PT-2022-30753

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.311 Description The issue is related to event handling soft lockup in iommu/arm-smmu-v3. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-30282

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description The issue is related to event handling in the iommu/arm-smmu-v3 component, which can cause a soft lockup. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2022-29340

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to event handling in the iommu/arm-smmu-v3 component, which can cause a soft lockup. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2022-30594

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue is related to event handling in the iommu/arm-smmu-v3 component, which can cause a soft lockup. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2022-29678

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to event handling soft lockup in iommu/arm-smmu-v3. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-30471

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description The issue is related to event handling in the iommu/arm-smmu-v3 component, which may cause a soft lockup. The actual impact and attack plausibility have not yet been proven. Recommendations F...

JPEGLock lockups overwrite previous data

Lines of code Vulnerability details Impact If a user calls NFTVault.finalizePendingNFTValueETH a second time without first calling JPEGLock.unlock to recover their previous lockup, their balance will be overwritten leaving the previous lockup balance unrecoverable. Proof of Concept POC by adding...

PT-2022-7506

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a deadlock in the Linux kernel's vmscan component, which can cause a soft lockup. This occurs when kcompactd is not rescheduling on a CPU while a task is waiting...

requestWithdraw without obligation to withdraw allow underwriter to avoid payout

Handle gzeon Vulnerability details Impact To prevent withdrawal front-running, a lockup period is set between withdrawal request and withdrawal. However, there are no obligation to withdraw after the lockup period and the capital will keep earning premium during lockup. A strategy for underwriter...

PT-2025-8475

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A hard lockup issue in the Linux kernel has been identified, specifically in the lpfc driver. The problem occurs when attempting to log a message with LOG TRACE EVENT, resulting in a...

PT-2024-11502

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock in the error handler of the Linux kernel's scsi: ufs component has been resolved. The deadlock occurs when all tags are allocated and the SCSI error handler calls ufshcd eh ho...

UVI-2021-1001768 cifs: Fix soft lockup during fsstress

cifs: Fix soft lockup during fsstress This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.9 by commit 9f6c7aff21f81ae8856da1f63847d1362d523409...

GSD-2021-1001768 cifs: Fix soft lockup during fsstress

cifs: Fix soft lockup during fsstress This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.9 by commit 9f6c7aff21f81ae8856da1f63847d1362d523409...

PT-2021-30233

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.9 Description A potential issue in the cifs component of the Linux Kernel may cause a soft lockup during fsstress. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2021-26238

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.9 Description: A potential issue in the cifs component of the Linux Kernel may cause a soft lockup during fsstress. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2024-11356

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A soft lockup issue has been resolved in the Linux kernel, specifically in the cifs component, which occurs during fsstress and causes the system to hang. The issue is characterized by a...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2021-9450)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9450 advisory. 5.4.17-2102.205.7.2 - btrfs: fix race between marking inode needs to be logged and log syncing Filipe Manana Orabug: 33349276 5.4.17-2102.205.7.1 -...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

drivers/net/ethernet/xilinx/ll_temac_main.c in the Linux kernel before 5.12.13 allows remote attackers to cause a denial of service (buffer overflow and lockup) by sending heavy network traffic for about ten minutes.

...

AZL-6591 CVE-2021-38207 affecting package kernel for versions less than 5.10.78.1-1

drivers/net/ethernet/xilinx/lltemacmain.c in the Linux kernel before 5.12.13 allows remote attackers to cause a denial of service buffer overflow and lockup by sending heavy network traffic for about ten minutes...