5915 matches found
CVE-2026-23362: Improper Locking
In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix locking for bcmop runtime updates Commit c2aba69d0c36 "can: bcm: add locking for bcmop runtime updates" added a locking for some variables that can be modified at runtime when updating the sending bcmop with a new...
Linux kernel RCE
The vulnerability of the nocbcbwait function in the kernel/rcu/treenocb.h subsystem for synchronization in multi-threaded Linux kernel systems is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to cause service failures...
SMC Protocol Heap Buffer Overflow DoS
The vulnerability of the smclgrterminate function in the net/smc/smccore.c module, part of the SMC protocol family in Linux kernel, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...
rtl8723bs kernel DoS
The vulnerability of the rtwjointimeouthandler function in the drivers/staging/rtl8723bs/core/rtwmlme.c module relates to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to trigger a service failure...
STMicroelectronics Ethernet Adapter Buffer Overflow DoS
The vulnerability of the stmmacadjusttime function in the drivers/net/ethernet/stmicro/stmmac/stmmacptp.c file of the Ethernet adapter support driver from STMicroelectronics’ operating system Linux is related to improper locking of resources. Exploiting this vulnerability could allow an attacker ...
Linux kernel Block Buffer Overflow DoS
The vulnerability of the adjustinuseandcalccost function in the block/blk-iocost.c module, which supports the block-level kernel in the Linux operating system, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to trigger a service failure...
Linux Distros Unpatched Vulnerability : CVE-2026-23362
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: bcm: fix locking for bcmop runtime updates Commit c2aba69d0c36 can: bcm: add locking for bcmop runtime updates added a locking for some variables that can ...
Linux Distros Unpatched Vulnerability : CVE-2026-23292
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: target: Fix recursive locking in configfsopenfile In flushwritebuffer, &p-fragsem is acquired and then the loaded store function is called, which, here, i...
CVE-2026-23292: Uncontrolled Recursion
In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix recursive locking in configfsopenfile In flushwritebuffer, &p-fragsem is acquired and then the loaded store function is called, which, here, is targetcoreitemdbrootstore. This function called filpopen, following...
Linux Kernel Security Vulnerabilities
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from recursive locking and may lead to deadlocks...
Parse Server: MFA recovery code single-use bypass via concurrent requests
Impact An attacker who obtains a user's password and a single MFA recovery code can reuse that recovery code an unlimited number of times by sending concurrent login requests. This defeats the single-use design of recovery codes. The attack requires the user's password, a valid recovery code, and...
GHSA-2299-GHJR-6VJP Parse Server: MFA recovery code single-use bypass via concurrent requests
Impact An attacker who obtains a user's password and a single MFA recovery code can reuse that recovery code an unlimited number of times by sending concurrent login requests. This defeats the single-use design of recovery codes. The attack requires the user's password, a valid recovery code, and...
Linux kernel raid_message() Heap Buffer Overflow DoS
The vulnerability of the raidmessage function in the drivers/md/dm-raid.c module of the Linux support for multiple device types RAID and LVM is related to the occurrence of mutual locking. Exploiting this vulnerability can allow an attacker to cause a service failure...
fs/nfsd/vfs.c NFS DoS
The vulnerability of the nfsdrename function in the fs/nfsd/vfs.c module, which is part of the network file system support in Linux kernels, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to cause service failures...
Linux Kernel Heap Buffer Overflow DoS
The vulnerability of the kasanreleasevmalloc function in the mm/kasan/shadow.c module of the Linux operating system is related to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...
Ceph Distributed File System Handle Cap Grant DoS
The vulnerability of the handlecapgrant function in the fs/ceph/caps.c module of the Ceph distributed file system support module for Linux operating systems is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to trigger a service failure...
Nexxt Solutions Nebula 300+ has security vulnerabilities
The Nexxt Solutions Nebula 300+ is a wireless router produced by the Nexxt Solutions company in the United States. Versions of the Nebula 300+ with the software version 12.01.01.37 and earlier contain security vulnerabilities. These vulnerabilities stem from the lack of rate limits on the...
Siemens SIMATIC S7-1500 Improper Locking (CVE-2025-38058)
In the Linux kernel, the following vulnerability has been resolved: legitimizemnt: check for MNTSYNCUMOUNT should be under mountlock ... or we risk stealing final mntput from sync umount - raising mntcount after umount2 has verified that victim is not busy, but before it has set MNTSYNCUMOUNT; in...
CISA Adds Five Known Exploited Vulnerabilities to Catalog
CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-31277link is external Apple Multiple Products Buffer Overflow Vulnerability CVE-2025-32432link is external Craft CMS Code Injection Vulnerability...
Apple Multiple Products Improper Locking Vulnerability
Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability that could allow a malicious application to cause unexpected changes in memory shared between processes...