PT-2025-17313 · Unknown · Namelessmc

Name of the Vulnerable Software and Affected Versions: NamelessMC versions 2.1.4 and prior Description: The issue concerns an insecure view count mechanism in the forum page of NamelessMC, a free website software for Minecraft servers. This mechanism relies on a client-side cookie nl-topic-tid or...

CVE-2025-22025

CVE-2025-22025: In the Linux kernel NFS server (nfsd), if nfsd4_run_cb fails while queuing a dl_recall, the incremented dl_stid reference is not decremented, causing a potential dl_stid leak. The issue is addressed by checking the result of nfsd4_run_cb and, on failure, calling nfs4_put_stid to p...

CVE-2022-49753

CVE-2022-49753: In the Linux kernel, dmaengine_dma_chan_get() had a double increment of channel client_count for public channels, causing resources to be freed late or not at all. The issue manifested as a refcount underflow/use-after-free in kernel logs and was observed during repeated module lo...

PT-2025-16714

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a mismatch in the increment and decrement of r count in the ksmbd module. This mismatch occurs because r count is only increased when there is an oplock break wai...

PT-2025-16712

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns a problem with gang directory lifetimes in the Linux kernel. Specifically, the creation of a gang returns an opened gang directory, which should be removed when closed...

Linux Distros Unpatched Vulnerability : CVE-2024-50021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ice: Fix improper handling of refcount in icedpllinitrclkpins This patch addresses a referen...

CVE-2022-49460 PM / devfreq: rk3399_dmc: Disable edev on remove()

In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: rk3399dmc: Disable edev on remove Otherwise we hit an unablanced enable-count when unbinding the DFI device: 1279.659119 ------------ cut here ------------ 1279.659179 WARNING: CPU: 2 PID: 5638 at...

CVE-2022-49380 f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count()

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid f2fsbugon in decvalidnodecount As Yanming reported in bugzilla: https://bugzilla.kernel.org/showbug.cgi?id=215897 I have encountered a bug in F2FS file system in kernel v5.17. The kernel should enable...

CVE-2024-46973 Exploitable kernel use-after-free on psServerMMUContext due to reference count mismanagement

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions...

CVE-2024-56558 nfsd: make sure exp active before svc_export_show

In the Linux kernel, the following vulnerability has been resolved: nfsd: make sure exp active before svcexportshow The function eshow was called with protection from RCU. This only ensures that exp will not be freed. Therefore, the reference count for exp can drop to zero, which will trigger a...

CVE-2024-20342

Multiple Cisco products are affected by a vulnerability in the rate filtering feature of the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured rate limiting filter. This vulnerability is due to an incorrect connection count comparison. An attacker...

Unspecified vulnerability in Linux kernel (CNVD-2024-35564)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the gianfar module in gfargettsinfo due to an increase in the reference count of node pointers returned b...

ALSA-2024:4583 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: TIPC message reassembly use-after-free remote code execution vulnerability CVE-2024-36886 kernel: ethernet: hisilicon: hns: hnsdsafmisc: fix a possible array overflow in hnsdsafgesrstbypo...

CVE-2023-52566 nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential use after free in nilfsgccachesubmitreaddata In nilfsgccachesubmitreaddata, brelsebh is called to drop the reference count of bh when the call to nilfsdattranslate fails. If the reference count hits 0 and it...

RLSA-2024:0134 Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: use after free in unixstreamsendpage CVE-2023-4622 kernel: vmwgfx: reference count issue leads to use-after-free in surface handli...

samba: infinite loop in mdssvc RPC service for spotlight

An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function slunpackloop did not validate a field in the network packet that contains the count of elements in an array-like...

Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling

...

July 27, 2023, update for Office 2016 (KB5002117)

None None...

kernel: ext4: fix deadlock due to mbcache entry corruption

A deadlock vulnerability was found in the ext4 filesystem in the Linux kernel. When manipulating extended attribute xattr blocks, a race condition in non-atomic bitfield updates can cause the mbcache entry state to become corrupted. This leads to an infinite loop in ext4xattrblockset where the co...

CVE-2023-2019

A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. This issue results from the improper management of a reference count. This may allow an attacker to create a denial of service condition on the system...