CVE-2024-27408: Concurrent Execution using Shared Resource with Improper Synchronization

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup The Linked list element and pointer are not stored in the same memory as the eDMA controller register. If the doorbell register is toggled...

CVE-2024-21823

Hardware logic with insecure de-synchronization in IntelR DSA and IntelR IAA for some IntelR 4th or 5th generation XeonR processors may allow an authorized user to potentially enable escalation of privilege local access...

CVE-2024-21823

Hardware logic with insecure de-synchronization in IntelR DSA and IntelR IAA for some IntelR 4th or 5th generation XeonR processors may allow an authorized user to potentially enable escalation of privilege local access...

CVE-2024-21823

Hardware logic with insecure de-synchronization in IntelR DSA and IntelR IAA for some IntelR 4th or 5th generation XeonR processors may allow an authorized user to potentially enable escalation of privilege local access...

UBUNTU-CVE-2024-21823

Hardware logic with insecure de-synchronization in IntelR DSA and IntelR IAA for some IntelR 4th or 5th generation XeonR processors may allow an authorized user to potentially enable escalation of privilege local access...

CVE-2024-21823

Hardware logic with insecure de-synchronization in IntelR DSA and IntelR IAA for some IntelR 4th or 5th generation XeonR processors may allow an authorized user to potentially enable escalation of privilege local access...

Linux AF_UNIX Sockets Heap Buffer Overflow DoS

The vulnerability of the unixstatedoublelock function in the net/unix/afunix.c module, which implements AFUNIX sockets in Linux operating systems, is related to a violation of synchronization mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2024-5465

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 126.0.6478.182 Microsoft Edge affected versions not specified Description The issue is related to a synchronization error when using a shared resource in the DevTools of Google Chrome and Microsoft Edge browsers...

CVE-2024-21823: Hardware Logic with Insecure De-Synchronization between Control and Data Channels

Hardware logic with insecure de-synchronization in IntelR DSA and IntelR IAA for some IntelR 4th or 5th generation XeonR processors may allow an authorized user to potentially enable escalation of privilege local access...

May 14, 2024—KB5037763 (OS Build 14393.6981) - EXPIRED

None None...

PT-2024-3642

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio affected versions not specified Microsoft .NET affected versions not specified Description The issue is caused by synchronization errors when using a shared resource. It may allow a remote attacker to cause a denial of...

CVE-2024-30046: Concurrent Execution using Shared Resource with Improper Synchronization

Visual Studio Denial of Service Vulnerability...

Windows Distributed File System Code Execution

The vulnerability of the distributed file system DFS in the Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

BFS Windows Server Privilege Escalation

The vulnerability of the Brokering File System BFS in the Windows Server operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

Ivanti Secure Access Client Privilege Escalation

The vulnerability of the VPN server for corporate networks of Ivanti Secure Access Client formerly Pulse Secure Desktop Client on Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to increase their...

BFS Windows Server Privilege Escalation

The vulnerability of the Brokering File System BFS in the Windows Server operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2022-48689: Concurrent Execution using Shared Resource with Improper Synchronization

In the Linux kernel, the following vulnerability has been resolved: tcp: TX zerocopy should not sense pfmemalloc status We got a recent syzbot report 1 showing a possible misuse of pfmemalloc page status in TCP zerocopy paths. Indeed, for pages coming from user space or other layers, using...

PT-2024-5405

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description The vulnerability is related to the drm: zynqmp dpsub module in the Linux kernel. It is caused by the zynqmp dp hpd work func function calling drm bridge hpd notify, which expects hpd mutex to ...

AZL-42229 CVE-2024-27014 affecting package kernel for versions less than 5.15.158.1-1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent deadlock while disabling aRFS When disabling aRFS under the priv-statelock, any scheduled aRFS works are canceled using the cancelworksync function, which waits for the work to end if it has already started...

kernel: af_unix: Fix data-races around user->unix_inflight

In the Linux kernel, the following vulnerability has been resolved: afunix: Fix data-races around user-unixinflight. user-unixinflight is changed under spinlockunixgclock, but toomanyunixfds reads it locklessly. Let's annotate the write/read accesses to user-unixinflight. BUG: KCSAN: data-race in...