Lucene search
+L

5874 matches found

osv_azl
osv_azl
•added 2025/02/10 4:15 p.m.•30 views

AZL-58989 CVE-2025-21693 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: mm: zswap: properly synchronize freeing resources during CPU hotunplug In zswapcompress and zswapdecompress, the per-CPU acompctx of the current CPU at the beginning of the operation is retrieved and used throughout. However, sin...

7.8CVSS6.7AI score0.00203EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/02/10 4:15 p.m.•28 views

UBUNTU-CVE-2025-21693

In the Linux kernel, the following vulnerability has been resolved: mm: zswap: properly synchronize freeing resources during CPU hotunplug In zswapcompress and zswapdecompress, the per-CPU acompctx of the current CPU at the beginning of the operation is retrieved and used throughout. However, sin...

7.8CVSS6.2AI score0.00203EPSS
SaveExploits0References8
osv_cve
osv_cve
•added 2025/02/10 3:58 p.m.•34 views

CVE-2025-21693 mm: zswap: properly synchronize freeing resources during CPU hotunplug

In the Linux kernel, the following vulnerability has been resolved: mm: zswap: properly synchronize freeing resources during CPU hotunplug In zswapcompress and zswapdecompress, the per-CPU acompctx of the current CPU at the beginning of the operation is retrieved and used throughout. However, sin...

7.8CVSS5.9AI score
SaveExploits0References5
CVE
CVE
•added 2025/02/10 3:58 p.m.•219 views

CVE-2025-21693

In the Linux kernel CVE-2025-21693, the zswap path could UAF resources if the original per-CPU acomp_ctx is still in use when a CPU hotplug occurs, because preemption/migration isn’t disabled during the operation. The defect affects mm/zswap: the code retrieves acomp_ctx on the current CPU at ope...

7.8CVSS6.3AI score0.00203EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2025/02/10 3:58 p.m.•35 views

CVE-2025-21693 mm: zswap: properly synchronize freeing resources during CPU hotunplug

In the Linux kernel, the following vulnerability has been resolved: mm: zswap: properly synchronize freeing resources during CPU hotunplug In zswapcompress and zswapdecompress, the per-CPU acompctx of the current CPU at the beginning of the operation is retrieved and used throughout. However, sin...

7.8CVSS0.00203EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/02/10 3:58 p.m.•29 views

CVE-2025-21693 mm: zswap: properly synchronize freeing resources during CPU hotunplug

In the Linux kernel, the following vulnerability has been resolved: mm: zswap: properly synchronize freeing resources during CPU hotunplug In zswapcompress and zswapdecompress, the per-CPU acompctx of the current CPU at the beginning of the operation is retrieved and used throughout. However, sin...

7.8CVSS6.3AI score0.00203EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2025/02/10 3:58 p.m.•41 views

CVE-2025-21693

In the Linux kernel, the following vulnerability has been resolved: mm: zswap: properly synchronize freeing resources during CPU hotunplug In zswapcompress and zswapdecompress, the per-CPU acompctx of the current CPU at the beginning of the operation is retrieved and used throughout. However, sin...

7.8CVSS5.7AI score0.00203EPSS
SaveExploits0
CNNVD
CNNVD
•added 2025/02/10 12:00 a.m.•8 views

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A resource management error vulnerability exists in Linux kernel that stems from not properly synchronizing the release of resources during CPU hotplugging...

7.8CVSS6.5AI score0.00203EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/02/10 12:00 a.m.•25 views

Azure Linux 3.0 Security Update: kernel (CVE-2024-50041)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50041 advisory. - In the Linux kernel, the following vulnerability has been resolved: i40e: Fix macvlan leak by synchronizing...

8.8CVSS6.1AI score0.00228EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/02/08 4:42 a.m.•20 views

CVE-2025-24371

CometBFT is a distributed, Byzantine fault-tolerant, deterministic state machine replication engine. In the blocksync protocol peers send their base and latest heights when they connect to a new node A, which is syncing to the tip of a network. base acts as a lower ground and informs A that the...

7.1CVSS6.7AI score0.00464EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 10:52 p.m.•21 views

CVE-2022-1931

Incorrect Synchronization in GitHub repository polonel/trudesk prior to 1.2.3...

9.1CVSS6.8AI score0.02054EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/05 7:35 p.m.•18 views

CVE-2022-39219

Bifrost is a middleware package which can synchronize MySQL/MariaDB binlog data to other types of databases. Versions 1.8.6-release and prior are vulnerable to authentication bypass when using HTTP basic authentication. This may allow group members who only have read permissions to write requests...

8.5CVSS6.9AI score0.01176EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/05 5:33 p.m.•21 views

CVE-2019-10923

An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization IRT of the affected installation...

7.5CVSS6.6AI score0.01401EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 12:07 a.m.•23 views

CVE-2024-4154

In lunary-ai/lunary version 1.2.2, an incorrect synchronization vulnerability allows unprivileged users to rename projects they do not have access to. Specifically, an unprivileged user can send a PATCH request to the project's endpoint with a new name for a project, despite not having the...

7.1CVSS6.4AI score0.00297EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2025/02/05 12:00 a.m.•23 views

Android mm/mremap.c Privilege Escalation

The vulnerability of the mm/mremap.c module in Android operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.8CVSS5.5AI score
SaveExploits1References3
osv_ghsa
osv_ghsa
•added 2025/02/03 3:55 p.m.•30 views

GHSA-22QQ-3XWM-R5X4 CometBFT allows a malicious peer to make node stuck in blocksync

Name: ASA-2025-001: Malicious peer can disrupt node's ability to sync via blocksync Component: CometBFT OUTDATED Criticality: Medium Considerable Impact; Possible Likelihood per ACMv1.2 Update of Criticality on 2026-03-06: We've made a mistake and over-rated the criticality of this bug in our...

6.9CVSS7AI score0.00464EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
•added 2025/02/03 12:00 a.m.•14 views

Firefox Thunderbird DoS

The vulnerability in the Firefox web browser and the Thunderbird email client is related to the simultaneous execution of processes using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...

5.4CVSS6AI score0.00416EPSS
SaveExploits0References15Affected Software5
BDU FSTEC
BDU FSTEC
•added 2025/02/03 12:00 a.m.•21 views

IBM Engineering Requirements Management DOORS Race Situation Code Execution

The vulnerability of the IBM Engineering Requirements Management DOORS software is related to synchronization errors when using a shared resource „Race Condition“. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS5.9AI score0.01105EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2025/01/30 4:15 p.m.•35 views

CVE-2025-23216

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A vulnerability was discovered in Argo CD that exposed secret values in error messages and the diff view when an invalid Kubernetes Secret resource was synced from a repository. The vulnerability assumes the user has write...

6.8CVSS0.00475EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/01/30 12:00 a.m.•18 views

RHEL 6 : rsync (RHSA-2025:0849)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:0849 advisory. The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only...

7.5CVSS7.7AI score0.08823EPSS
SaveExploits2References4
Rows per page
Query Builder