46 matches found
kernel: netfilter: ctnetlink: ensure safe access to master conntrack
A flaw was found in the netfilter: ctnetlink component of the Linux kernel. This vulnerability occurs due to insufficient locking when accessing the master conntrack object, allowing it to become invalid while still being referenced. A local attacker could potentially exploit this race condition,...
The vulnerability of the spidev.c component in the Linux operating system’s kernel, related to insufficient locking mechanisms, allows a malicious actor to trigger a service failure.
The vulnerability of the spidev.c component in the Linux operating system’s kernel is related to insufficient blocking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2026-72119
A flaw was found in the Linux kernel's Controller Area Network CAN Broadcast Manager BCM module. This vulnerability arises from a race condition where CAN frame data and timer updates can be observed in a partially updated or unvalidated state due to insufficient locking. Additionally, a missing...
The vulnerability in the driver/gpio/gpio-omap.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the drivers/gpio/gpio-omap.c component in the Linux operating system’s kernel is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the fsl_xcvr.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the fslxcvr.c component in the Linux operating system is related to insufficient blocking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the drivers/pci/iov.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the drivers/pci/iov.c component in the Linux operating system’s kernel is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the driver component drivers/pmdomain/imx/imx8m-blk-ctrl.c of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the drivers/pmdomain/imx/imx8m-blk-ctrl.c component of the Linux operating system is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the `drivers/nvme/target/fc.c` component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the drivers/nvme/target/fc.c component of the Linux operating system is related to insufficient locking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...
kernel: netfilter: ctnetlink: ensure safe access to master conntrack
A flaw was found in the netfilter: ctnetlink component of the Linux kernel. This vulnerability occurs due to insufficient locking when accessing the master conntrack object, allowing it to become invalid while still being referenced. A local attacker could potentially exploit this race condition,...
kernel: netfilter: ctnetlink: ensure safe access to master conntrack
A flaw was found in the netfilter: ctnetlink component of the Linux kernel. This vulnerability occurs due to insufficient locking when accessing the master conntrack object, allowing it to become invalid while still being referenced. A local attacker could potentially exploit this race condition,...
ROS-20260403-73-0008
A vulnerability in the fs/hfsplus/extents.c component of the Linux operating system kernel is related to insufficient locking. Exploitation of the vulnerability allows an attacker to cause a denial of service...
The vulnerabilities of the functions mptcp_sendmsg_frag() and mptcp_subflow_get_send() in the module net/mptcp/protocol.c, which are part of the MPTCP protocol implementation in Linux kernel, allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerabilities of the functions mptcpsendmsgfrag and mptcpsubflowgetsend in the net/mptcp/protocol.c module of the Linux operating system’s MPTCP implementation are related to insufficient resource locking. Exploiting these vulnerabilities could allow an attacker to compromise the...
The vulnerability of the timer_delete_sync() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the timerdeletesync function in the Linux operating system’s kernel is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to trigger a service failure...
ROS-20260119-7381
A vulnerability in the drivers/tty/serial/xilinxuartps.c component of the Linux operating system kernel is related to insufficient locking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
ROS-20260119-7350
A vulnerability in the rosebind function of the net/rose/afrose.c component of the Linux operating system kernel is related to insufficient locking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
ROS-20260119-7302
A vulnerability in the memcg component of the Linux operating system kernel is related to insufficient locking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
CVE-2025-68185
The CVE-2025-68185 entry concerns the Linux kernel vulnerability nfs4_setup_readdir() with insufficient locking when dereferencing ->d_parent->d_inode. The issue is described as a theoretically oopsable race that is unlikely to be exploitable on real hardware, though may be possible under K...
Linux Distros Unpatched Vulnerability : CVE-2025-68185
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfs4setupreaddir: insufficient locking for -dparent-dinode dereferencing Theoretically it's an oopsable race, but I don't believe one can manage to hit it on re...
The vulnerability of the io_uring.net.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the iouring.net.c component in the Linux operating system’s kernel is related to insufficient locking mechanisms. Exploiting this vulnerability allows an attacker to cause service failures...
