CVE-2022-49407

CVE-2022-49407 : Linux kernel dlm plock invalid read, fixed in the patch that moves the callback field into struct plock_op and adjusts handling for plock_xop. The issue arose when a sequence (unlock -> send_op -> append to send_list) could lead to a dev_write() path treating a plock_op as ...

CVE-2022-49400 md: Don't set mddev private to NULL in raid0 pers->free

In the Linux kernel, the following vulnerability has been resolved: md: Don't set mddev private to NULL in raid0 pers-free In normal stop process, it does like this: domdstop | mdstop pers-free; mddev-private=NULL | mdfree free mddev mdstop sets mddev-private to NULL after pers-free. The raid...

CVE-2022-49336

The CVE-2022-49336 entry documents a Linux kernel issue in drm/etnaviv where etnaviv_iommu_unmap_gem could unmap a mapping twice if it had already been reaped. The root cause is not checking for a reaped mapping before unmapping, which could corrupt involved data structures; the vulnerability lea...

CVE-2021-47638 ubifs: rename_whiteout: Fix double free for whiteout_ui->data

In the Linux kernel, the following vulnerability has been resolved: ubifs: renamewhiteout: Fix double free for whiteoutui-data 'whiteoutui-data' will be freed twice if space budget fail for rename whiteout operation as following process: renamewhiteout dev = kmalloc whiteoutui-data = dev...

CVE-2021-47638

CVE-2021-47638: In Linux kernel ubifs, rename_whiteout path frees whiteout_ui->data twice in ubifs_free_inode(), causing a double-free (KASAN). Root cause: during rename_whiteout, whiteout_ui->data is freed once and later freed again in ubifs_free_inode() via kfree(ui->data). Impact: loc...

CVE-2021-47638

In the Linux kernel, the following vulnerability has been resolved: ubifs: renamewhiteout: Fix double free for whiteoutui-data 'whiteoutui-data' will be freed twice if space budget fail for rename whiteout operation as following process: renamewhiteout dev = kmalloc whiteoutui-data = dev...

CVE-2021-47639

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Zap all roots when unmapping gfn range in TDP MMU Zap both valid and invalid roots when zapping/unmapping a gfn range, as KVM must ensure it holds no references to the freed page after returning from the unmap...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a possible invalid read of dlm during a plock operation...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the possibility that sysctlfwmarkreflect may be concurrently modified when read...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from the clkdisable operation in mtkiommuremove in the mediatek iommu module...

PT-2025-8635 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A deadlock can occur in the Linux kernel when an unmount operation is initiated while an async block group reclaim task is running and relocating a data block group. This happens becau...

CVE-2025-1675

The function dnscopyqname in dnspack.c performs performs a memcpy operation with an untrusted field and does not check if the source buffer is large enough to contain the copied data...

CVE-2025-1675 Out of bounds read in dns_copy_qname

The function dnscopyqname in dnspack.c performs performs a memcpy operation with an untrusted field and does not check if the source buffer is large enough to contain the copied data...

CVE-2025-1675

CVE-2025-1675 stems from a bounds-check failure in the function dns_copy_qname within dns_pack.c, where a memcpy uses an untrusted source and the code does not verify that the source buffer is large enough to contain the copied data. Multiple sources (NVD, Red Hat, CVE lists, and Zephyr-related d...

CVE-2023-52926 io_uring/rw: split io_read() into a helper

In the Linux kernel, the following vulnerability has been resolved: IORINGOPREAD did not correctly consume the provided buffer list when read i/o returned 0 except for -EAGAIN and -EIOCBQUEUED return. This can lead to a potential use-after-free when the completion via iorwdone runs at separate...

Vtiger CRM 代码注入漏洞

Vtiger CRM is a set of customer relationship management system CRM based on SugarCRM developed by Vtiger, Inc. in the United States. The management system provides functions such as managing, collecting and analyzing customer information. A code injection vulnerability exists in Vtiger CRM versio...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from IORINGOPREAD not properly consuming the supplied buffer list, resulting in memory reuse after release...

Directus 安全漏洞

Directus is a real-time Api and application dashboard open-sourced by Directus. It is used to manage Sql database content. A security vulnerability exists in Directus versions prior to 11.1.2, which stems from the fact that if an update operation has two overlapping policies that allow access to...

PT-2025-7620

Name of the Vulnerable Software and Affected Versions UD-LT2 firmware versions 1.00.008 SE and earlier Description An issue exists with the improper neutralization of special elements used in an OS command, allowing for the execution of arbitrary OS commands. This can occur if an attacker logs in...

WordPress plugin s2Member Pro 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...