5860 matches found
Qemu: denial of service via improper synchronization in qemu nbd server during socket closure
...
md: Don't register sync_thread for reshape directly
...
drm/msm/dpu: Add mutex lock in control vblank irq
...
kernel: Bluetooth: hci_core: Fix use-after-free in vhci_flush()
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Fix use-after-free in vhciflush syzbot reported use-after-free in vhciflush without repro. 0 From the splat, a thread closed a vhci file descriptor while its device was being used by iotcl on another thread...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from KCM not synchronizing the handling of detach operations...
CVE-2025-23259: Concurrent Execution using Shared Resource with Improper Synchronization
NVIDIA Mellanox DPDK contains a vulnerability in Poll Mode Driver PMD, where an attacker on a VM in the system might be able to cause information disclosure and denial of service on the network interface...
media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode()
...
gpio: pca953x: fix pca953x_irq_bus_sync_unlock race
...
DRUPAL-CONTRIB-2025-105
This module enables you to connect a Drupal site to the Acquia DAM service, which syncs media from the third party service to the site. The module doesn't sufficiently validate authorization to a list of DAM assets currently synced to the website creating an access bypass vulnerability. This...
Linux Distros Unpatched Vulnerability : CVE-2025-58066
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. In versions between 1.2.0 and 1.6.1 inclusive servers which...
The provided one-time code is incorrect. Check if the backup server time is correct.
Challenge When attempting to connect to the Veeam Host Management Console, after entering the MFA TOTP code, the following error occurs: The provided one-time code is incorrect. Check if the backup server time is correct. Solution There are two potential causes for time mismatch: Cause 1:...
kernel: padata: fix UAF in padata_reorder
A use-after-free vulnerability was found in the Linux kernel's padata subsystem, in the padatareorder function. Caused by improper synchronization controls, this vulnerability can occur when a reference-counted data structure pd is decremented in one thread, freeing it, while another thread still...
kernel: Bluetooth: hci_core: Fix use-after-free in vhci_flush()
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Fix use-after-free in vhciflush syzbot reported use-after-free in vhciflush without repro. 0 From the splat, a thread closed a vhci file descriptor while its device was being used by iotcl on another thread...
QNAP Qsync Central path traversal vulnerability (CNVD-2025-23640)
QNAP Qsync Central is a private cloud synchronization service launched by QNAP, which is mainly used to achieve real-time synchronization and backup of files between devices. A path traversal vulnerability exists in QNAP Qsync Central, which can be exploited by an attacker to read unexpected file...
QNAP Qsync Central Null Pointer Dereference Vulnerability
QNAP Qsync Central is a private cloud synchronization service launched by QNAP, which is mainly used to achieve real-time synchronization and backup of files between devices. QNAP Qsync Central suffers from a null pointer dereference vulnerability, which can be exploited by attackers to cause a...
QNAP Qsync Central Unlimited Resource Allocation Vulnerability
QNAP Qsync Central is a private cloud synchronization service launched by QNAP, which is mainly used to achieve real-time synchronization and backup of files between devices. An unrestricted resource allocation vulnerability exists in QNAP Qsync Central, which can be exploited by an attacker to...
PT-2025-54974
Уязвимость функции nvme fc create association модуля drivers/nvme/host/fc.c драйвера NVME ядра операционной системы Linux связана с отсутствием синхронизации. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
Meta Platforms WhatsApp Incorrect Authorization Vulnerability
Meta Platforms WhatsApp contains an incorrect authorization vulnerability due to an incomplete authorization of linked device synchronization messages. This vulnerability could allow an unrelated user to trigger processing of content from an arbitrary URL on a target’s device...
QNAP Qsync Central Denial of Service Vulnerability
QNAP Qsync Central is a private cloud synchronization service launched by QNAP, which is mainly used to achieve real-time synchronization and backup of files between devices. A denial of service vulnerability exists in QNAP Qsync Central, which stems from uncontrolled resource consumption and can...
Linux kernel SPI Buffer Overflow DoS
Vulnerability of the spiunregistercontroller function in the drivers/spi/spi.c module – The Linux kernel’s SPI device driver has synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...