kernel: dm thin: Fix UAF in run_timer_softirq()

In the Linux kernel, the following vulnerability has been resolved: dm thin: Fix UAF in runtimersoftirq When dmresume and dmdestroy are concurrent, it will lead to UAF, as follows: BUG: KASAN: use-after-free in runtimers+0x173/0x710 Write of size 8 at addr ffff88816d9490f0 by task swapper/0/0 Cal...

kernel: tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts.

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctltcpthinlineartimeouts. While reading sysctltcpthinlineartimeouts, it can be changed concurrently. Thus, we need to add READONCE to its reader...

CVE-2023-27856

In affected versions, path traversal exists when processing a message of type 8 in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker can exploit this vulnerability to download arbitrary files on the disk drive where ThinServer.exe is installed...

SUSE CVE-2021-3148

An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can result in salt.utils.thin.genthin command injection because of different handling of single versus double quotes. This is related to salt/utils/thin.py...

Wyse Management Suite Improper Access Control Vulnerability

Wyse Management Suite is Dell's hybrid cloud security management solution for Wyse thin client devices, designed to simplify IT management processes and enhance device security. An improper access control vulnerability exists in Wyse Management Suite, which stems from the inclusion of incorrect...

Wyse Management Suite Improper Access Control Vulnerability (CNVD-2025-26824)

Wyse Management Suite is Dell's hybrid cloud security management solution for Wyse thin client devices, designed to simplify IT management processes and enhance device security. An Improper Access Control vulnerability exists in Wyse Management Suite that stems from incorrect access control. No...

Wyse Management Suite Improper Access Control Vulnerability (CNVD-2025-26825)

Wyse Management Suite is Dell's hybrid cloud security management solution for Wyse thin client devices, designed to simplify IT management processes and enhance device security. An Improper Access Control vulnerability exists in Wyse Management Suite that stems from incorrect access control. No...

Dell Wyse Management Suite 安全漏洞

Wyse Management Suite is Dell's hybrid cloud security management solution for Wyse thin client devices, designed to simplify IT management processes and enhance device security. An Improper Access Control vulnerability exists in Wyse Management Suite that stems from incorrect access control. No...

Dell Wyse Management Suite 安全漏洞

Wyse Management Suite is Dell's hybrid cloud security management solution for Wyse thin client devices, designed to simplify IT management processes and enhance device security. An Improper Access Control vulnerability exists in Wyse Management Suite that stems from incorrect access control. No...

GSD-2023-1001289 dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata

dm thin: Fix ABBA deadlock between shrinkslab and dmpoolabortmetadata This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1000486 dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata

dm thin: Fix ABBA deadlock between shrinkslab and dmpoolabortmetadata This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000485 dm thin: Use last transaction's pmd->root when commit failed

dm thin: Use last transaction's pmd-root when commit failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

PT-2023-33563 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to a potential deadlock between shrink slab and dm pool abort metadata in the dm thin component. The actual impact and attack plausibility have not yet been proven...

kernel: dm thin: fix use-after-free crash in dm_sm_register_threshold_callback

In the Linux kernel, the following vulnerability has been resolved: dm thin: fix use-after-free crash in dmsmregisterthresholdcallback Fault inject on pool metadata device reports: BUG: KASAN: use-after-free in dmpoolregistermetadatathreshold+0x40/0x80 Read of size 8 at addr ffff8881b9d50068 by...

kernel: dm thin: fix use-after-free crash in dm_sm_register_threshold_callback

In the Linux kernel, the following vulnerability has been resolved: dm thin: fix use-after-free crash in dmsmregisterthresholdcallback Fault inject on pool metadata device reports: BUG: KASAN: use-after-free in dmpoolregistermetadatathreshold+0x40/0x80 Read of size 8 at addr ffff8881b9d50068 by...

The vulnerability in the web interface of Cisco BroadWorks Hosted Thin Receptionist allows a attacker to disclose protected information.

The vulnerability of the Cisco BroadWorks Hosted Thin Receptionist software’s web interface exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

Cisco BroadWorks 跨站脚本漏洞

Cisco BroadWorks is a carrier-grade unified communications software platform from Cisco. It is used to deploy cloud calls from public network platforms on any type of wired or wireless network architecture. A cross-site scripting vulnerability exists in Cisco BroadWorks Hosted Thin Receptionist,...

PT-2022-5298 · Cisco · Cisco Broadworks Hosted Thin Receptionist

Name of the Vulnerable Software and Affected Versions: Cisco BroadWorks Hosted Thin Receptionist affected versions not specified Description: A vulnerability in the web management interface could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user o...

GSD-2022-1005995 dm thin: fix use-after-free crash in dm_sm_register_threshold_callback

dm thin: fix use-after-free crash in dmsmregisterthresholdcallback This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1005819 dm thin: fix use-after-free crash in dm_sm_register_threshold_callback

dm thin: fix use-after-free crash in dmsmregisterthresholdcallback This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...