Lucene search
+L

4580 matches found

OSV
OSV
added 2025/12/16 3:6 p.m.4 views

CVE-2025-68304 Bluetooth: hci_core: lookup hci_conn on RX path on protocol side

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: lookup hciconn on RX path on protocol side The hdev lock/lookup/unlock/use pattern in the packet RX path doesn't ensure hciconn is not concurrently modified/deleted. This locking appears to be leftover from...

8.8CVSS6.6AI score
SaveExploits0References5
CVE
CVE
added 2025/12/16 3:6 p.m.28 views

CVE-2025-68304

CVE-2025-68304 concerns the Linux kernel Bluetooth path. The issue occurs in the RX path of HCI protocol handling where the hci_conn object may be concurrently modified/deleted while still being looked up, enabling a use-after-free in certain code paths. The bug was addressed by moving the lookup...

8.8CVSS6.3AI score0.00202EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/16 3:6 p.m.4 views

CVE-2025-68285 libceph: fix potential use-after-free in have_mon_and_osd_map()

In the Linux kernel, the following vulnerability has been resolved: libceph: fix potential use-after-free in havemonandosdmap The wait loop in cephopensession can race with the client receiving a new monmap or osdmap shortly after the initial map is received. Both cephmonchandlemap and handleonem...

9.8CVSS6.2AI score
SaveExploits0References10
OSV
OSV
added 2025/12/16 2:15 p.m.8 views

UBUNTU-CVE-2025-68185

In the Linux kernel, the following vulnerability has been resolved: nfs4setupreaddir: insufficient locking for -dparent-dinode dereferencing Theoretically it's an oopsable race, but I don't believe one can manage to hit it on real hardware; might become doable on a KVM, but it still won't be easy...

5.9AI score0.00188EPSS
SaveExploits0References36
UbuntuCve
UbuntuCve
added 2025/12/16 2:15 p.m.16 views

CVE-2025-68185

In the Linux kernel, the following vulnerability has been resolved: nfs4setupreaddir: insufficient locking for -dparent-dinode dereferencing Theoretically it's an oopsable race, but I don't believe one can manage to hit it on real hardware; might become doable on a KVM, but it still won't be easy...

6AI score0.00188EPSS
SaveExploits0References35
UbuntuCve
UbuntuCve
added 2025/12/16 2:15 p.m.11 views

CVE-2025-68202

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix unsafe locking in the scxdumpstate For built with CONFIGPREEMPTRT=y kernels, the dumplock will be converted sleepable spinlock and not disable-irq, so the following scenarios occur: inconsistent IN-HARDIRQ-W -...

5.7AI score0.00176EPSS
SaveExploits0References10
OSV
OSV
added 2025/12/16 2:15 p.m.6 views

UBUNTU-CVE-2025-68202

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix unsafe locking in the scxdumpstate For built with CONFIGPREEMPTRT=y kernels, the dumplock will be converted sleepable spinlock and not disable-irq, so the following scenarios occur: inconsistent IN-HARDIRQ-W -...

5.7AI score0.00176EPSS
SaveExploits0References11
Cvelist
Cvelist
added 2025/12/16 1:48 p.m.37 views

CVE-2025-68202 sched_ext: Fix unsafe locking in the scx_dump_state()

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix unsafe locking in the scxdumpstate For built with CONFIGPREEMPTRT=y kernels, the dumplock will be converted sleepable spinlock and not disable-irq, so the following scenarios occur: inconsistent IN-HARDIRQ-W -...

0.00176EPSS
SaveExploits0References3
CVE
CVE
added 2025/12/16 1:43 p.m.27 views

CVE-2025-68185

The CVE-2025-68185 entry concerns the Linux kernel vulnerability nfs4_setup_readdir() with insufficient locking when dereferencing ->d_parent->d_inode. The issue is described as a theoretically oopsable race that is unlikely to be exploitable on real hardware, though may be possible under K...

6.1AI score0.00188EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2025/12/16 1:43 p.m.44 views

CVE-2025-68185 nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing

In the Linux kernel, the following vulnerability has been resolved: nfs4setupreaddir: insufficient locking for -dparent-dinode dereferencing Theoretically it's an oopsable race, but I don't believe one can manage to hit it on real hardware; might become doable on a KVM, but it still won't be easy...

0.00188EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.12 views

编号撤回

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the scsihostbusy trigger regression, which could lead to SRCU locking issues...

6.1AI score0.00032EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2025/12/16 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-68202

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - schedext: Fix unsafe locking in the scxdumpstate For built with CONFIGPREEMPTRT=y kernels, the dumplock will be converted sleepable spinlock and not disable-ir...

5.9AI score0.00176EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.15 views

编号撤回

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an inconsistent locking state that could lead to a deadlock...

6AI score0.00024EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/12/16 12:0 a.m.5 views

The vulnerability of the sg_finish_rem_req() function in the drivers/scsi/sg.c module of the Linux SCSI device support driver allows a hacker to cause a service failure.

The vulnerability of the sgfinishremreq function in the drivers/scsi/sg.c module of the Linux SCSI device support driver relates to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause service failures...

7CVSS5.9AI score0.00197EPSS
SaveExploits0References15Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/12/16 12:0 a.m.8 views

The vulnerability of the imx_sc_key_action() function in the drivers/input/keyboard/imx_sc_key.c file of the imx_sc_key keyboard driver module in the Linux operating system’s kernel allows a hacker to corrupt memory.

The vulnerability of the imxsckeyaction function in the drivers/input/keyboard/imxsckey.c module of the imxsckey keyboard driver in the Linux operating system is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to damage memory...

5.5CVSS5.8AI score0.00141EPSS
SaveExploits0References13Affected Software3
Tenable Nessus
Tenable Nessus
added 2025/12/16 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2025-68185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfs4setupreaddir: insufficient locking for -dparent-dinode dereferencing Theoretically it's an oopsable race, but I don't believe one can manage to hit it on re...

6.5AI score0.00188EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.20 views

PT-2025-51708

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Bluetooth implementation within the Linux kernel, specifically in the hci core component. The issue relates to improper locking mechanisms when handling Bluetooth...

9.8CVSS6.3AI score0.00601EPSS
SaveExploits7References216
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.4 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a lack of locking of dparent-dinode access in nfs4setupreaddir, which could lead to a race condition...

6AI score0.00188EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.5 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an improper locking order of the CHV/BXT+VTD platform GGTT, which could lead to a deadlock...

6AI score0.00171EPSS
SaveExploits0References6
Redos
Redos
added 2025/12/15 12:0 a.m.5 views

ROS-20251215-7301

Vulnerability in mongodb-org related to incorrect resource locking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

5.4CVSS6.7AI score0.00219EPSS
SaveExploits0
Rows per page
Query Builder