The vulnerability of the Idle function in the PackageKit package manager allows a hacker to compromise the accessibility of protected information.

The vulnerability of the Idle function in the PackageKit package manager is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

CVE-2023-54246

In the Linux kernel, the following vulnerability has been resolved: rcuscale: Move rcuscalewriter scheduletimeoutuninterruptible to idle The rcuscale.holdoff module parameter can be used to delay the start of rcuscalewriter kthread. However, the hung-task timeout will trigger when the timeout...

PT-2025-49750

In the Linux kernel, the following vulnerability has been resolved: s390/idle: mark arch cpu idle noinstr linux-next commit "cpuidle: tracing: Warn about !rcu is watching" adds a new warning which hits on s390's arch cpu idle function: RCU not on for: arch cpu idle+0x0/0x28 WARNING: CPU: 2 PID: 0...

CVE-2024-0217 Packagekitd: use-after-free in idle function callback

A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup mechanics for a transaction could be impacted. As a result, some memory access could occur on memory regions that were previously freed. Once freed, a memory region can be reused for other allocations and any...

PackageKitd Security Vulnerability

PackageKitd is a graphical front-end page by Richard Hughes, a personal developer. PackageKitd has a security vulnerability that stems from the presence of post-release reuse of the Idle function, resulting in the loss of data in memory...