Lucene search
+L

90 matches found

Positive Technologies
Positive Technologies
added 2025/12/30 12:00 a.m.13 views

PT-2025-54041

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Move rwsem lock inside snd ctl elem read to prevent UAF Note: this is a fix that works around the bug equivalently as the two upstream commits: 1fa4445f9adf "ALSA: control - introduce snd ctl notify one helper"...

7.9CVSS7.7AI score0.03702EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/12/30 12:00 a.m.7 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992252)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992252 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcildisc,serdev: check percpuinitrwsem failure syzbot is reporting NULL pointer...

5.5CVSS6.5AI score0.00203EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2019-8941

Malware in sbrugna...

4.4CVSS6.6AI score0.00645EPSS
SaveExploits1References8
EUVD
EUVD
added 2025/10/03 8:07 p.m.6 views

EUVD-2022-55330

Malicious code in bioql PyPI...

7.1AI score0.00379EPSS
SaveExploits0References4
OSV
OSV
added 2025/09/17 3:15 p.m.3 views

DEBIAN-CVE-2022-50374

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcildisc,serdev: check percpuinitrwsem failure syzbot is reporting NULL pointer dereference at hciuartttyclose 1, for rcusyncenter is called without rcusyncinit due to hciuartttyopen ignoring percpuinitrwsem failure...

5.5CVSS5.4AI score0.00203EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/17 2:56 p.m.47 views

CVE-2022-50374

CVE-2022-50374 affects the Linux kernel Bluetooth stack (hci_ldisc/hci_serdev). The issue is a missing handling of percpu_init_rwsem() failure, leading to a NULL pointer dereference in hci_uart_tty_close() because rcu_sync_enter() can be called without rcu_sync_init() after hci_uart_tty_open() ig...

5.5CVSS6.2AI score0.00203EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2025/09/17 2:56 p.m.7 views

CVE-2022-50374 Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcildisc,serdev: check percpuinitrwsem failure syzbot is reporting NULL pointer dereference at hciuartttyclose 1, for rcusyncenter is called without rcusyncinit due to hciuartttyopen ignoring percpuinitrwsem failure...

5.5CVSS6.2AI score
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2025/09/17 2:56 p.m.2 views

CVE-2022-50374 Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcildisc,serdev: check percpuinitrwsem failure syzbot is reporting NULL pointer dereference at hciuartttyclose 1, for rcusyncenter is called without rcusyncinit due to hciuartttyopen ignoring percpuinitrwsem failure...

6.2AI score0.00203EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/09/17 12:00 a.m.11 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly handling the percpuinitrwsem failure case, which could result in a null pointer dereference...

5.5CVSS5.8AI score0.00203EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/09/17 12:00 a.m.6 views

PT-2025-38184

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw related to Bluetooth handling. Specifically, a NULL pointer dereference can occur in the hci uart tty close function due to a failure in percpu init...

6.1AI score0.00203EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2025/08/12 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2022-50059

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ceph: don't leak snaprwsem in handlecapgrant When handlecapgrant is called on an IMPORT op,...

7.5CVSS5.4AI score0.00379EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/11 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2023-52480

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix race condition between session lookup and expire Thread A + Thread B...

9.8CVSS5.9AI score0.00485EPSS
SaveExploits0References2
OSV
OSV
added 2025/06/18 11:15 a.m.7 views

UBUNTU-CVE-2022-50059

In the Linux kernel, the following vulnerability has been resolved: ceph: don't leak snaprwsem in handlecapgrant When handlecapgrant is called on an IMPORT op, then the snaprwsem is held and the function is expected to release it before returning. It currently fails to do that in all cases which...

7.5CVSS6AI score0.00379EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/06/18 12:00 a.m.6 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the handlecapgrant function not releasing snaprwsem during an IMPORT operation could lead to a deadlock...

5.5CVSS6.3AI score0.00379EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/06/18 12:00 a.m.16 views

PT-2025-25985 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A issue in the Linux kernel has been identified where the function handle cap grant fails to release the snap rwsem when called on an IMPORT op, potentially leading to a deadlock...

7.8CVSS5.8AI score0.10458EPSS
SaveExploits16References583
Cvelist
Cvelist
added 2025/05/01 2:10 p.m.18 views

CVE-2022-49850 nilfs2: fix deadlock in nilfs_count_free_blocks()

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix deadlock in nilfscountfreeblocks A semaphore deadlock can occur if nilfsgetblock detects metadata corruption while locating data blocks and a superblock writeback occurs at the same time: task 1 task 2 ------ ------ A...

0.00157EPSS
SaveExploits0References8
CVE
CVE
added 2025/05/01 2:10 p.m.115 views

CVE-2022-49850

CVE-2022-49850 affects the Linux kernel nilfs2 subsystem. A semaphore deadlock can occur when nilfs_get_block() detects metadata corruption during data-block allocation and a concurrent superblock writeback happens. The root cause involves a lock order: rwsem A (NILFS_MDT dat_inode mi_sem) read l...

5.5CVSS6.5AI score0.00157EPSS
SaveExploits0References8Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:00 a.m.9 views

The vulnerabilities of the functions DECLARE_RWSEM() and dvb_register_device() in the drivers/media/dvb-core/dvbdev.c module of the Linux kernel allow a hacker to cause a service failure.

The vulnerabilities of the functions DECLARERWSEM and dvbregisterdevice in the drivers/media/dvb-core/dvbdev.c module of the Linux kernel are related to resource management errors. Exploiting these vulnerabilities can allow an attacker to cause service failures...

5.5CVSS6.6AI score0.00282EPSS
SaveExploits0References18Affected Software7
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.7 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: btrfs: Zoned – Fix for use-after-free due to race condition with dev replace When loading the information of a zone during the creation of a block group, we may encounter a race condition with the device replace operation. This c...

7.8CVSS6.5AI score0.00288EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.8 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fixed an issue that covered the reserve,releasecompressblocks function with the cprwsem lock. This fix is necessary to avoid race conditions with the checkpoint mechanism. Otherwise, filesystem metadata, including...

7.8CVSS6.1AI score0.00237EPSS
SaveExploits0References3
Rows per page
Query Builder