5818 matches found
The vulnerability of the handle_sched_done() function in the drivers/gpu/drm/xe/xe_guc_submit.c file of the DRI support driver for the Linux operating system’s kernel allows a malicious actor to cause a service failure.
The vulnerability of the handlescheddone function in the drivers/gpu/drm/xe/xegucsubmit.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to...
The vulnerability of the `dw_edma_v0_core_write_chunk()` function in the `drivers/dma/dw-edma/dw-edma-v0-core.c` driver file of the Linux kernel’s DMA engine support module allows a hacker to cause a service failure.
The vulnerability of the dwedmav0corewritechunk function in the drivers/dma/dw-edma/dw-edma-v0-core.c driver for Linux kernel’s DMA engine is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the oa_tc6_prepare_spi_tx_buf_for_tx_skbs() function in the drivers/net/ethernet/oa_tc6.c module of the Linux kernel’s Ethernet network adapter support driver allows a attacker to cause a service failure.
The vulnerability of the oatc6preparespitxbuffortxskbs function in the drivers/net/ethernet/oatc6.c module of the Linux kernel’s Ethernet network adapter support driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a...
Siemens APE1808 Improper Restriction of Communication Channel to Intended Endpoints (CVE-2025-22251)
An improper restriction of communication channel to intended endpoints vulnerability CWE-923 in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an unauthenticated attacker to inject unauthorized sessions via crafted FGSP session synchronization...
PT-2026-28889
Уязвимость контроллера доставки приложений NetScaler ADC ранее Citrix ADC и системы контроля доступа к виртуальной среде NetScaler Gateway ранее Citrix Gateway связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю, действующему...
Siemens SIMATIC S7-1500 Concurrent Execution using Shared Resource with Improper Synchronization (CVE-2025-38083)
In the Linux kernel, the following vulnerability has been resolved: netsched: prio: fix a race in priotune Gerrard Tai reported a race condition in PRIO, whenever SFQ perturb timer fires at the wrong time. The race is as follows: CPU 0 CPU 1 1: lock root 2: qdisctreeflushbacklog 3: unlock root | ...
Siemens SIMATIC S7-1500 Concurrent Execution using Shared Resource with Improper Synchronization (CVE-2025-38393)
In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Fix a race to wake on NFSLAYOUTDRAIN We found a few different systems hung up in writeback waiting on the same page lock, and one task waiting on the NFSLAYOUTDRAIN bit in pnfsupdatelayout, however the pnfslayouthdr's...
Siemens SIMATIC S7-1500 Improper Locking (CVE-2025-38058)
In the Linux kernel, the following vulnerability has been resolved: legitimizemnt: check for MNTSYNCUMOUNT should be under mountlock ... or we risk stealing final mntput from sync umount - raising mntcount after umount2 has verified that victim is not busy, but before it has set MNTSYNCUMOUNT; in...
PT-2026-51914
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists during Translation Lookaside Buffer TLB synchronization, which is a process used to maintain consistency between the CPU cache and the main memory page tables. Th...
CVE-2026-22163 GPU DDK - Unsafe writing of MMU PT entries on systems with 32-bit host CPU
Requires malware code to misuse the DDK kernel module IOCTL interface. Such code can use the interface in an unsupported way that allows subversion of the GPU to perform writes to arbitrary physical memory pages. The product utilises a shared resource in a concurrent manner but does not attempt t...
CVE-2026-22163: Missing Synchronization
Requires malware code to misuse the DDK kernel module IOCTL interface. Such code can use the interface in an unsupported way that allows subversion of the GPU to perform writes to arbitrary physical memory pages. The product utilises a shared resource in a concurrent manner but does not attempt t...
SUSE CVE-2026-23247
In the Linux kernel, the following vulnerability has been resolved: tcp: secureseq: add back ports to TS offset This reverts 28ee1b746f49 "secureseq: downgrade to per-host timestamp offsets" tcptwrecycle went away in 2017. Zhouyan Deng reported off-path TCP source port leakage via SYN cookie...
The vulnerability of the `nvme_fc_create_association()` function in the drivers/nvme/host/fc.c module of the Linux operating system’s NVME kernel driver allows a attacker to cause a service failure.
The vulnerability of the nvmefccreateassociation function in the drivers/nvme/host/fc.c file of the Linux kernel’s NVME driver is related to the lack of synchronization. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerabilities of the functions mdsc_show(), ceph_unlink(), ceph_open(), and ceph_mdsc_release_request() in the Linux kernel’s distributed file system support for Ceph drivers allow attackers to compromise the integrity of protected information or cause service failures.
The vulnerabilities of the functions mdscshow, cephunlink, cephopen, and cephmdscreleaserequest in the Linux kernel’s distributed file system support for Ceph are related to synchronization errors when using shared resources. Exploiting these vulnerabilities can allow attackers to compromise the...
The vulnerability of the bio_poll() function in the block/blk-core.c module, which supports the block-level kernel in the Linux operating system, allows a hacker to trigger a service failure.
The vulnerability of the biopoll function in the block/blk-core.c module, which supports the block-level kernel in the Linux operating system, is related to the pointer dereferencing due to poor synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-23247 tcp: secure_seq: add back ports to TS offset
In the Linux kernel, the following vulnerability has been resolved: tcp: secureseq: add back ports to TS offset This reverts 28ee1b746f49 "secureseq: downgrade to per-host timestamp offsets" tcptwrecycle went away in 2017. Zhouyan Deng reported off-path TCP source port leakage via SYN cookie...
The vulnerability of the proc_dou8vec_minmax() function in the Linux kernel/sysctl.c module allows a hacker to trigger a service failure.
The vulnerability of the procdou8vecminmax function in the Linux kernel/sysctl.c module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the mlx5_revoke_mr() function in the drivers/infiniband/hw/mlx5/mr.c file of the Linux kernel’s InfiniBand support driver allows a attacker to cause a service failure.
The vulnerability of the mlx5revokemr function in the drivers/infiniband/hw/mlx5/mr.c file of the Linux kernel’s InfiniBand support module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the `dc_wake_and_execute_dmub_cmd_list()` function in the `drivers/gpu/drm/amd/display/dc/dc_dmub_srv.c` driver, a part of the DRI support driver for AMD graphics cards in Linux operating systems. This vulnerability allows an attacker to trigger a service failure.
The vulnerability of the dcwakeandexecutedmubcmdlist function in the drivers/gpu/drm/amd/display/dc/dcdmubsrv.c driver, which is part of the DRI support driver for AMD graphics cards in Linux operating systems, leads to synchronization errors when using shared resources. Exploiting this...
The vulnerabilities in the functions imx_dsp_rproc_stop() and imx_dsp_rproc_vq_work() of the driver module remoteproc/imx_dsp_rproc.c, which is part of the Linux operating system’s embedded processor subsystem, allow a malicious actor to cause service failures.
The vulnerabilities of the functions imxdsprprocstop and imxdsprprocvqwork in the driver module remoteproc/imxdsprproc.c of the Linux operating system’s embedded processor subsystem are related to the lack of synchronization. Exploiting these vulnerabilities could allow an attacker to cause a...