo...

CVE-2023-53860 dm: don't attempt to queue IO under RCU protection

In the Linux kernel, the following vulnerability has been resolved: dm: don't attempt to queue IO under RCU protection dm looks up the table for IO based on the request type, with an assumption that if the request is marked REQNOWAIT, it's fine to attempt to submit that IO while under RCU read lo...

CVE-2023-53838

Summary of CVE-2023-53838 (Linux kernel, f2fs): A race condition in the F2FS atomic write abort handling can cause inconsistent COW inode state. The mitigation fixes synchronization by using the inode lock and ensuring the Copy-On-Write (COW) inode is reusable for the entire lifetime of the atomi...

CVE-2023-53838 f2fs: synchronize atomic write aborts

In the Linux kernel, the following vulnerability has been resolved: f2fs: synchronize atomic write aborts To fix a race condition between atomic write aborts, I use the inode lock and make COW inode to be re-usable thoroughout the whole atomic file inode lifetime...

CVE-2023-53838

In the Linux kernel, the following vulnerability has been resolved: f2fs: synchronize atomic write aborts To fix a race condition between atomic write aborts, I use the inode lock and make COW inode to be re-usable thoroughout the whole atomic file inode lifetime...

CVE-2023-53838 f2fs: synchronize atomic write aborts

In the Linux kernel, the following vulnerability has been resolved: f2fs: synchronize atomic write aborts To fix a race condition between atomic write aborts, I use the inode lock and make COW inode to be re-usable thoroughout the whole atomic file inode lifetime...

CVE-2022-50667

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix memory leak in vmwmksstataddioctl If the copy of the description string from userspace fails, then the page for the instance descriptor doesn't get freed before returning -EFAULT, which leads to a memleak...

CVE-2022-50667 drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl()

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix memory leak in vmwmksstataddioctl If the copy of the description string from userspace fails, then the page for the instance descriptor doesn't get freed before returning -EFAULT, which leads to a memleak...

CVE-2022-50667

CVE-2022-50667 affects Linux kernel drm/vmwgfx: memory leak in vmw_mksstat_add_ioctl when copying a userspace description fails, causing a leak of the instance descriptor page. SUSE advisory SUSE-SU-2026:0317-1 (SUSE SLES15 SP5 kernel) lists CVE-2022-50667 among fixed issues, indicating a kernel ...

CVE-2022-50667 drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl()

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix memory leak in vmwmksstataddioctl If the copy of the description string from userspace fails, then the page for the instance descriptor doesn't get freed before returning -EFAULT, which leads to a memleak...

CVE-2022-50663

The CVE-2022-50663 entry relates to the Linux kernel net: stmmac driver. The vulnerability is a memory leak in stmmac_dvr_probe() where priv->af_xdp_zc_qps is not freed when create_singlethread_workqueue() fails; the fix adds a call to bitmap_free() and an error_wq_init path to prevent leaks. ...

CVE-2022-50661 seccomp: Move copy_seccomp() to no failure path.

In the Linux kernel, the following vulnerability has been resolved: seccomp: Move copyseccomp to no failure path. Our syzbot instance reported memory leaks in doseccomp 0, similar to the report 1. It shows that we miss freeing struct seccompfilter and some objects included in it. We can reproduce...

CVE-2022-50661 seccomp: Move copy_seccomp() to no failure path.

In the Linux kernel, the following vulnerability has been resolved: seccomp: Move copyseccomp to no failure path. Our syzbot instance reported memory leaks in doseccomp 0, similar to the report 1. It shows that we miss freeing struct seccompfilter and some objects included in it. We can reproduce...