CVE-2025-40260

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix scxenable crash on helper kthread creation failure A crash was observed when the schedext selftests runner was terminated with Ctrl+\ while test 15 was running: NIP c00000000028fa58 scxenable.constprop.0+0x358/0x12b...

Exploit for CVE-2025-55182

React2Shell Scanner High Fidelity Detection & Exploitation To...

CVE-2025-40260

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix scxenable crash on helper kthread creation failure A crash was observed when the schedext selftests runner was terminated with Ctrl+\ while test 15 was running: NIP c00000000028fa58 scxenable.constprop.0+0x358/0x12b...

PT-2026-38935

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the wave5 driver when operating in polling mode. The driver uses an hrtimer to periodically trigger the wave5 vpu timer callback function, which queues work vi...

scsi: target: iscsi: Fix a race condition between login_work and the login thread

...

Linux dm-crypt Buffer Overflow DoS

The vulnerability of the drivers/md/dm-crypt.c component in the Linux operating system is related to mutual blocking of execution threads. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of protected information...

Linux fs/ntfs3/file.c DoS

The vulnerability in the fs/ntfs3/file.c component of the Linux operating system is related to mutual locking of execution threads. Exploiting this vulnerability allows an attacker to cause a service failure...

Linux media i2c mt9m114 component DoS

The vulnerability of the media/i2c/mt9m114.c component of the Linux operating system is related to mutual blocking of execution threads. Exploiting this vulnerability allows an attacker to cause a service failure...

virtio-net DoS

The vulnerability of the virtio-net component in the Linux operating system is related to mutual locking of execution threads. Exploiting this vulnerability allows an attacker to cause a service failure...

Linux SMB2PDU Component DoS

The vulnerability of the fs/smb/server/smb2pdu.c component in the Linux operating system is related to mutual blocking of execution threads. Exploiting this vulnerability allows an attacker to cause service failures...

Linux kernel DRM/amdkfd DoS

The vulnerability of the DRM/amdkfd component in Linux kernel relates to the mutual blocking of execution threads. Exploiting this vulnerability allows a perpetrator to cause service failures...

Linux mmleak Heap Buffer Overflow DoS

The vulnerability of the mempoolalloc function in the mm/kmemleak.c component of the Linux operating system is related to mutual locking of execution threads. Exploiting this vulnerability allows an attacker to cause a service failure...

Race Condition within a Thread

Overview mcp-mesh is a Kubernetes-native platform for distributed MCP applications Affected versions of this package are vulnerable to Race Condition within a Thread due to a Race Condition in Access Control. The agent shutdown process fails to atomically remove agents from the registry before...

Authorization Bypass Through User-Controlled Key

Overview chainlit is a Build Conversational AI. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key due to a missing authorization check when binding a WebSocket session to a user-supplied threadId. An attacker can exploit this weakness by providin...

PUB-A-427204614

In bigoworkerthread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Apache Druid’s Kerberos authenticator uses a weak fallback secret

Apache Druid’s Kerberos authenticator uses a weak fallback secret when the druid.auth.authenticator.kerberos.cookieSignatureSecret configuration is not explicitly set. In this case, the secret is generated using ThreadLocalRandom, which is not a crypto-graphically secure random number generator...

CVE-2025-65947

thread-amount is a tool that gets the amount of threads in the current process. Prior to version 0.2.2, there are resource leaks when querying thread counts on Windows and Apple platforms. In Windows platforms, the threadamount function calls CreateToolhelp32Snapshot but fails to close the return...

CVE-2025-65947

thread-amount is a tool that gets the amount of threads in the current process. Prior to version 0.2.2, there are resource leaks when querying thread counts on Windows and Apple platforms. In Windows platforms, the threadamount function calls CreateToolhelp32Snapshot but fails to close the return...

CVE-2025-65947

thread-amount is a tool that gets the amount of threads in the current process. Prior to version 0.2.2, there are resource leaks when querying thread counts on Windows and Apple platforms. In Windows platforms, the threadamount function calls CreateToolhelp32Snapshot but fails to close the return...

CVE-2025-65947 thread-amount is Vulnerable to Resource Exhaustion (Memory and Handle Leaks) on Windows and macOS

thread-amount is a tool that gets the amount of threads in the current process. Prior to version 0.2.2, there are resource leaks when querying thread counts on Windows and Apple platforms. In Windows platforms, the threadamount function calls CreateToolhelp32Snapshot but fails to close the return...