CVE-2026-23420: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: Fix a locking bug Make sure that wl-mutex is locked before it is unlocked. This has been detected by the Clang thread-safety analyzer...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an error in locking order within wlcore, potentially leading to thread-related security issues...

Linux kernel Power User Buffer Overflow DoS

The vulnerability of the snapshotwrite and snapshotioctl functions in the kernel/power/user.c module of the Linux operating system is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux debugfs file removed buffer overflow DoS

The vulnerability of the debugfsfileremoved function in the fs/debugfs/inode.c file of the Linux file system support module is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

F2FS Heap Buffer Overflow DoS

The vulnerability of the f2fsreadmultipages function in the fs/f2fs/data.c module of the F2FS file system in the Linux operating system is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to cause a service failure...

Security Bulletin: Remediation of Multiple Spring Vulnerabilities in IBM Library Support for Spring

Summary Multiple Spring Vulnerabilities have been addressed in IBM Library Support for Spring Vulnerability Details CVEID:CVE-2026-22731 DESCRIPTION: Spring Boot applications with Actuator can be vulnerable to an "Authentication Bypass" vulnerability when an application endpoint that requires...

ks8851_rx_pkts Heap Buffer Overflow DoS

The vulnerability of the ks8851rxpkts function in the drivers/net/ethernet/micrel/ks8851common.c file of the Ethernet adapter support driver in the Micrel Linux kernel is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause a system failure...

PT-2026-51948

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/msm component where a wrong argument caused objects involved in UNMAP operations to not be consistently locked. This behavior specifically affects non- NO SHAR...

AVideo Vulnerable to Wallet Balance Double-Spend via TOCTOU Race Condition in transferBalance

Summary The transferBalance method in plugin/YPTWallet/YPTWallet.php contains a Time-of-Check-Time-of-Use TOCTOU race condition. The method reads the sender's wallet balance, checks sufficiency in PHP, then writes the new balance — all without database transactions or row-level locking. An attack...

GHSA-H54M-C522-H6QR AVideo Vulnerable to Wallet Balance Double-Spend via TOCTOU Race Condition in transferBalance

Summary The transferBalance method in plugin/YPTWallet/YPTWallet.php contains a Time-of-Check-Time-of-Use TOCTOU race condition. The method reads the sender's wallet balance, checks sufficiency in PHP, then writes the new balance — all without database transactions or row-level locking. An attack...

GHSA-W73W-G5XW-RWHF Parse Server has an MFA single-use token bypass via concurrent authData login requests

Impact An attacker who possesses a valid authentication provider token and a single MFA recovery code or SMS one-time password can create multiple authenticated sessions by sending concurrent login requests via the authData login endpoint. This defeats the single-use guarantee of MFA recovery cod...

Parse Server has an MFA single-use token bypass via concurrent authData login requests

Impact An attacker who possesses a valid authentication provider token and a single MFA recovery code or SMS one-time password can create multiple authenticated sessions by sending concurrent login requests via the authData login endpoint. This defeats the single-use guarantee of MFA recovery cod...

PT-2026-28613

Name of the Vulnerable Software and Affected Versions Parse Server versions prior to 8.6.64 Parse Server versions prior to 9.7.0-alpha.8 Description Parse Server is an open source backend deployable on Node.js infrastructure. An attacker with a valid authentication provider token and a single MFA...

CVE-2026-34368 AVideo Vulnerable to Wallet Balance Double-Spend via TOCTOU Race Condition in transferBalance

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the transferBalance method in plugin/YPTWallet/YPTWallet.php contains a Time-of-Check-Time-of-Use TOCTOU race condition. The method reads the sender's wallet balance, checks sufficiency in PHP, then writes the new...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the rustshrinkfreepage function in the drivers/android/binder/pagerange.rs module of the Linux kernel is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Linux kernel Btrfs Heap Buffer Overflow DoS

The vulnerability of the btrfsreadlocked inode function in the fs/btrfs/inode.c file of the Linux kernel’s file system is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/sched: schqfq: Fix null-deref in aggdequeue CVE-2025-40083 In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leak of qgrouplist in btrfsaddqgrouprelation CVE-2025-40209 In t...

scsi: target: Fix recursive locking in __configfs_open_file()

...

fs/dlm/midcomms.c Heap Buffer Overflow DoS

The vulnerability of the dlmmidcommscommitmhandle function in the fs/dlm/midcomms.c module, which is part of the Linux kernel’s distributed locking mechanism, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

Btrfs close_ctree Heap Buffer Overflow DoS

The vulnerability of the closectree function in the fs/btrfs/disk-io.c file of the Btrfs file system in the Linux kernel leads to mutual locking issues. Exploiting this vulnerability could allow an attacker to cause a service failure...