vhost-scsi: protect vq->log_used with vq->mutex

...

Linux Distros Unpatched Vulnerability : CVE-2021-2402

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Locking. Supported versions that are affected are 8.0.25 and prior. Easily...

can: bcm: add locking for bcm_op runtime updates

...

Linux Distros Unpatched Vulnerability : CVE-2025-37907

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/ivpu: Fix locking order in ivpujobsubmit Fix deadlock in job submission and abort handling. When a thread aborts currently executing jobs due to a fault, ...

Linux Module DoS

The vulnerability in the drivers/infiniband/hw/mlx5/mr.c module of Linux operating systems is related to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux drm_sched_entity_kill() DoS

The vulnerability of the drmschedentitykill function in the Linux operating system is related to insufficient locking of resources. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

Linux dma_buf_vmap Heap Buffer Overflow DoS

The vulnerability of the dmabufvmap function in the Linux operating system is related to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-1221: Improper Locking

A Zigbee Radio Co-Processor RCP, which is using SiLabs EmberZNet Zigbee stack, was unable to send messages to the host system CPCd due to heavy Zigbee traffic, resulting in a Denial of Service DoS attack, Only hard reset will bring the device to normal operation...

Linux kernel ODP Heap Buffer Overflow DoS

The vulnerability of the xastore and xaerase functions in the drivers/infiniband/hw/mlx5/odp.c module of Linux operating systems is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause service failures...

Linux USB Driver Heap Buffer Overflow DoS

The vulnerability in the drivers/usb/chipidea/udc.c module of Linux operating systems is related to incorrect operation of the USB interface. This occurs regardless of whether the USB device controller is disabled, due to improper locking of resources. Exploiting this vulnerability can allow an...

CVE-2025-38477

In the Linux kernel, the following vulnerability has been resolved: net/sched: schqfq: Fix race condition on qfqaggregate A race condition can occur when 'agg' is modified in qfqchangeagg called during qfqenqueue while other threads access it concurrently. For example, qfqdumpclass may trigger a...

kernel: rcu-tasks: Avoid pr_info() with spin lock in cblist_init_generic()

A locking violation was found in the Linux kernel RCU-tasks subsystem's callback list initialization. During system boot, the initialization code calls prinfo while holding the rtp-cbsgbllock spinlock, causing a potentially sleeping function to be called in atomic context, which results in kernel...

CVE-2025-38491: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: mptcp: make fallback action and fallback decision atomic Syzkaller reported the following splat: WARNING: CPU: 1 PID: 7704 at net/mptcp/protocol.h:1223 mptcpdofallback net/mptcp/protocol.h:1223 inline WARNING: CPU: 1 PID: 7704 at...

Linux kernel ep_poll() DoS

The vulnerability of the eppoll function in the Linux operating system’s kernel is related to improper resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Kernel macb_halt_tx() DoS

The vulnerability of the macbhalttx function in the Linux operating system’s kernel is related to mutual locking of execution threads. Exploiting this vulnerability can allow an attacker to trigger a service failure...

Linux kernel find_lowest_rq function DoS

The vulnerability of the findlowestrq and findlocklowestrq functions in the Linux operating system’s kernel is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux kernel r15 DoS

The vulnerability of component r15 in the Linux operating system’s kernel is related to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE CVE-2025-38372

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling xastore and xaerase were used without holding the proper lock, which led to a lockdep warning due to unsafe RCU usage. This patch replaces them with xastore and xaerase...

DEBIAN-CVE-2025-38459

In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix infinite recursive call of clippush. syzbot reported the splat below. 0 This happens if we call ioctlATMARPMKIP more than once. During the first call, clipmkip sets clippush to vcc-push, and the second call copies ...

DEBIAN-CVE-2025-38388

In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Replace mutex with rwlock to avoid sleep in atomic context The current use of a mutex to protect the notifier hashtable accesses can lead to issues in the atomic context. It results in the below kernel warnings:...