USN-7909-5: Linux kernel (Raspberry Pi) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S39...

The vulnerability of the NFS kernel component in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the NFS component in Linux operating systems is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the hv_netvsc component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the hvnetvsc component in the Linux operating system is related to the lack of synchronization. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the net/xfrm/xfrm_state.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the net/xfrm/xfrmstate.c component in the Linux operating system is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the powerpc/eeh module in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the powerpc/eeh module in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability in the inode.c component of the Linux operating system’s kernel allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the inode.c component in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability in the net/packet/af_packet.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the net/packet/afpacket.c component of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the net/tls component in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the net/tls component in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the pinmux component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the pinmux component in the Linux operating system’s kernel is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the imx95-blk-ctl component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the imx95-blk-ctl component in the Linux operating system’s kernel is related to the lack of synchronization. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the mm/ptdump component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the mm/ptdump component in the Linux operating system’s kernel is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to cause service failures...

CVE-2025-66419: Concurrent Execution using Shared Resource with Improper Synchronization

MaxKB is an open-source AI assistant for enterprise. In versions 2.3.1 and below, the tool module allows an attacker to escape the sandbox environment and escalate privileges under certain concurrent conditions. This issue is fixed in version 2.4.0...

The vulnerability of the Shell command shell in Windows operating systems, which allows attackers to exploit their privileges

The vulnerability of the Shell command shell in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991131)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991131 advisory. In the Linux kernel, the following vulnerability has been resolved: drivers: staging: rtl8192u: Fix deadlock in ieee80211beaconsstop There is a deadlock in...

CVE-2025-40319

No description is available for this CVE...

SUSE CVE-2023-53839

In the Linux kernel, the following vulnerability has been resolved: dccp: fix data-race around dp-dccpsmsscache dccpsendmsg reads dp-dccpsmsscache before locking the socket. Same thing in dodccpgetsockopt. Add READONCE/WRITEONCE annotations, and change dccpsendmsg to check again dccpsmsscache aft...

The vulnerability of the Brokering File System (BFS) in Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Brokering File System BFS in Windows operating systems is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows File Explorer driver on Windows operating systems, allowing attackers to exploit their privileges

The vulnerability of the Windows File Explorer driver in Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2025-67505: Concurrent Execution using Shared Resource with Improper Synchronization

Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another...

EUVD-2023-60143

In the Linux kernel, the following vulnerability has been resolved: netlink: annotate accesses to nlk-cbrunning Both netlinkrecvmsg and netlinknativeseqshow read nlk-cbrunning locklessly. Use READONCE there. Add corresponding WRITEONCE to netlinkdump and netlinkdumpstart syzbot reported: BUG:...