Race Condition

Overview Microsoft.AspNetCore.App.Runtime.win-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Race Condition through the...

dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop()

A flaw was found in ASP.NET Core. A deadlock condition can be triggered in Http2OutputProducer.Stop, which may lead to a denial of service...

CVE-2024-30046

A flaw was found in ASP.NET Core. A deadlock condition can be triggered in Http2OutputProducer.Stop, which may lead to a denial of service. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising...

RHEL 7 : systemd (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - systemd: Mishandled symlinks in systemd-tmpfiles allows local users to obtain ownership of arbitrary file...

PT-2024-5402 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a potential deadlock scenario in the Linux kernel, specifically in the media: v4l2-ctrls module. This scenario can occur due to unsafe locking, as shown in the...

PT-2024-28070

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the net/mlx5 module. The issue occurs when the lag disable/enable function is called, causing the bond IB device an...

SUSE CVE-2022-48671

In the Linux kernel, the following vulnerability has been resolved: cgroup: Add missing cpusreadlock to cgroupattachtaskall syzbot is hitting percpurwsemassertheld&cpuhotpluglock warning at cpusetattach 1, for commit 4f7e7236435ca0ab "cgroup: Fix threadgrouprwsem cpusreadlock deadlock" missed tha...

SUSE CVE-2022-48675

In the Linux kernel, the following vulnerability has been resolved: IB/core: Fix a nested dead lock as part of ODP flow Fix a nested dead lock as part of ODP flow by using mmputasync. From the below call trace 1 can see that calling mmput once we have the umemodp-umemmutex locked as required by...

SUSE CVE-2024-27031

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix nfsnetfsissueread xarray locking for writeback interrupt The loop inside nfsnetfsissueread currently does not disable interrupts while iterating through pages in the xarray to submit for NFS read. This is not safe though...

GLSA-202405-04 : systemd: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202405-04 systemd: Multiple Vulnerabilities - A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the fs.suiddumpable kernel setting. CVE-2022-4415 -...

DEBIAN-CVE-2022-48675

In the Linux kernel, the following vulnerability has been resolved: IB/core: Fix a nested dead lock as part of ODP flow Fix a nested dead lock as part of ODP flow by using mmputasync. From the below call trace 1 can see that calling mmput once we have the umemodp-umemmutex locked as required by...

DEBIAN-CVE-2022-48671

In the Linux kernel, the following vulnerability has been resolved: cgroup: Add missing cpusreadlock to cgroupattachtaskall syzbot is hitting percpurwsemassertheld&cpuhotpluglock warning at cpusetattach 1, for commit 4f7e7236435ca0ab "cgroup: Fix threadgrouprwsem cpusreadlock deadlock" missed tha...

UBUNTU-CVE-2022-48675

In the Linux kernel, the following vulnerability has been resolved: IB/core: Fix a nested dead lock as part of ODP flow Fix a nested dead lock as part of ODP flow by using mmputasync. From the below call trace 1 can see that calling mmput once we have the umemodp-umemmutex locked as required by...

UBUNTU-CVE-2022-48671

In the Linux kernel, the following vulnerability has been resolved: cgroup: Add missing cpusreadlock to cgroupattachtaskall syzbot is hitting percpurwsemassertheld&cpuhotpluglock warning at cpusetattach 1, for commit 4f7e7236435ca0ab "cgroup: Fix threadgrouprwsem cpusreadlock deadlock" missed tha...

CVE-2022-48671

In the Linux kernel, the following vulnerability has been resolved: cgroup: Add missing cpusreadlock to cgroupattachtaskall syzbot is hitting percpurwsemassertheld&cpuhotpluglock warning at cpusetattach 1, for commit 4f7e7236435ca0ab "cgroup: Fix threadgrouprwsem cpusreadlock deadlock" missed tha...

CVE-2022-48675 IB/core: Fix a nested dead lock as part of ODP flow

In the Linux kernel, the following vulnerability has been resolved: IB/core: Fix a nested dead lock as part of ODP flow Fix a nested dead lock as part of ODP flow by using mmputasync. From the below call trace 1 can see that calling mmput once we have the umemodp-umemmutex locked as required by...

CVE-2022-48675

CVE-2022-48675 is a Linux kernel issue in IB/core involving a nested deadlock between exiting mmap (exit_mmap/__mmu_notifier_release) and a mutex held during ib_umem_odp_map_dma_and_lock. The root cause is a potential deadlock when mmput() is called while umem_mutex is held, triggering a lock in ...

CVE-2022-48671 cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()

In the Linux kernel, the following vulnerability has been resolved: cgroup: Add missing cpusreadlock to cgroupattachtaskall syzbot is hitting percpurwsemassertheld&cpuhotpluglock warning at cpusetattach 1, for commit 4f7e7236435ca0ab "cgroup: Fix threadgrouprwsem cpusreadlock deadlock" missed tha...

CVE-2022-48671

CVE-2022-48671 affects the Linux kernel in the cgroup subsystem: a missing cpus_read_lock() in cgroup_attach_task_all() allowed a deadlock with threadgroup_rwsem, mitigated by adding cpus_read_lock() (aligned with cgroup_procs_write_start()). The issue was observed by syzbot at cpuset_attach() an...

SUSE CVE-2024-26933

In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in port "disable" sysfs attribute The show and store callback routines for the "disable" sysfs attribute file in port.c acquire the device lock for the port's parent hub device. This can cause problems if...