CVE-2025-22098

CVE-2025-22098 affects the Linux kernel’s DRM for ZynqMP DP. The issue is a deadlock in zynqmp_dp_ignore_hpd_set caused by attempting to lock the same mutex twice; the fix is to lock and unlock it properly (instead of locking twice). The vulnerability was identified by the Clang thread-safety ana...

CVE-2024-58096

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: add srng-lock for ath11khalsrng in monitor mode ath11khalsrng should be used with srng-lock to protect srng data. For ath11kdprxmondestprocess and ath11kdpfullmonprocessrx, they use ath11khalsrng for many times but...

Linux pinctrl_register_one_pin() DoS

The vulnerability of the pinctrlregisteronepin function in the Linux operating system is related to insufficient locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux DRI Driver Heap Buffer Overflow DoS

The vulnerability of the xedrmclientaddbo function in the DRI driver of the Linux operating system’s kernel is related to insufficient resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel DRI Heap Buffer Overflow DoS

The vulnerability of the showmeminfo function in the Linux kernel’s Direct Rendering Infrastructure DRI support driver is related to insufficient resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux qcuefi_set_reference Heap Buffer Overflow DoS

The vulnerability of the qcuefisetreference function in the Linux operating system’s kernel is related to insufficient locking of resources. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Linux Btrfs Heap Buffer Overflow DoS

The vulnerability of the cowfilerange function in the fs/btrfs/inode.c module of the Linux operating system is related to improper resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux SMB2 Lock DoS

The vulnerability of the smb2lock function in the fs/smb/server/smb2pdu.c module of the Linux operating system is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause service failures...

CVE-2025-22077: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: Revert "smb: client: fix TCP timers deadlock after rmmod" This reverts commit e9f2517a3e18a54a3943c098d2226b245d488801. Commit e9f2517a3e18 "smb: client: fix TCP timers deadlock after rmmod" is intended to fix a null-ptr-deref in...

CVE-2025-22053: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: net: ibmveth: make vethpoolstore stop hanging v2: - Created a single error handling unlock and exit in vethpoolstore - Greatly expanded commit message with previous explanatory-only text Summary: Use rtnlmutex to synchronize...

CVE-2025-22127: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix potential deadloop in preparecompressoverwrite Jan Prusakowski reported a kernel hang issue as below: When running xfstests on linux-next kernel 6.14.0-rc3, 6.12 I encountered a problem in generic/475 test where fsstres...

CVE-2025-23134: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Don't take registermutex with copyfrom/touser The infamous mmaplock taken in copyfrom/touser can be often problematic when it's called inside another mutex, as they might lead to deadlocks. In the case of ALSA timer...

CVE-2024-58248

CVE-2024-58248 affects nopCommerce prior to 4.80.0 (public notes reference up to 4.90.1) where order placement lacks locking, enabling a race condition that can allow duplicate gift card redemption. Public advisories (NVD/Red Hat/OSV/Snyk) confirm the issue and cite a remediation to upgrade to ve...

NFSv4 DoS

The vulnerability of the NFSv4 component in the Linux operating system is related to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

ALSA Kernel Component DoS

The vulnerability of the ALSA kernel component in Linux operating systems is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

NFSv4 Kernel Component DoS

The vulnerability of the NFSv4 “close” kernel component in Linux operating systems is related to the mutual locking of execution threads. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Linux Bluetooth DoS

The vulnerability of the Linux operating system’s Bluetooth kernel component is related to improper locking of resources. Exploiting this vulnerability can allow a hacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the dosysperfeventopen function in the kernel/events/core.c module of the Linux operating system is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to compromise the integrity of protected information...

Linux max3100.c DoS

The vulnerability of the max3100.c component in the Linux operating system’s kernel is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

X.Org Server Component Buffer Overflow DoS

The vulnerability of the dix/devices.c component in the X Window System X.Org Server implementation is related to improper resource locking. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...