CVE-2026-23281

A flaw was found in the Linux kernel's Marvell Libertas Wi-Fi driver. This vulnerability, a use-after-free, occurs because the system does not properly synchronize the freeing of memory with ongoing timer operations. If a timer attempts to access resources after they have been released, it can le...

CVE-2026-23348

In the Linux kernel, the following vulnerability has been resolved: cxl: Fix race of nvdimmbus object when creating nvdimm objects Found issue during running of cxl-translate.sh unit test. Adding a 3s sleep right before the test seems to make the issue reproduce fairly consistently. The...

CVE-2026-23281

In CVE-2026-23281, the Linux kernel Libertus wifi driver (lbs_free_adapter) uses non‑synchronous timer_delete() for command_timer and tx_lockup_timer, risking use‑after‑free if a timer callback runs during free. The callbacks (lbs_cmd_timeout_handler, lbs_tx_lockup_handler) access freed fields, c...

The vulnerability of the kcm_splice_read() function in the net/kcm/kcmsock.c module, which is part of the networking functions of the Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the kcmspliceread function in the net/kcm/kcmsock.c module, which is part of the Linux kernel’s networking functions, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the filelock library, related to synchronization errors when using a shared resource, allows a hacker to cause a service failure.

The vulnerability of the filelock library is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-28891: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to break out of its sandbox...

CVE-2026-28888: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to gain root privileges...

CVE-2025-32991: Concurrent Execution using Shared Resource with Improper Synchronization

In N2WS Backup & Recovery before 4.4.0, a two-step attack against the RESTful API results in remote code execution...

The vulnerability of the mgmt_init_hdev() function in the net/bluetooth/mgmt.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mgmtinithdev function in the net/bluetooth/mgmt.c module of the Linux kernel’s Bluetooth subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

CVE-2026-33159 Craft CMS: Unauthenticated users could execute project configuration sync operations that should be restricted trusted users

Craft CMS is a content management system CMS. From version 4.0.0-RC1 to before version 4.17.8 and from version 5.0.0-RC1 to before version 5.9.14, guest users can access Config Sync updater index, obtain signed data, and execute state-changing Config Sync actions regenerate-yaml, apply-yaml-chang...

CVE-2025-64998

Exposure of session signing secret in Checkmk 2.4.0p23, 2.3.0p45 and 2.2.0 allows an administrator of a remote site with config sync enabled to hijack sessions on the central site by forging session cookies...

ROS-20260324-73-0008

A vulnerability in the powerpc/eeh module of the Linux operating system kernel is related to synchronization errors when using a shared resource. Exploitation of the vulnerability allows an attacker to cause a denial of service...

ROS-20260324-73-0001

A vulnerability in the smb2sesssetup function in the fs/smb/server/smb2pdu.c module of the Linux kernel SMB server support is related to synchronization errors when using a shared resource. Exploitation of the vulnerability may allow a remote attacker to affect confidentiality, integrity and...

CVE-2025-33238: Concurrent Execution using Shared Resource with Improper Synchronization

NVIDIA Triton Inference Server Sagemaker HTTP server contains a vulnerability where an attacker may cause an exception. A successful exploit of this vulnerability may lead to denial of service...

CVE-2025-33254: Concurrent Execution using Shared Resource with Improper Synchronization

NVIDIA Triton Inference Server contains a vulnerability where an attacker may cause internal state corruption. A successful exploit of this vulnerability may lead to a denial of service...

PT-2026-27382

Exposure of session signing secret in Checkmk 2.4.0p23, 2.3.0p45 and 2.2.0 allows an administrator of a remote site with config sync enabled to hijack sessions on the central site by forging session cookies...

ROS-20260324-73-0027

A vulnerability in the net/packet/afpacket.c component of the Linux operating system kernel is related to synchronization errors when using a shared resource. Exploitation of the vulnerability allows an attacker to cause a denial of service...

The vulnerability of NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) access control systems relates to synchronization errors when using shared resources. This vulnerability allows a malicious individual to gain unauthorized access to the system.

The vulnerability of NetScaler ADC formerly Citrix ADC and the NetScaler Gateway access control system formerly Citrix Gateway is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the system remotely...

The vulnerability of the handle_sched_done() function in the drivers/gpu/drm/xe/xe_guc_submit.c file of the DRI support driver for the Linux operating system’s kernel allows a malicious actor to cause a service failure.

The vulnerability of the handlescheddone function in the drivers/gpu/drm/xe/xegucsubmit.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to...

The vulnerability of the oa_tc6_prepare_spi_tx_buf_for_tx_skbs() function in the drivers/net/ethernet/oa_tc6.c module of the Linux kernel’s Ethernet network adapter support driver allows a attacker to cause a service failure.

The vulnerability of the oatc6preparespitxbuffortxskbs function in the drivers/net/ethernet/oatc6.c module of the Linux kernel’s Ethernet network adapter support driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a...