Missing Authorization

Overview com.yahoo.elide:elide-core is a library that lets you stand up a GraphQL/JSON-API web service with minimal effort. Affected versions of this package are vulnerable to Missing Authorization in the SortingImpl.getValidSortingRules process. An attacker can infer the values of restricted...

block: fix race between set_blocksize and read paths

...

DEBIAN-CVE-2025-38073

In the Linux kernel, the following vulnerability has been resolved: block: fix race between setblocksize and read paths With the new large sector size support, it's now the case that setblocksize can change iblksize and the folio order in a manner that conflicts with a concurrent reader and cause...

CVE-2025-38073

CVE-2025-38073 is a Linux kernel vulnerability where a race between set_blocksize and read paths was fixed. The ALAS2023-2025-1350 advisory documents the issue and lists updated kernel packages (e.g., kernel-6.1.159-181.297.amzn2023.* for x86_64 and aarch64) as the remediation. Affected platform:...

Astra Linux - уязвимость в linux-6.12

In the Linux kernel, the following vulnerability has been resolved: block: fix race between setblocksize and read paths With the new large sector size support, it's now the case that setblocksize can change iblksize and the folio order in a manner that conflicts with a concurrent reader and cause...