The vulnerability in the net/packet/af_packet.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the net/packet/afpacket.c component of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to cause service failures...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991131)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991131 advisory. In the Linux kernel, the following vulnerability has been resolved: drivers: staging: rtl8192u: Fix deadlock in ieee80211beaconsstop There is a deadlock in...

CVE-2025-40319

No description is available for this CVE...

SUSE CVE-2023-53839

In the Linux kernel, the following vulnerability has been resolved: dccp: fix data-race around dp-dccpsmsscache dccpsendmsg reads dp-dccpsmsscache before locking the socket. Same thing in dodccpgetsockopt. Add READONCE/WRITEONCE annotations, and change dccpsendmsg to check again dccpsmsscache aft...

EUVD-2023-60143

In the Linux kernel, the following vulnerability has been resolved: netlink: annotate accesses to nlk-cbrunning Both netlinkrecvmsg and netlinknativeseqshow read nlk-cbrunning locklessly. Use READONCE there. Add corresponding WRITEONCE to netlinkdump and netlinkdumpstart syzbot reported: BUG:...

EUVD-2023-60170

In the Linux kernel, the following vulnerability has been resolved: ubi: Fix UAF wear-leveling entry in eraseblkcountseqshow Wear-leveling entry could be freed in error path, which may be accessed again in eraseblkcountseqshow, for example: eraseworker eraseblkcountseqshow wl =...

CVE-2025-64658

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Shell allows an authorized attacker to elevate privileges locally...

EUVD-2025-202250

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2025-40344

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Disable periods-elapsed work when closing PCM avsdaifeshutdown handles the shutdown procedure for HOST HDAudio stream while period-elapsed work services its IRQs. As the former frees the DAI's private context,...

CVE-2025-40344

CVE-2025-40344 concerns the Linux kernel ASoC Intel avs driver. The vulnerability arises from a race between shutdown of the HOST HDA audio DAI (avs_dai_fe_shutdown) and the period-elapsed work handling its IRQs. The shutdown path frees the DAI private context while period-elapsed work may still ...

CVE-2023-53823 block/rq_qos: protect rq_qos apis with a new lock

In the Linux kernel, the following vulnerability has been resolved: block/rqqos: protect rqqos apis with a new lock commit 50e34d78815e "block: disable the elevator int delgendisk" move rqqosexit from diskrelease to delgendisk, this will introduce some problems: 1 If rqqosadd is triggered by...

SUSE CVE-2023-53759

In the Linux kernel, the following vulnerability has been resolved: HID: hidraw: fix data race on device refcount The hidrawopen function increments the hidraw device reference counter. The counter has no dedicated synchronization mechanism, resulting in a potential data race when concurrently...

SUSE CVE-2025-40319

In the Linux kernel, the following vulnerability has been resolved: bpf: Sync pending IRQ work before freeing ring buffer Fix a race where irqwork can be queued in bpfringbufcommit but the ring buffer is freed before the work executes. In the syzbot reproducer, a BPF program attached to schedswit...

CVE-2023-53795 iommufd: IOMMUFD_DESTROY should not increase the refcount

In the Linux kernel, the following vulnerability has been resolved: iommufd: IOMMUFDDESTROY should not increase the refcount syzkaller found a race where IOMMUFDDESTROY increments the refcount: obj = iommufdgetobjectucmd-ictx, cmd-id, IOMMUFDOBJANY; if ISERRobj return PTRERRobj;...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a null pointer dereference in a raid10 synchronization request...

PT-2025-50196

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A flaw exists in Windows Shell related to concurrent execution using a shared resource with improper synchronization, creating a race condition. This can allow a locally authenticated...

PT-2025-49624

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak exists in the of dra7 atl clk probe function within the ti dra7-atl clock driver. The pm runtime get sync function increments a power management usage counter, and a...

PT-2025-50169

Name of the Vulnerable Software and Affected Versions Microsoft Brokering File System affected versions not specified Description A flaw exists in the Microsoft Brokering File System related to concurrent execution using a shared resource with improper synchronization, creating a race condition...

PT-2025-49715

In the Linux kernel, the following vulnerability has been resolved: netlink: annotate lockless accesses to nlk-max recvmsg len syzbot reported a data-race in data-race in netlink recvmsg 1 Indeed, netlink recvmsg can be run concurrently, and netlink dump also needs protection. 1 BUG: KCSAN:...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper management of the reference state of BPF synchronization callbacks, which could lead to resource...