4069 matches found
Linux kernel bpf ringbuf DoS
The vulnerability in the kernel/bpf/ringbuf.c component of the Linux operating system is related to overflow in the stack buffer. Exploiting this vulnerability can allow an attacker to cause a service failure...
Debian dsa-5956 : jami - security update
The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5956 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5956-1 [email protected] https://www.debian.org/security/ Aron X...
Debian: Security Advisory (DSA-5956-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Important: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: btrfs: check folio mapping after unlock in relocateonefolio CVE-2024-56758 In the Linux kernel, the following vulnerability has been resolved: hrtimers: Force migrate away hrtimers queued after CPUHPAPHRTIMERSDYIN...
SUSE CVE-2022-49961
In the Linux kernel, the following vulnerability has been resolved: bpf: Do markchainprecision for ARGCONSTALLOCSIZEORZERO Precision markers need to be propagated whenever we have an ARGCONST style argument, as the verifier cannot consider imprecise scalars to be equivalent for the purposes of...
SUSE CVE-2025-38048
In the Linux kernel, the following vulnerability has been resolved: virtioring: Fix data race by tagging eventtriggered as racy for KCSAN syzbot reports a data-race when accessing the eventtriggered, here is the simplified stack when the issue occurred:...
UBUNTU-CVE-2022-49961
In the Linux kernel, the following vulnerability has been resolved: bpf: Do markchainprecision for ARGCONSTALLOCSIZEORZERO Precision markers need to be propagated whenever we have an ARGCONST style argument, as the verifier cannot consider imprecise scalars to be equivalent for the purposes of...
DEBIAN-CVE-2025-38048
In the Linux kernel, the following vulnerability has been resolved: virtioring: Fix data race by tagging eventtriggered as racy for KCSAN syzbot reports a data-race when accessing the eventtriggered, here is the simplified stack when the issue occurred:...
UBUNTU-CVE-2025-38048
In the Linux kernel, the following vulnerability has been resolved: virtioring: Fix data race by tagging eventtriggered as racy for KCSAN syzbot reports a data-race when accessing the eventtriggered, here is the simplified stack when the issue occurred:...
CVE-2025-38048
In the Linux kernel, the following vulnerability has been resolved: virtioring: Fix data race by tagging eventtriggered as racy for KCSAN syzbot reports a data-race when accessing the eventtriggered, here is the simplified stack when the issue occurred:...
编号撤回
ring is a library by Brian Smith, an individual developer. This CVE number has been withdrawn...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the presence of data contention in eventtriggered in virtioring...
allyaudio (>=0.1.0, <=0.4.0), ambisonic (>=0.4.0, <=0.4.1) +131 more potentially affected by unknown CVE via slice-ring-buffer (0.3.4)
slice-ring-buffer CARGO version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on slice-ring-buffer and may be impacted: - allyaudio =0.1.0, =0.4.0, =0.0.9, =0.0.3, =0.0.1, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.0.0, =0.1.0 - bevykiraaudio 0.4.0 and mo...
RUSTSEC-2025-0044 Four unique double-free vulnerabilities triggered via safe APIs
The crate slice-ring-buffer was developed as a fork of slice-deque to continue maintenance and provide security patches, since the latter has been officially unmaintained RUSTSEC-2020-0158. While slice-ring-buffer has addressed some previously reported memory safety issues inherited from its fork...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: Wifi: ath12k: Fixed an invalid entry fetch in ath12kdpmonsrngprocess. Currently, ath12kdpmonsrngprocess uses ath12khalsrngsrcgetnextentry to fetch the next entry from the destination ring. This is incorrect because...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: iouring/kbuf: Reallocate the buf lists upon upgrade. The function IORINGREGISTERPBUFRING can reuse an old struct iobufferlist if it was created for a legacy selected buffer and has been emptied. This violates the requirement that...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: ublk: The handling of recovery and reissue in ublkabortqueue has been fixed. The commit 8284066946e6 “ublk: grabbing the request reference when the request is handled by userspace” does not grab the request reference in case of...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: ptrring: Do not block hard interrupts in ptrringresizemultiple. Jakub added a lockdepassertnohardirq check in pagepoolputpage to increase test coverage. syzbot identified a crash caused by hard IRQ blocking in...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: Ring-Buffer: Fixed buffer locking in ringbuffersubbuforderset. Expanded the critical section in ringbuffersubbuforderset to ensure that error handling occurs with a per-buffer mutex held, thereby preventing list corruption and...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: Ring-Buffer: Do not trigger WARNON due to a commitoverrun. When reading a memory-mapped buffer, the reader page is simply swapped out with the last page written to the write buffer. If the reader page is the same as the commit...