5915 matches found
Linux Kernel ksmbd Tree Connection Race Condition Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Kernel. Authentication is not required to exploit this vulnerability, but only systems with ksmbd enabled are vulnerable. The specific flaw exists within the processing of SMB2TREEDISCONNECT...
Linux Kernel ksmbd Session User Object Race Condition Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Linux Kernel. Authentication is not required to exploit this vulnerability, but only systems with ksmbd enabled are vulnerable. The specific flaw exists within the processing of SMB2QUERYINFO...
Linux Kernel ksmbd Session Race Condition Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Kernel. Authentication is not required to exploit this vulnerability, but only systems with ksmbd enabled are vulnerable. The specific flaw exists within the processing of SMB2SESSIONSETUP and...
Linux Kernel vmwgfx Driver Race Condition Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handlin...
kernel: Recursive locking violation in usb-storage that can cause the kernel to deadlock
An incorrect access control flaw was found in the Linux kernel USB core subsystem. When attaching a malicious usb device, the recursive locking violation in usb-storage can cause the kernel to deadlock. This issue could allow a local user to crash the system...
kernel: USB: core: Prevent nested device-reset calls
In the Linux kernel, the following vulnerability has been resolved: USB: core: Prevent nested device-reset calls Automatic kernel fuzzing revealed a recursive locking violation in usb-storage: ============================================ WARNING: possible recursive locking detected 5.18.0 3 Not...
Bad debt auctions can be DoSed forever
Lines of code Vulnerability details Vulnerability Details For function Shortfall::placeBid in shortfall contract on L183 and L190 , the previous highest bidder’s funds stored in the shortfall contract has to be sent back to the bidder. This operation has to be successful before any new bid can be...
N_GSM driver Heap Buffer Overflow DoS
The vulnerability of the gsmldwrite function in the drivers/tty/ngsm.c file of the NGSM driver for the Linux operating system is related to the use of an incorrect locking type. Exploiting this vulnerability could allow a attacker to cause a service failure...
Linux uring msg_ring Heap Buffer Overflow Privilege Escalation
The vulnerability of the iocqringeventoverflow function in the uring/msgring.c module of the Linux operating system’s kernel is related to improper resource locking. Exploiting this vulnerability can allow an attacker to gain elevated privileges or cause service interruptions...
Linux kernel device-mapper driver Heap Buffer Overflow DoS
The vulnerability of the tableclear function in the drivers/md/dm-ioctl.c file of the Linux kernel’s device-mapper driver is related to recursive locking. Exploiting this vulnerability could allow an attacker to cause a service failure...
OESA-2023-1276 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to...
Linux dpt_i2o driver virt_to_bus Buffer Overflow
The vulnerability of the virttobus/bustovirt function in the dpti2o driver of Linux operating systems is related to improper locking during object operations. Exploiting this vulnerability can allow an attacker to gain increased privileges...
kernel: rxrpc: Fix locking in rxrpc's sendmsg
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix locking in rxrpc's sendmsg Fix three bugs in the rxrpc's sendmsg implementation: 1 rxrpcnewclientcall should release the socket lock when returning an error from rxrpcgetcallslot. 2 rxrpcwaitfortxwindowintr will return...
kernel: Recursive locking violation in usb-storage that can cause the kernel to deadlock
An incorrect access control flaw was found in the Linux kernel USB core subsystem. When attaching a malicious usb device, the recursive locking violation in usb-storage can cause the kernel to deadlock. This issue could allow a local user to crash the system...
kernel: Recursive locking violation in usb-storage that can cause the kernel to deadlock
An incorrect access control flaw was found in the Linux kernel USB core subsystem. When attaching a malicious usb device, the recursive locking violation in usb-storage can cause the kernel to deadlock. This issue could allow a local user to crash the system...
PT-2025-25862 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.18.0 Description: A recursive locking violation was discovered in the Linux kernel's USB storage component. This issue was identified through automatic kernel fuzzing and occurs due to a nested device-reset...
PT-2025-25924 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.16.0-rc6 Description: The issue is related to the rxrpc's sendmsg implementation in the Linux kernel, where three bugs have been identified and fixed. These bugs concern locking mechanisms, specifically the...
CVE-2023-27952
A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.3. An app may bypass Gatekeeper checks...
