ROS-20260324-73-0001

A vulnerability in the smb2sesssetup function in the fs/smb/server/smb2pdu.c module of the Linux kernel SMB server support is related to synchronization errors when using a shared resource. Exploitation of the vulnerability may allow a remote attacker to affect confidentiality, integrity and...

ROS-20260324-73-0027

A vulnerability in the net/packet/afpacket.c component of the Linux operating system kernel is related to synchronization errors when using a shared resource. Exploitation of the vulnerability allows an attacker to cause a denial of service...

Linux kernel DMA Engine Heap Buffer Overflow DoS

The vulnerability of the dwedmav0corewritechunk function in the drivers/dma/dw-edma/dw-edma-v0-core.c driver for Linux kernel’s DMA engine is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux kernel io-uring Heap Buffer Overflow DoS

The vulnerability of the createioworker function in the iouring/io-wq.c module, a component of the Linux kernel’s asynchronous input/output interface, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

net qrtr mhi buffer overflow

The vulnerability of the qcommhiqrtrprobe function in the net/qrtr/mhi.c module, which is part of the Qualcomm IPC router support in the Linux operating system, is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to compromise th...

Linux kernel Block Device Buffer Overflow DoS

The vulnerability of the nbdstartdeviceioctl function in the drivers/block/nbd.c module of the Linux kernel’s block devices driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

VK WorkMail API Endpoint Alias Limit Bypass

The vulnerability of the API-endpoint /api/domains//users//aliases for VK WorkMail corporate email involves synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to circumvent the limit on the number of aliases assigned to a user...

Linux kernel Btrfs Heap Buffer Overflow DoS

The vulnerability of the btrfsfinishextentcommit function in the fs/btrfs/extent-tree.c file of the btrfs file system in the Linux operating system is related to synchronization errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Intel NPU Driver Heap Buffer Overflow DoS

The vulnerability of the ivpugembofree function in the drivers/accel/ivpu/ivpugem.c file of the Linux operating system’s NPU driver module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

F2FS Heap Buffer Overflow DoS

The vulnerability of the f2fswritecachepages function in the fs/f2fs/data.c module of the F2FS file system support in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260121-73-0004

A vulnerability in the getrandomu32 function of the time/clocksource.c component of the Linux operating system kernel is related to synchronization errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260120-73-0001

A vulnerability in the drivers/gpio/gpio-aggregator.c module of the Linux kernel is related to synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260120-7345

A vulnerability in the mptcppmnlappendnewlocaladdr function of the net/mptcp/pmnetlink.c module of the Linux operating system kernel is related to synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of...

ROS-20260114-7325

A vulnerability in the sound/core/seq/oss/seqosssynth.c module of the Linux operating system kernel is related to synchronization errors when using a shared resource "Race Situation" when processing SysEx messages. Exploitation of the vulnerability could allow an attacker to cause a denial of...

aap-server Unauthorized Access

The vulnerability of the aap-server in the Ansible configuration management system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

ROS-20251216-7361

A vulnerability in the Storage component of Google Chrome and Microsoft Edge browsers is related to synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker acting remotely to spoof the user interface using a specially crafted HTML page...

Linux MPTCP Protocol Heap Buffer Overflow DoS

The vulnerability of the mptcpschedulework function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in the Linux operating system is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow a malicious actor t...

Linux net/xfrm/xfrm_state.c DoS

The vulnerability of the net/xfrm/xfrmstate.c component in the Linux operating system is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability allows an attacker to cause service failures...

Linux net/packet/af_packet Heap Buffer Overflow DoS

The vulnerability in the net/packet/afpacket.c component of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to cause service failures...

ndoe_open() DoS

The vulnerability of the ndoopen function in the drivers/net/usb/asixdevices.c module of the Linux USB device driver framework is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to cause service failures remotely...