PT-2025-49470

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified and resolved in the rsi coex attach function within the RSI Realtek Semiconductor Corporation wireless driver of the Linux kernel. Specifically, the coex cb...

GSD-2022-1007336 nilfs2: fix leak of nilfs_root in case of writer thread creation failure

nilfs2: fix leak of nilfsroot in case of writer thread creation failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.148 by commit...

PT-2022-35933

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.331 Description A potential issue exists where there is a leak of nilfs root in the event of a writer thread creation failure. The actual impact and likelihood of an attack have not been confirmed...

PT-2022-35417

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.74 Description The issue concerns a leak of nilfs root in the event of a writer thread creation failure. This problem was introduced in version v2.6.37 and is fixed in Linux Kernel version v5.15.74. The...

PT-2022-35873 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.296 Description: A potential issue exists where there is a leak of nilfs root in the event of a writer thread creation failure. The actual impact and likelihood of an attack have not been confirmed...

AZL-27304 CVE-2022-29503 affecting package uclibc-ng for versions less than 1.0.43-1

A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and uClibC-ng 1.0.40. Thread allocation can lead to memory corruption. An attacker can create threads to trigger this vulnerability...

PT-2022-34313

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.211 Description The issue concerns a potential security vulnerability in the Linux Kernel related to starting a new thread on arm64 systems, where a syscall is not properly handled. The actual impact and...

mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dscompress.cc, when an error occurs pthreadcreate returns a nonzero value while executing the method createworkerthreads, the held lock is not released correctly, which allows local users to trigger a denial of...

mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dscompress.cc, when an error occurs pthreadcreate returns a nonzero value while executing the method createworkerthreads, the held lock is not released correctly, which allows local users to trigger a denial of...

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc when an error occurs (i.e. going to the err label) while executing the method create_worker_threads the held lock thd->ctrl_mutex is not released correctly which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.

...

CVE-2022-31623

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dscompress.cc, when an error occurs i.e., going to the err label while executing the method createworkerthreads, the held lock thd-ctrlmutex is not released correctly, which allows local users to trigger a denial ...

UBUNTU-CVE-2022-31622

DISPUTED MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dscompress.cc, when an error occurs pthreadcreate returns a nonzero value while executing the method createworkerthreads, the held lock is not released correctly, which allows local users to trigger a...

CVE-2022-31622

Disclaimer: This data contains information about vulnerable...

istio:fuzz_render_manifests: Crash in _cgo_try_pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5603617795604480 Project: istio Fuzzing Engine: libFuzzer Fuzz Target: fuzzrendermanifests Job Type: libfuzzerasanistio Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0000004caf6c Crash State: cgotrypthreadcreate xcgosysthreadcreat...

go-sftp:fuzz_sftp: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5196841726115840 Project: go-sftp Fuzzing Engine: libFuzzer Fuzz Target: fuzzsftp Job Type: libfuzzerasango-sftp Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate xcgosysthreadcreate...

runc:user_fuzzer: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5982838682943488 Project: runc Fuzzing Engine: libFuzzer Fuzz Target: userfuzzer Job Type: libfuzzerasanrunc Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...

Windows/x64 Inject All Processes With Meterpreter Reverse Shell Shellcode (655 bytes)

Shellcode Title: Windows/x64 - Inject All Processes with Meterpreter Reverse Shell 655 Bytes Shellcode Author: Bobby Cooke boku Tested on: Windows 10 v2004 x64 Compiled from: Kali Linux x8664 Shellcode Description: 64bit Windows 10 shellcode that injects all processes with Meterpreter reverse...

go-coredns:fuzz_plugin_cache: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5677061060558848 Project: go-coredns Fuzzing Engine: libFuzzer Fuzz Target: fuzzplugincache Job Type: libfuzzerasango-coredns Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

dragonfly:uploader_fuzz: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5741186432237568 Project: dragonfly Fuzzing Engine: libFuzzer Fuzz Target: uploaderfuzz Job Type: libfuzzerasandragonfly Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

kernel: Use-after-free in the vmacache_flush_all function resulting in a possible privilege escalation

A security flaw was discovered in the Linux kernel. The vmacacheflushall function in mm/vmacache.c mishandles sequence number overflows. An attacker can trigger a use-after-free and possibly gain privileges via certain thread creation, map, unmap, invalidation, and dereference operations...