CVE-2025-21893 keys: Fix UAF in key_put()

In the Linux kernel, the following vulnerability has been resolved: keys: Fix UAF in keyput Once a key's reference count has been reduced to 0, the garbage collector thread may destroy it at any time and so keyput is not allowed to touch the key after that point. The most keyput is normally allow...

Vulnerability of the devm_spi_alloc_master() function in the drivers/spi/spi.c module – The Linux kernel’s SPI device driver support allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the devmspiallocmaster function in the drivers/spi/spi.c module – The Linux kernel’s SPI device driver relies on the reclamation of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the `new_stream_audio` function in the `fftools/ffmpeg_mux_init.c` file of the FFmpeg multimedia library allows a hacker to execute arbitrary code.

The vulnerability of the newstreamaudio function in the fftools/ffmpegmuxinit.c file of the FFmpeg multimedia library is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Telephony Server component for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Telephony Server component for Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

SUSE CVE-2022-49547

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock between concurrent dio writes when low on free data space When reserving data space for a direct IO write we can end up deadlocking if we have multiple tasks attempting a write to the same file range, there ar...

The vulnerability of the Direct Show Remote component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Direct Show Remote component for Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse issue when using pagepool for page fragment reclamation...

The vulnerability of Linux kernel’s LED components, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel LED component is related to a memory reclamation error in the ledtriggerset function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Resilient File System (ReFS) Deduplication Service in Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Resilient File System ReFS Deduplication Service in Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Resilient File System (ReFS) Deduplication Service in Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Resilient File System ReFS Deduplication Service in Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Azure Linux 3.0 Security Update: kernel (CVE-2024-47713)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47713 advisory. - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: use two-phase skb...

The vulnerability of the rkmpp_retrieve_frame function in the libavcodec/rkmppdec.c file of the FFmpeg multimedia library allows a hacker to execute arbitrary code.

The vulnerability of the rkmppretrieveframe function in the libavcodec/rkmppdec.c file of the FFmpeg multimedia library is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2024-53160 rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu

In the Linux kernel, the following vulnerability has been resolved: rcu/kvfree: Fix data-race in modtimer / kvfreecallrcu KCSAN reports a data race when access the krcp-monitorwork.timer.expires variable in the scheduledelayedmonitorwork function: BUG: KCSAN: data-race in modtimer / kvfreecallrcu...

OESA-2024-2533 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: use two-phase skb reclamation in ieee80211dostop Since 'devqueuexmit' should be called with interrupts enabled, the following backtrace:...

OESA-2024-2536 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: use two-phase skb reclamation in ieee80211dostop Since 'devqueuexmit' should be called with interrupts enabled, the following backtrace:...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-47713)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47713 advisory. - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: use two-phase skb...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50229)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50229 advisory. - In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential deadlock with newl...

The vulnerability of the Native Client component of the Microsoft SQL Server database management system allows a hacker to execute arbitrary code.

The vulnerability of Native Client component in Microsoft SQL Server database management system is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability in the client and server implementations of the network file system (NFS) of the OpenBSD operating system allows a perpetrator to influence the confidentiality, integrity, and accessibility of data.

The vulnerability in the client and server implementations of the network file system NFS in the OpenBSD operating system is related to a memory reclamation error. Exploiting this vulnerability allows an attacker to influence the confidentiality, integrity, and accessibility of systems...

The vulnerability in the implementation of the Server Message Block (SMBv3) network protocol on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Server Message Block SMBv3 network protocol implementation in Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...