Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mptcp: fixed data races related to remoteid. Similar to the previous patch, this issue was addressed by dealing with the data race on remoteid, by adding appropriate ONCE annotations...

CVE-2025-4573

Mattermost versions 10.7.x = 10.7.1, 10.6.x = 10.6.3, 10.5.x = 10.5.4, 9.11.x = 9.11.13 fail to properly validate LDAP group ID attributes, allowing an authenticated administrator with PermissionSysconsoleWriteUserManagementGroups permission to execute LDAP search filter injection via the PUT...

CVE-2025-4573: Improper Neutralization of Special Elements used in an LDAP Query

Mattermost versions 10.7.x = 10.7.1, 10.6.x = 10.6.3, 10.5.x = 10.5.4, 9.11.x = 9.11.13 fail to properly validate LDAP group ID attributes, allowing an authenticated administrator with PermissionSysconsoleWriteUserManagementGroups permission to execute LDAP search filter injection via the PUT...

kernel: mptcp: fix data races on remote_id

A race condition vulnerability was found in the Linux kernel remoteid function. Successful exploitation of the flaw can result in loss of system availability...

CVE-2024-27404

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix data races on remoteid Similar to the previous patch, address the data race on remoteid, adding the suitable ONCE annotations...

CVE-2024-27404

CVE-2024-27404 affects the Linux kernel MPTCP implementation (remote_id data races). The issue was resolved by a patch that adds ONCE annotations to fix the data race. Connected advisories (e.g., Astra Linux) corroborate the same fix in Linux kernel 5.x contexts and describe the remote_id race be...

CVE-2024-27404: Concurrent Execution using Shared Resource with Improper Synchronization

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix data races on remoteid Similar to the previous patch, address the data race on remoteid, adding the suitable ONCE annotations...