Lucene search
+L

54 matches found

SUSE CVE
SUSE CVE
•added 2025/04/19 11:16 p.m.•10 views

SUSE CVE-2025-22074

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix rcount dec/increment mismatch rcount is only increased when there is an oplock break wait, so rcount inc/decrement are not paired. This can cause rcount to become negative, which can lead to a problem where the ksmbd...

8.8CVSS6.4AI score0.00487EPSS
SaveExploits0References3
NVD
NVD
•added 2025/04/16 3:16 p.m.•26 views

CVE-2025-22074

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix rcount dec/increment mismatch rcount is only increased when there is an oplock break wait, so rcount inc/decrement are not paired. This can cause rcount to become negative, which can lead to a problem where the ksmbd...

8.8CVSS0.00487EPSS
SaveExploits0References5
OSV
OSV
•added 2025/04/16 2:12 p.m.•14 views

CVE-2025-22074 ksmbd: fix r_count dec/increment mismatch

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix rcount dec/increment mismatch rcount is only increased when there is an oplock break wait, so rcount inc/decrement are not paired. This can cause rcount to become negative, which can lead to a problem where the ksmbd...

8.8CVSS6AI score
SaveExploits0References8
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•16 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a mismatch between rcount increment and decrement in ksmbd, which could lead to negative counting and thread...

5.5CVSS6.4AI score0.00487EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/04/14 12:00 a.m.•10 views

PT-2025-18458

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue has been resolved in the Linux kernel, specifically in the ksmbd component. The problem occurs when the ksmbd connection is referenced after the ksmbd server threa...

8.8CVSS6.6AI score0.00371EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/03/25 12:00 a.m.•24 views

PT-2025-16714

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a mismatch in the increment and decrement of r count in the ksmbd module. This mismatch occurs because r count is only increased when there is an oplock break wai...

8.8CVSS6.3AI score0.00487EPSS
SaveExploits0References380
Github Security Blog
Github Security Blog
•added 2025/03/20 12:32 p.m.•26 views

LlamaIndex Improper Handling of Exceptional Conditions vulnerability

A vulnerability in the LangChainLLM class of the run-llama/llamaindex repository, version v0.12.5, allows for a Denial of Service DoS attack. The streamcomplete method executes the llm using a thread and retrieves the result via the getresponsegen method of the StreamingGeneratorCallbackHandler...

7.5CVSS6.6AI score0.00815EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2025/03/20 10:15 a.m.•13 views

PYSEC-2025-244

A vulnerability in the LangChainLLM class of the run-llama/llamaindex repository, version v0.12.5, allows for a Denial of Service DoS attack. The streamcomplete method executes the llm using a thread and retrieves the result via the getresponsegen method of the StreamingGeneratorCallbackHandler...

7.5CVSS7AI score0.00815EPSS
SaveExploits1References2
PyPA
PyPA
•added 2025/03/20 10:15 a.m.•12 views

PYSEC-2025-244

A vulnerability in the LangChainLLM class of the run-llama/llamaindex repository, version v0.12.5, allows for a Denial of Service DoS attack. The streamcomplete method executes the llm using a thread and retrieves the result via the getresponsegen method of the StreamingGeneratorCallbackHandler...

7.5CVSS7AI score0.00815EPSS
SaveExploits1References2Affected Software1
Huntr
Huntr
•added 2024/12/14 4:48 a.m.•16 views

Denial of Service(DOS) in LangChainLLM due to missing exception handler.

Summary The streamcomplete method of the LangChainLLM class executes the llm using a thread and retrieves the result of the llm via the getresponsegen method of the StreamingGeneratorCallbackHandler class. During this process, getresponsegen recursively detects the onllmerror and onllmend events...

7.5CVSS7.7AI score0.00815EPSS
SaveExploits1
RedHat Linux
RedHat Linux
•added 2024/11/12 9:11 a.m.•10 views

kernel: Linux kernel: Denial of Service due to improper thread termination in rcuscale module

A flaw was found in the Linux kernel. A local attacker can exploit this vulnerability by loading and then unloading the rcuscale module while a specific test case is active. This improper handling of thread termination can lead to a use-after-free condition, causing a kernel crash and resulting i...

5.5CVSS6.1AI score0.00145EPSS
SaveExploits0References5
NVD
NVD
•added 2024/06/19 2:15 p.m.•17 views

CVE-2024-38582

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential hang in nilfsdetachlogwriter Syzbot has reported a potential hang in nilfsdetachlogwriter called during nilfs2 unmount. Analysis revealed that this is because nilfssegctorsync, which synchronizes with the lo...

5.3CVSS0.00861EPSS
SaveExploits0References10
OSV
OSV
•added 2024/06/19 2:15 p.m.•3 views

DEBIAN-CVE-2024-38582

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential hang in nilfsdetachlogwriter Syzbot has reported a potential hang in nilfsdetachlogwriter called during nilfs2 unmount. Analysis revealed that this is because nilfssegctorsync, which synchronizes with the lo...

5.3CVSS5.7AI score0.00861EPSS
SaveExploits0References1
OSV
OSV
•added 2024/06/19 2:15 p.m.•64 views

UBUNTU-CVE-2024-38582

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential hang in nilfsdetachlogwriter Syzbot has reported a potential hang in nilfsdetachlogwriter called during nilfs2 unmount. Analysis revealed that this is because nilfssegctorsync, which synchronizes with the lo...

5.3CVSS6.2AI score0.00861EPSS
SaveExploits0References29
SUSE CVE
SUSE CVE
•added 2023/02/15 3:50 a.m.•8 views

SUSE CVE-2020-36329

A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

6.7CVSS8AI score0.02319EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2022/11/07 12:00 a.m.•4 views

PT-2025-43074

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue related to the return type of the netiucv tx function. With the kernel control flow integrity kCFI enabled CONFIG CFI CLANG, indirect call targets are...

4.6CVSS5.7AI score0.00249EPSS
SaveExploits0
Kitploit
Kitploit
•added 2022/09/17 11:30 a.m.•44 views

DeathSleep - A PoC Implementation For An Evasion Technique To Terminate The Current Thread And Restore It Before Resuming Execution, While Implementing Page Protection Changes During No Execution

A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementing page protection changes during no execution. Intro Sleep and obfuscation methods are well known in the maldev community, with different implementations, they...

7.5AI score
SaveExploits0References2
OSV
OSV
•added 2022/06/28 6:05 p.m.•9 views

GSD-2022-1002649 lkdtm/bugs: Don't expect thread termination without CONFIG_UBSAN_TRAP

lkdtm/bugs: Don't expect thread termination without CONFIGUBSANTRAP This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•2 views

PT-2022-31258

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.17.14 Description The issue is related to thread termination without CONFIG UBSAN TRAP. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.15...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•0 views

PT-2022-31556

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description The issue is related to thread termination without CONFIG UBSAN TRAP. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

5.8AI score
SaveExploits0References1
Rows per page
Query Builder