4243 matches found
CVE-2024-43062
Memory corruption caused by missing locks and checks on the DMA fence and improper synchronization...
CVE-2024-49836
Memory corruption may occur during the synchronization of the cameras frame processing pipeline...
kernel: nvme-fc: do not wait in vain when unloading module
In the Linux kernel, the following vulnerability has been resolved: nvme-fc: do not wait in vain when unloading module The module exit path has race between deleting all controllers and freeing 'left over IDs'. To prevent double free a synchronization between nvmedeletectrl and idadestroy has bee...
kernel: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
In the Linux kernel, the following vulnerability has been resolved: tcp: defer shutdownSENDSHUTDOWN for TCPSYNRECV sockets TCPSYNRECV state is really special, it is only used by cross-syn connections, mostly used by fuzzers. In the following crash 1, syzbot managed to trigger a divide by zero in...
SUSE CVE-2022-49733
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix race at SNDCTLDSPSYNC There is a small race window at sndpcmosssync that is called from OSS PCM SNDCTLDSPSYNC ioctl; namely the function calls sndpcmossmakeready at first, then takes the paramslock mutex for t...
The vulnerability of VMware ESXi and VMware Workstation relates to synchronization errors when using shared resources, allowing a hacker to execute arbitrary code.
The vulnerability of VMware ESXi and VMware Workstation lies in synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Linux Distros Unpatched Vulnerability : CVE-2023-28998
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.6.5, a malicious server...
Linux Distros Unpatched Vulnerability : CVE-2022-41882
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. In version 3.6.0, if a user received a malicious file shar...
Linux Distros Unpatched Vulnerability : CVE-2023-28997
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.6.5, a malicious server...
The vulnerabilities of Intel System Resources Defense and Intel System Security Report, microprogramming software for Intel processors, allow attackers to enhance their privileges.
The vulnerabilities of Intel System Resources Defense and Intel System Security software related to Intel processor microsoftware are associated with synchronization errors when using shared resources. Exploiting these vulnerabilities can allow attackers to gain increased privileges...
Linux Distros Unpatched Vulnerability : CVE-2024-47744
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: KVM: Use dedicated mutex to protect kvmusagecount to avoid deadlock Use a dedicated mutex t...
Linux Distros Unpatched Vulnerability : CVE-2023-52586
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/msm/dpu: Add mutex lock in control vblank irq Add a mutex lock to control vblank irq to synchronize vblank enable/disable operations happening from differen...
Linux Distros Unpatched Vulnerability : CVE-2024-35843
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/vt-d: Use device rbtree in iopf reporting path The existing I/O page fault handler currently locates the PCI device by calling pcigetdomainbusandslot. Thi...
The vulnerabilities of Intel System Resources Defense and Intel System Security Report, microprogramming software for Intel processors, allow attackers to disclose protected information.
The vulnerabilities of Intel System Resources Defense and Intel System Security software for Intel microprocessors are related to synchronization errors when using shared resources. Exploiting these vulnerabilities can allow attackers to disclose sensitive information that is protected by these...
Linux Distros Unpatched Vulnerability : CVE-2024-44935
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: sctp: Fix null-ptr-deref in reuseportaddsock. syzbot reported a null-ptr-deref while accessi...
The vulnerability of the Intel PROSet/Wireless WiFi connection utility is related to synchronization errors when using a shared resource (“Race Situation”). This allows a hacker to cause a service failure.
The vulnerability of the Intel PROSet/Wireless WiFi networking utility is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service interruptions...
The vulnerability of the Intel PROSet/Wireless WiFi connection utility is related to synchronization errors when using a shared resource (“Race Situation”). This allows a hacker to cause a service failure.
The vulnerability of the Intel PROSet/Wireless WiFi networking utility is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2024-43062
Memory corruption caused by missing locks and checks on the DMA fence and improper synchronization...