1081 matches found
CVE-2022-50305
CVE-2022-50305 is a Linux kernel ASoC issue: sof_es8336_remove() could cause use-after-free because cancel_delayed_work() may not wait for the work function to finish. The fix uses cancel_delayed_work_sync() to ensure the work is cancelled, not running, and cannot be re-scheduled. Affected compon...
CVE-2023-53233 net/smc: fix deadlock triggered by cancel_delayed_work_syn()
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix deadlock triggered by canceldelayedworksyn The following LOCKDEP was detected: Workqueue: events smclgrfreework smc WARNING: possible circular locking dependency detected...
CVE-2023-53233 net/smc: fix deadlock triggered by cancel_delayed_work_syn()
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix deadlock triggered by canceldelayedworksyn The following LOCKDEP was detected: Workqueue: events smclgrfreework smc WARNING: possible circular locking dependency detected...
CVE-2023-53233 net/smc: fix deadlock triggered by cancel_delayed_work_syn()
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix deadlock triggered by canceldelayedworksyn The following LOCKDEP was detected: Workqueue: events smclgrfreework smc WARNING: possible circular locking dependency detected...
CVE-2022-50286 ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline
In the Linux kernel, the following vulnerability has been resolved: ext4: fix delayed allocation bug in ext4clumapped for bigalloc + inline When converting files with inline data to extents, delayed allocations made on a file system created with both the bigalloc and inline options can result in...
CVE-2022-50286 ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline
In the Linux kernel, the following vulnerability has been resolved: ext4: fix delayed allocation bug in ext4clumapped for bigalloc + inline When converting files with inline data to extents, delayed allocations made on a file system created with both the bigalloc and inline options can result in...
CVE-2022-50286
In Linux kernel ext4, a delayed allocation bug occurs when converting files with inline data to extents on filesystems using both bigalloc and inline. The code path in ext4_clu_mapped() can search a non-existent extent tree (due to inline data) and cache invalid/garbage entries in the extent stat...
PT-2025-37674
Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.1.0-20221027.rc2.git8.56bc5b569087.300.fc36.s390x+debug and earlier Description The Linux kernel contained a deadlock vulnerability within the net/smc module, triggered by cancel delayed work syn. The issue was identifi...
PT-2025-37588
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw where converting files with inline data to extents, with both bigalloc and inline options enabled, can lead to invalid extent status cache content,...
PT-2025-37607
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw within the ASoC sof es8336 driver. The sof es8336 remove function calls cancel delayed work, which does not guarantee completion of the associated work...
BIT-NIFI-2020-9487
In Apache NiFi 1.0.0 to 1.11.4, the NiFi download token one-time password mechanism used a fixed cache size and did not authenticate a request to create a download token, only when attempting to use the token to access the content. An unauthenticated user could repeatedly request download tokens,...
AZL-73938 CVE-2025-39738 affecting package kernel for versions less than 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: btrfs: do not allow relocation of partially dropped subvolumes BUG There is an internal report that balance triggered transaction abort, with the following call trace: item 85 key 594509824 169 0 itemoff 12599 itemsize 33 extent...
CVE-2025-39738
CVE-2025-39738 affects the Linux kernel (btrfs) and is triggered during relocation of partially dropped subvolumes. The root cause is a missing orphan item for a subvolume, causing a delayed-ref transaction abort when relocating, with an offender inside a dropped subvolume. Upstream fixes exist (...
CVE-2025-58144 Arm issues with page refcounting
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. There are two issues related to the mapping of pages belonging to other domains: For one, an assertion is wrong there, where the case actually needs handling. A NULL...
CVE-2025-39695 RDMA/rxe: Flush delayed SKBs while releasing RXE resources
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Flush delayed SKBs while releasing RXE resources When skb packets are sent out, these skb packets still depends on the rxe resources, for example, QP, sk, when these packets are destroyed. If these rxe resources are...
CVE-2025-39695
CVE-2025-39695 affects the Linux kernel RDMA/rxe path. The issue arises when skb packets that depend on RXE resources (e.g., QP, sk) are destroyed while RXE resources are being released, causing call traces. The patch adds a timestamp when skb packets are created to avoid skb packets hanging in s...
PT-2025-36289
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel’s RDMA/rxe subsystem related to the handling of SKB packets and RXE resources. Specifically, the issue occurs when skb packets are sent and still depe...
dm cache: fix flushing uninitialized delayed_work on cache_ctr error
...