ALSA-2025:20095 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xen: Xen hypercall page unsafe against speculative attacks Xen Security Advisory 466 CVE-2024-53241 kernel: exfat: fix out-of-bounds access of directory entries CVE-2024-53147 kernel: zra...

PT-2025-46456

Name of the Vulnerable Software and Affected Versions Windows DirectX affected versions not specified Description A race condition exists in Windows DirectX due to concurrent execution using a shared resource with improper synchronization. This allows an authorized attacker to elevate privileges...

PT-2025-46484

Name of the Vulnerable Software and Affected Versions Windows DirectX affected versions not specified Description A race condition exists in Windows DirectX due to concurrent execution using a shared resource with improper synchronization. This allows an authorized attacker to cause a denial of...

The vulnerability of the panthor_groupdestroy() function in the drivers/gpu/drm/panthor/panthor_sched.c driver module exposes the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system, allowing a malicious actor to cause a service failure.

The vulnerability of the panthorgroupdestroy function in the drivers/gpu/drm/panthor/panthorsched.c driver for the Direct Rendering Infrastructure DRI support in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an...

CVE-2025-64682: Concurrent Execution using Shared Resource with Improper Synchronization

In JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limit...

Microsoft Windows Bluetooth Service Resource Management Error Vulnerability

Microsoft Windows Bluetooth Service is a Bluetooth driver from Microsoft Microsoft Corporation, USA. A resource management error vulnerability exists in Microsoft Windows Bluetooth Service that stems from a contention condition due to improper synchronization of shared resources, which can be...

CVE-2025-64683: Concurrent Execution using Shared Resource with Improper Synchronization

In JetBrains Hub before 2025.3.104432 information disclosure was possible via the Users API...

PT-2025-54661

Уязвимость функции mddev unlock модуля drivers/md/md.c драйвера нескольких устройств RAID и LVM ядра операционной системы Linux связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

The vulnerability of the “Red Database” database management system, related to synchronization errors when using a common resource, allows a perpetrator to cause a server service failure.

The vulnerability of the “Red Database” database management system is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to cause a service failure on the server...

The vulnerability of the `AggTraceMemoryFile::updateVersion` function in the `AggTraceSharedMemory.cpp` module of the “Red Database” database management system allows a hacker to cause a service failure on the server.

The vulnerability of the AggTraceMemoryFile::updateVersion function in the AggTraceSharedMemory.cpp module of the “Red Database” database management system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service...

The vulnerability of the ConfiguredPlugin::release function in the PluginManager.cpp module of the “Red Database” database management system allows a hacker to cause a service failure on the server.

The vulnerability in the ConfiguredPlugin::release function of the PluginManager.cpp module of the database management system “Red Database” is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure on the...

The vulnerability of the nvmepciNRMs() function in the drivers/nvme/host/pci.c module of the Linux NVME kernel driver allows a attacker to cause a service failure.

The vulnerability of the nvmepciNRMs function in the drivers/nvme/host/pci.c module of the Linux NVME kernel driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the do_task() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the dotask function in the Linux operating system’s kernel is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow a perpetrator to cause service failures...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990459)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990459 advisory. In the Linux kernel, the following vulnerability has been resolved: drivers: tty: serial: Fix deadlock in sa1100settermios There is a deadlock in sa1100settermios,...

PT-2025-45094

Name of the Vulnerable Software and Affected Versions KiotViet Sync plugin for WordPress versions up to and including 1.8.5 Description The KiotViet Sync plugin for WordPress is susceptible to authorization bypass. This is caused by the use of a hardcoded password for authentication within the...

WordPress plugin KiotViet Sync 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blogging sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989405)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989405 advisory. In the Linux kernel, the following vulnerability has been resolved: watchdog: Fix possible use-after-free in wdtstartup This module's remove path calls deltimer...

The vulnerability of the ath11k_mac_vdev_delete() function in the drivers/net/wireless/ath/ath11k/mac.c driver module of the Atheros/Qualcomm wireless adapter support driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ath11kmacvdevdelete function in the drivers/net/wireless/ath/ath11k/mac.c file of the Atheros/Qualcomm wireless adapter support driver for the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990308)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990308 advisory. In the Linux kernel, the following vulnerability has been resolved: nvme-fc: do not wait in vain when unloading module The module exit path has race between deleting...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988923)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988923 advisory. In the Linux kernel, the following vulnerability has been resolved: drivers: staging: rtl8192u: Fix deadlock in ieee80211beaconsstop There is a deadlock in...