Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an improper locking order of the CHV/BXT+VTD platform GGTT, which could lead to a deadlock...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a lack of locking of dparent-dinode access in nfs4setupreaddir, which could lead to a race condition...

Linux Distros Unpatched Vulnerability : CVE-2025-68185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfs4setupreaddir: insufficient locking for -dparent-dinode dereferencing Theoretically it's an oopsable race, but I don't believe one can manage to hit it on re...

fs/dlm/recoverd.c Heap Buffer Overflow DoS

The vulnerability of the lsrecover function in the fs/dlm/recoverd.c module, which supports Linux kernel-based distributed locking mechanisms, is related to errors in the returned values. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Corruption

The vulnerability of the imxsckeyaction function in the drivers/input/keyboard/imxsckey.c module of the imxsckey keyboard driver in the Linux operating system is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to damage memory...

Linux SCSI sg_finish_rem_req Heap Buffer Overflow DoS

The vulnerability of the sgfinishremreq function in the drivers/scsi/sg.c module of the Linux SCSI device support driver relates to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause service failures...

ROS-20251215-7301

Vulnerability in mongodb-org related to incorrect resource locking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Linux nfs_open_local_fh Heap Buffer Overflow DoS

The vulnerability of the nfsopenlocalfh function in the fs/nfscommon/nfslocalio.c module of the Linux kernel is related to improper resource locking. Exploiting this vulnerability could allow an attacker to cause service failures...

CVE-2025-40219

In the Linux kernel, the following vulnerability has been resolved: PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV Before disabling SR-IOV via config space accesses to the parent PF, sriovdisable first removes the PCI devices representing the VFs. Since commit 9d16947b7583...

CVE-2025-36919

In aoccread of aocchanneldev.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

WordPress Secure Copy Content Protection and Content Locking plugin <= 4.9.2 - Unauthenticated Sensitive Information Exposure via Exposed CSV Export File vulnerability

Unauthenticated Sensitive Information Exposure via Exposed CSV Export File vulnerability discovered by Deadbee - NA in WordPress Plugin Secure Copy Content Protection and Content Locking versions = 4.9.2...

CVE-2025-14159: Cross-Site Request Forgery (CSRF)

The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.9.2. This is due to missing nonce validation on the 'ayssccpresultsexportfile' AJAX action. This makes it possible for unauthenticated...

CVE-2025-14442: Files or Directories Accessible to External Parties

The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to sensitive information exposure due to storage of exported CSV files in a publicly accessible directory with predictable filenames in all versions up to, and including, 4.9.2. This makes it possible for...

WordPress plugin SecureCopy Content Protection and Content Locking has a cross-site request forgeing vulnerability.

WordPress and the WordPress plugin are products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host a personal blog site on a PHP and MySQL based...

CVE-2025-43510: Improper Locking

A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious application may cause unexpect...

PT-2025-50926

The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to sensitive information exposure due to storage of exported CSV files in a publicly accessible directory with predictable filenames in all versions up to, and including, 4.9.2. This makes it possible for...

WordPress plugin SecureCopy Content Protection and Content Locking has security vulnerabilities

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL-based...

CVE-2025-36919

In aoccread of aocchanneldev.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36919

In aoccread of aocchanneldev.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2025-202863

In aoccread of aocchanneldev.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...