CVE-2025-39819 fs/smb: Fix inconsistent refcnt update

In the Linux kernel, the following vulnerability has been resolved: fs/smb: Fix inconsistent refcnt update A possible inconsistent update of refcount was identified in smb2compoundop. Such inconsistent update could lead to possible resource leaks. Why it is a possible bug: 1. In the comment secti...

CVE-2025-39819

CVE-2025-39819 affects the Linux kernel (fs/smb). The issue is an inconsistent refcount update in smb2_compound_op that could leak resources; a fix adds an extra cleanup goto to ensure cfile is dropped on all paths, including ENOMEM paths. The problem is limited to the kernel SMB path and is miti...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly removing the cpuhp instance node, which could result in warnings or inconsistent state...

DEBIAN-CVE-2025-38712

In the Linux kernel, the following vulnerability has been resolved: hfsplus: don't use BUGON in hfspluscreateattributesfile When the volume header contains erroneous values that do not reflect the actual state of the filesystem, hfsplusfillsuper assumes that the attributes file is not yet created...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from inconsistency in the way proc handles checking proclseek versus procreaditer, etc., which could lead to a UA...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a contention condition between a subflow failure and a creation, which could lead to inconsistent state...

CVE-2025-54638

Issue of inconsistent read/write serialization in the ad module. Impact: Successful exploitation of this vulnerability may affect the availability of the ad service...

Arbitrary Code Execution

skops is vulnerable to Arbitrary Code Execution. The vulnerability is due to inconsistent operator function handling due to a flaw in OperatorFuncNode that allows untrusted operator methods to be hidden and reused to invoke seemingly safe functions...

CVE-2025-54638

Issue of inconsistent read/write serialization in the ad module. Impact: Successful exploitation of this vulnerability may affect the availability of the ad service...

CVE-2025-54638

CVE-2025-54638 involves an inconsistent read/write serialization issue in the ad module. Connected sources indicate potential impact on availability of the ad service; CVSS details point to a local attack with low privileges required and no user interaction. No concrete fix/version is stated in t...

PT-2025-32080 · Unknown · Aod Module

Name of the Vulnerable Software and Affected Versions: ad module affected versions not specified Description: An inconsistent read/write serialization issue exists in the ad module. Successful exploitation of this issue may affect the availability of the ad service. Recommendations: At the moment...

The vulnerability of the IBM Security Verify Access access control system and the software for securing access to applications in a Docker environment. IBM Security Verify Access Docker, due to responses to incoming requests being inconsistent, allows unauthorized access to protected information by attackers.

The vulnerability of the IBM Security Verify Access access control system and its software for securing access to applications in a Docker environment is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability could allow an attacker operating remotely to...

Skops has Inconsistent Trusted Type Validation that Enables Hidden `operator` Methods Execution

Summary An inconsistency in OperatorFuncNode can be exploited to hide the execution of untrusted operator.xxx methods. This can then be used in a code reuse attack to invoke seemingly safe functions and escalate to arbitrary code execution with minimal and misleading trusted types. Note: This...

CVE-2025-0253

HCL IEM is affected by a cookie attribute not set vulnerability due to inconsistency of certain security-related configurations which could increase exposure to potential vulnerabilities...

Akamai Rate Control 安全漏洞

Akamai Rate Control is an API access frequency control software from Akamai Corporation. A security vulnerability exists in Akamai Rate Control versions prior to 2025, which stems from inconsistent rate measurements that could cause requests to exceed thresholds...

PT-2025-30716 · Hcl · Hcl Iem

Name of the Vulnerable Software and Affected Versions: HCL IEM affected versions not specified Description: HCL IEM is affected by a cookie attribute not set vulnerability resulting from inconsistent security-related configurations. This issue could increase exposure to potential vulnerabilities...

QEMU 安全漏洞

QEMU Quick Emulator is a suite of simulation processor software by Fabrice Bellard, an individual developer in France. The software is fast and cross-platform. A security vulnerability exists in QEMU 10.0.3 and earlier versions, which stems from inconsistent migration states...

The vulnerability of the graphical interface of the Fortinet FortiSOAR software for coordinating the operation of cybersecurity systems and for managing real-time incident responses allows attackers to gain unauthorized access to protected information.

The vulnerability of the graphical interface of the software platform for coordinating the operation of cybersecurity systems and for managing real-time incident responses in Fortinet FortiSOAR is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can...

Juniper Networks Junos OS 安全漏洞

Juniper Networks Junos OS is a Juniper Networks USA network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS that stems from an inconsistent...

CVE-2025-38333 f2fs: fix to bail out in get_new_segment()

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to bail out in getnewsegment ------------ cut here ------------ WARNING: CPU: 3 PID: 579 at fs/f2fs/segment.c:2832 newcurseg+0x5e8/0x6dc pc : newcurseg+0x5e8/0x6dc Call trace: newcurseg+0x5e8/0x6dc...