679 matches found
AZL-67434 CVE-2025-39826 affecting package kernel for versions less than 6.6.104.2-1
In the Linux kernel, the following vulnerability has been resolved: net: rose: convert 'use' field to refcountt The 'use' field in struct roseneigh is used as a reference counter but lacks atomicity. This can lead to race conditions where a roseneigh structure is freed while still being reference...
UBUNTU-CVE-2025-39827
In the Linux kernel, the following vulnerability has been resolved: net: rose: include node references in roseneigh refcount Current implementation maintains two separate reference counting mechanisms: the 'count' field in struct roseneigh tracks references from rosenode structures, while the 'us...
CVE-2025-39827
CVE-2025-39827 affects the Linux kernel’s rose networking path. The issue arises from two separate reference counting paths for rose_neigh: a numeric count from rose_node structures and a use/refcount_t from rose_sock. The patch merges these into a single lifecycle by incrementing/decrementing ro...
CVE-2025-39827 net: rose: include node references in rose_neigh refcount
In the Linux kernel, the following vulnerability has been resolved: net: rose: include node references in roseneigh refcount Current implementation maintains two separate reference counting mechanisms: the 'count' field in struct roseneigh tracks references from rosenode structures, while the 'us...
CVE-2025-39826 net: rose: convert 'use' field to refcount_t
In the Linux kernel, the following vulnerability has been resolved: net: rose: convert 'use' field to refcountt The 'use' field in struct roseneigh is used as a reference counter but lacks atomicity. This can lead to race conditions where a roseneigh structure is freed while still being reference...
CVE-2025-39826
CVE-2025-39826 : In the Linux kernel, the net/rose_neigh struct’s use field was a non-atomic reference counter, risking use-after-free if the rose_neigh is freed while still referenced. The fix converts the field from unsigned short to refcount_t and switches code paths to rose_neigh_hold() and r...
CVE-2025-39826 net: rose: convert 'use' field to refcount_t
In the Linux kernel, the following vulnerability has been resolved: net: rose: convert 'use' field to refcountt The 'use' field in struct roseneigh is used as a reference counter but lacks atomicity. This can lead to race conditions where a roseneigh structure is freed while still being reference...
CVE-2025-39827: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net: rose: include node references in roseneigh refcount Current implementation maintains two separate reference counting mechanisms: the 'count' field in struct roseneigh tracks references from rosenode structures, while the 'us...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a lack of atomicity in the use field of the roseneigh structure, which could lead to post-release reuse issu...
Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20552)
The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20552 advisory. - usb: typec: displayport: Fix potential deadlock Andrei Kuchynski Orabug: 38309912 CVE-2025-38404 - i2c/designware: Fix an initialization issue...
Malicious code in myth-rose-mqm027-project (npm)
The package myth-rose-mqm027-project was found to contain malicious code...
MAL-2025-45254 Malicious code in myth-rose-mqm027-project (npm)
The package myth-rose-mqm027-project was found to contain malicious code...
rose: fix dangling neighbour pointers in rose_rt_device_down()
...
Linux Distros Unpatched Vulnerability : CVE-2023-51782
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 6.6.8. roseioctl in net/rose/afrose.c has a use- after-free because of a roseaccept race condition...
Linux Distros Unpatched Vulnerability : CVE-2025-38377
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rose: fix dangling neighbour pointers in rosertdevicedown There are two bugs in rosertdevicedown that can cause use-after-free: 1. The loop bound t-count is...
Malicious code in ant-rose-klv704-project (npm)
The package ant-rose-klv704-project was found to contain malicious code...
Malicious code in dandelion-rose-xhe828-project (npm)
The package dandelion-rose-xhe828-project was found to contain malicious code...
Malicious code in fox-rose-jzq209-project (npm)
The package fox-rose-jzq209-project was found to contain malicious code...