12843 matches found
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fixed an issue where an invalid lock was taken on a wedge. If devices like GuC upload are wedged, the submission is not yet enabled, and the state has not even been initialized. This fix prevents the wedge-related calls...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: userial: Fixed race condition in TTY wakeup A race condition occurs when gsstartio calls either gsstartrx or gsstarttx. These functions briefly release the portlock of usbepqueue. This allows gsclose and...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: tls: Handle the situation where data disappears from the TLS ULP. TLS assumes that it owns the receive queue of the TCP socket. This assumption cannot be guaranteed if the reader of the TCP socket entered before the TLS ULP was...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Fix for panic due to PSLVERR When the PSLVERRRESPEN parameter is set to 1, the device generates an error response if an attempt is made to read an empty RBR Receive Buffer Register while the FIFO is enabled. In...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: RDMA/mlx5: Fixed unsafe xarray access in implicit ODP handling xastore and xaerase were used without holding the proper lock, which led to a lockdep warning due to unsafe RCU usage. This patch replaces them with xastore and...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: mpls: The rcudereferencertnl function was used in mplsrouteinputrcu. As reported by syzbot 0, mplsrouteinputrcu can be called from mplsgetroute, which operates under RTNL. Additionally, net-mpls.platformlabel is only updated unde...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: smb: client: fixed a potential deadlock that could occur when reconnecting channels. Fixed the function cifssignalcifsdforreconnect to follow the correct lock order and prevent the following deadlock from occurring:...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix race between quota disable and quota rescan ioctl There is a race between a task that disables quotas and another task that runs the rescan ioctl. This can lead to a use-after-free of qgroup records from the...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: The issue related to comedi: a race between polling and detaching the device has been fixed. The syzbot report indicates a use-after-free in the comedi module. This occurs because comedi happily removes the allocated async area,...
ksmbd: fix bug on trap in smb2_lock
...
EUVD-2023-60050
Nagios Log Server versions prior to 2024R1 contain an incorrect authorization vulnerability. Users who lacked the required API permission were nevertheless able to invoke API endpoints, resulting in unintended access to data and actions exposed via the API. This incorrect authorization check coul...
EUVD-2021-34709
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. It has been identified as a duplicate of https://vulners.com/cve/CVE-2021-33179...
Linux Distros Unpatched Vulnerability : CVE-2025-40090
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix recursive locking in RPC handle list access Since commit 305853cce3794 ksmbd: Fix...
CVE-2021-47692
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. It has been identified as a duplicate of https://vulners.com/cve/CVE-2021-33179...
CVE-2021-47692
CVE-2021-47692 is a duplicate of CVE-2021-33179 and is rejected as a separate entry. The connected Red Hat and NVD records describe Nagios XI general UI versions prior to 5.8.4 as vulnerable to authenticated reflected cross-site scripting (XSS). An authenticated user who visits a crafted URL coul...
EUVD-2025-36988
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix recursive locking in RPC handle list access Since commit 305853cce3794 "ksmbd: Fix race condition in RPC handle list access", ksmbdsessionrpcmethod attempts to lock sess-rpclock. This causes hung connections / tasks wh...
CVE-2025-40090
Summary (CVE-2025-40090): A race condition in ksmbd RPC handling on Linux kernels caused deadlocks when opening named pipes. The root cause is ksmbd_session_rpc_method attempting to take the same sess->rpc_lock that is already held by ksmbd_session_rpc_open (down_write) while ksmbd_session_rpc...
CVE-2025-40090 ksmbd: fix recursive locking in RPC handle list access
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix recursive locking in RPC handle list access Since commit 305853cce3794 "ksmbd: Fix race condition in RPC handle list access", ksmbdsessionrpcmethod attempts to lock sess-rpclock. This causes hung connections / tasks wh...
PT-2025-44476
Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to CCM 3.1.2 Nagios XI versions prior to 5.8.4 Description The Core Config Manager CCM in Nagios XI is susceptible to a cross-site scripting XSS issue through the lock page functionality. A lack of proper input...