5832 matches found
OESA-2025-2775 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: mm: zswap: properly synchronize freeing resources during CPU hotunplug In zswapcompress and zswapdecompress, the per-CPU acompctx of the current CPU at the...
PT-2026-2513
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the USB PHY driver for Freescale fsl-usb within the Linux kernel. The vulnerability occurs due to a race condition during device removal where a delayed...
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to trigger a service failure.
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerabilities of the functions dev_fini_ggtt() and xe_ggtt_init_early() in the Linux operating system allow a hacker to trigger a service failure.
The vulnerabilities of the functions devfiniggtt and xeggttinitearly drivers/gpu/drm/xe/xeggtt.c in the Linux kernel are related to synchronization errors when using shared resources. Exploiting these vulnerabilities can allow an attacker to cause service failures...
USN-7909-2 linux-intel-iot-realtime, linux-realtime vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S39...
[SECURITY] Fedora 43 Update: syncplay-1.7.4-6.fc43
Solution to synchronize video playback across multiple instances of mpv, VLC, MPC-HC and MPC-BE over the Internet. Syncplay synchronizes the position and play state of multiple media players so that the viewers can watch the same thing at the same time. This means that when one person...
The vulnerability of the Video-Related System module in the HarmonyOS operating system allows a perpetrator to trigger a service failure.
The vulnerability of the Video-Related System module in the HarmonyOS operating system is related to synchronization errors when using shared resources “Race Situation”. Exploiting this vulnerability can allow attackers to cause service failures...
[SECURITY] Fedora 41 Update: nextcloud-32.0.2-1.fc41
NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...
[SECURITY] Fedora 43 Update: nextcloud-32.0.2-1.fc43
NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...
RockyLinux 10 : kernel (RLSA-2025:20095)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:20095 advisory. kernel: xen: Xen hypercall page unsafe against speculative attacks Xen Security Advisory 466 CVE-2024-53241 kernel: exfat: fix out-of-bounds access of...
The vulnerability of the ufshcd_add_lus() function in the drivers/ufs/core/ufshcd.c module affects UFS-host controllers in Linux operating systems. This allows attackers to cause service failures.
The vulnerability of the ufshcdaddlus function in the drivers/ufs/core/ufshcd.c module affects UFS-host controllers. In Linux operating systems, this vulnerability is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause servic...
The vulnerability of the __tracing_map_insert() function in the kernel/trace/tracing_map.c module, which supports Linux operating system kernel tracing, allows a hacker to cause a service failure.
The vulnerability of the tracingmapinsert function in the kernel/trace/tracingmap.c module, which supports kernel tracing in Linux operating systems, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the memfd_pin_folios() function in the mm/gup.c module of the Linux kernel’s memory management subsystem allows a hacker to cause a service failure.
The vulnerability of the memfdpinfolios function in the mm/gup.c module of the Linux kernel’s memory management subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the pKVM virtualization technology (protected Kernel-based Virtual Machine) in Android operating systems allows attackers to increase their privileges.
The vulnerability of the pKVM virtualization technology protected Kernel-based Virtual Machine in Android operating systems is related to synchronization errors when using shared resources during page caching. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of the mfill_atomic() function in the mm/userfaultfd.c module of the Linux kernel’s memory management subsystem allows a attacker to cause a service failure.
The vulnerability of the mfillatomic function in the mm/userfaultfd.c module of the Linux kernel’s memory management subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability relates to the definition of the structure debug_defaults_drv{} in the driver/gpu/drm/amd/display/dc/resource/dcn35/dcn35_resource.c file. This is a driver for supporting Direct Rendering Infrastructure (DRI) in AMD graphics cards for Linux operating systems. It allows an attacker to cause a service failure.
The vulnerability in determining the structure of debugdefaultsdrv in the drivers/gpu/drm/amd/display/dc/resource/dcn35/dcn35resource.c file affects Linux kernel-based AMD graphics cards. This vulnerability is related to synchronization errors when using a shared resource. Exploiting this...
The vulnerability of the `cros_ec_uart_probe()` function in the `drivers/platform/chrome/cros_ec_uart.c` module exposes the support for Linux kernel-based Chrome OS hardware devices, allowing a malicious actor to cause service failure.
The vulnerability of the crosecuartprobe function in the drivers/platform/chrome/crosecuart.c module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20251202-07
A vulnerability in the Google Chrome browser's DevTools web development toolkit is related to synchronization errors when using a shared resource. synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker, acting remotely, to bypass the sandbox...
The vulnerability of the Office operating system HarmonyOS, which allows a hacker to trigger a service failure
The vulnerability of the Office operating system HarmonyOS is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the JetBrains YouTrack project and task management software, related to synchronization errors when using a shared resource, allows attackers to circumvent existing security restrictions.
The vulnerability of the JetBrains YouTrack project and task management software is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to bypass existing security restrictions remotely...