The vulnerability of the ufshcd_add_lus() function in the drivers/ufs/core/ufshcd.c module affects UFS-host controllers in Linux operating systems. This allows attackers to cause service failures.

The vulnerability of the ufshcdaddlus function in the drivers/ufs/core/ufshcd.c module affects UFS-host controllers. In Linux operating systems, this vulnerability is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause servic...

The vulnerability of the mfill_atomic() function in the mm/userfaultfd.c module of the Linux kernel’s memory management subsystem allows a attacker to cause a service failure.

The vulnerability of the mfillatomic function in the mm/userfaultfd.c module of the Linux kernel’s memory management subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the pKVM virtualization technology (protected Kernel-based Virtual Machine) in Android operating systems allows attackers to increase their privileges.

The vulnerability of the pKVM virtualization technology protected Kernel-based Virtual Machine in Android operating systems is related to synchronization errors when using shared resources during page caching. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the `cros_ec_uart_probe()` function in the `drivers/platform/chrome/cros_ec_uart.c` module exposes the support for Linux kernel-based Chrome OS hardware devices, allowing a malicious actor to cause service failure.

The vulnerability of the crosecuartprobe function in the drivers/platform/chrome/crosecuart.c module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the __tracing_map_insert() function in the kernel/trace/tracing_map.c module, which supports Linux operating system kernel tracing, allows a hacker to cause a service failure.

The vulnerability of the tracingmapinsert function in the kernel/trace/tracingmap.c module, which supports kernel tracing in Linux operating systems, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the memfd_pin_folios() function in the mm/gup.c module of the Linux kernel’s memory management subsystem allows a hacker to cause a service failure.

The vulnerability of the memfdpinfolios function in the mm/gup.c module of the Linux kernel’s memory management subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability relates to the definition of the structure debug_defaults_drv{} in the driver/gpu/drm/amd/display/dc/resource/dcn35/dcn35_resource.c file. This is a driver for supporting Direct Rendering Infrastructure (DRI) in AMD graphics cards for Linux operating systems. It allows an attacker to cause a service failure.

The vulnerability in determining the structure of debugdefaultsdrv in the drivers/gpu/drm/amd/display/dc/resource/dcn35/dcn35resource.c file affects Linux kernel-based AMD graphics cards. This vulnerability is related to synchronization errors when using a shared resource. Exploiting this...

ROS-20251202-07

A vulnerability in the Google Chrome browser's DevTools web development toolkit is related to synchronization errors when using a shared resource. synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker, acting remotely, to bypass the sandbox...

The vulnerability of the Office operating system HarmonyOS, which allows a hacker to trigger a service failure

The vulnerability of the Office operating system HarmonyOS is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the FortiCloud SSO component of the FortiAnalyzer security event monitoring and analysis software allows a threat actor to circumvent existing security restrictions.

The vulnerability of the FortiCloud SSO component of the FortiAnalyzer security event monitoring and analysis software is related to synchronization errors when using a shared resource. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions remotely...

The vulnerability of the JetBrains YouTrack project and task management software, related to synchronization errors when using a shared resource, allows attackers to circumvent existing security restrictions.

The vulnerability of the JetBrains YouTrack project and task management software is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to bypass existing security restrictions remotely...

CVE-2025-58303: Concurrent Execution using Shared Resource with Improper Synchronization

UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-64313: Concurrent Execution using Shared Resource with Improper Synchronization

Denial of service DoS vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-58316: Concurrent Execution using Shared Resource with Improper Synchronization

DoS vulnerability in the video-related system service module. Impact: Successful exploitation of this vulnerability may affect availability...

The vulnerability in the kernel/sys.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the kernel/sys.c module in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-40213

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: fix crash in setmeshsync and setmeshcomplete There is a BUG: KASAN: stack-out-of-bounds in setmeshsync due to memcpy from badly declared on-stack flexible array. Another crash is in setmeshcomplete due to double...

DEBIAN-CVE-2025-40212

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix refcount leak in nfsdsetfhdentry nfsd exports a "pseudo root filesystem" which is used by NFSv4 to find the various exported filesystems using LOOKUP requests from a known root filehandle. NFSv3 uses the MOUNT protocol ...

[SECURITY] Fedora 43 Update: calibre-8.14.0-1.fc43

Calibre is meant to be a complete e-library solution. It includes library management, format conversion, news feeds to ebook conversion as well as e-book reader sync features. Calibre is primarily a ebook cataloging program. It manages your ebook collection for you. It is designed around the...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a stack overflow and double deletion in the setmeshsync and setmeshcomplete functions in Bluetooth MGMT, whi...

The vulnerability of the setBit() function in the include/trace/events/fscache.h module of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the setBit function in the include/trace/events/fscache.h module of the Linux kernel’s firmware is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...