5927 matches found
CVE-2025-48618
In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to improper locking. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48618
In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to improper locking. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48618
CVE-2025-48618 is an Android framework elevation-of-privilege vulnerability. In CommandParamsFactory.java, processLaunchBrowser could allow a browser interaction from the lockscreen due to improper locking, enabling physical escalation of privilege without user interaction. Impact is described as...
CVE-2023-53760
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: mcq: Fix &hwq-cqlock deadlock issue When ufshcderrhandler is executed, CQ event interrupt can enter waiting for the same lock. This can happen in ufshcdhandlemcqcqevents and also in ufsmtkmcqintr. The following...
UBUNTU-CVE-2023-53759
In the Linux kernel, the following vulnerability has been resolved: HID: hidraw: fix data race on device refcount The hidrawopen function increments the hidraw device reference counter. The counter has no dedicated synchronization mechanism, resulting in a potential data race when concurrently...
CVE-2023-53764 wifi: ath12k: Handle lock during peer_id find
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Handle lock during peerid find ath12kpeerfindbyid requires that the caller hold the ab-baselock. Currently the WBM error path does not hold the lock and calling that function, leads to the following lockdepassertin...
CVE-2025-48618: Improper Locking
In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to improper locking. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2025-49447
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists within the Bluetooth implementation in the Linux kernel, specifically in the hci cmd sync dequeue once function. This function performs a lookup and cancellation ...
Google Android security vulnerabilities
Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by attackers to cause an elevation of physical privileges...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an incorrect handling of the locking mechanism, which could lead to a race condition...
Linux kernel Btrfs DoS
The vulnerability in the extentfiemap function within the fs/btrfs/extentio.c module of the Linux kernel’s btrfs file system is related to improper resource locking. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
Linux block/blk-zoned.c Heap Buffer Overflow DoS
The vulnerability of the diskzonewplughandleerror function in the block/blk-zoned.c module, which supports the block-level kernel in Linux operating systems, is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause service failures...
Linux kernel Bluetooth Heap Buffer Overflow DoS
The vulnerability of the isoconnbigsync function in the net/bluetooth/iso.c module of the Linux kernel’s Bluetooth subsystem is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel cgroup cpuset write resmask DoS
The vulnerability of the cpusetwriteresmask function in the kernel/cgroup/cpuset.c module of the Linux operating system is related to improper locking of resources. Exploiting this vulnerability can allow a attacker to cause service failures...
Linux rtl8150_start_xmit() DoS
The vulnerability of the rtl8150startxmit function in the Linux operating system is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux Distros Unpatched Vulnerability : CVE-2023-53760
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: ufs: core: mcq: Fix &hwq-cqlock deadlock issue When ufshcderrhandler is executed, CQ event interrupt can enter waiting for the same lock. This can happen...
Linux SMB Client Heap Buffer Overflow DoS
The vulnerability of the cleandemultiplexinfo function in the fs/smb/client/connect.c module of the SMB client support library in Linux operating systems is related to improper resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2025-40280
CVE-2025-40280 concerns the Linux kernel tipc subsystem. A use-after-free in tipc_mon_reinit_self() occurs when iterating over tipc_net(net)->monitors[] without holding RTNL, even though the array is RTNL-protected. This can lead to a slab-use-after-free condition observed under KASAN. The iss...
CVE-2025-40231
In the Linux kernel, the following vulnerability has been resolved: vsock: fix lock inversion in vsockassigntransport Syzbot reported a potential lock inversion deadlock between vsockregistermutex and sklock-AFVSOCK when vsocklinger is called. The issue was introduced by commit 687aa0c5581b "vsoc...
