Lucene search
K

23 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.7 views

Astra Linux - уязвимость в linux-5.15, linux-6.1, linux, linux-5.10

In the Linux kernel, the following vulnerabilities have been resolved: TLS: Fixed a race condition between TX work scheduling and socket closure. Similar to previous commits, the submitting thread recvmsg/sendmsg may exit as soon as the async crypto handler calls complete. It’s more logical to...

4.7CVSS6.2AI score0.00034EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2026/03/25 4:55 p.m.2 views

SUSE CVE-2026-23372

In the Linux kernel, the following vulnerability has been resolved: nfc: rawsock: cancel txwork before socket teardown In rawsockrelease, cancel any pending txwork and purge the write queue before orphaning the socket. rawsocktxwork runs on the system workqueue and calls nfcdataexchange which...

5.5CVSS6AI score0.0003EPSS
Exploits0References16
NVD
NVD
added 2026/03/25 11:16 a.m.0 views

CVE-2026-23372

In the Linux kernel, the following vulnerability has been resolved: nfc: rawsock: cancel txwork before socket teardown In rawsockrelease, cancel any pending txwork and purge the write queue before orphaning the socket. rawsocktxwork runs on the system workqueue and calls nfcdataexchange which...

7.8CVSS0.0003EPSS
Exploits0References8
CVE
CVE
added 2026/03/25 10:27 a.m.8 views

CVE-2026-23372

CVE-2026-23372 affects the Linux kernel NFC rawsock path (rawsock_release) where tx_work can race with socket/device teardown, risking use-after-free or leaked references. The fix adds synchronization: set SEND_SHUTDOWN to prevent in-progress tx_work, use cancel_work_sync to wait for in-flight ex...

7.8CVSS5.8AI score0.0003EPSS
Exploits0References8Affected Software1
OSV
OSV
added 2026/03/25 10:27 a.m.2 views

CVE-2026-23372 nfc: rawsock: cancel tx_work before socket teardown

In the Linux kernel, the following vulnerability has been resolved: nfc: rawsock: cancel txwork before socket teardown In rawsockrelease, cancel any pending txwork and purge the write queue before orphaning the socket. rawsocktxwork runs on the system workqueue and calls nfcdataexchange which...

7.8CVSS6AI score0.0003EPSS
Exploits0References9
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.3 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the rawsockrelease function not canceling the pending txwork, allowing for reuse after release...

7.8CVSS5.8AI score0.0003EPSS
Exploits0References7
CVE
CVE
added 2026/03/10 5:28 p.m.16 views

CVE-2026-23240

In CVE-2026-23240, the Linux kernel fixed a race condition in TLS handling where cancel_delayed_work_sync() used during tls_sk_proto_close() could allow tls_sw_cancel_work_tx() to schedule tx_work_handler() after the TLS object was freed. The root cause involved potential scheduling from paths li...

9.8CVSS5.6AI score0.0005EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2026/02/14 4:27 p.m.7 views

CVE-2025-71222

CVE-2025-71222 (Linux kernel) : Affects the wifi wlcore path. The issue arises from an insufficient skb headroom check before skb_push, causing an skb_under_panic Oops in wl1271_tx_work when headroom is insufficient (typical 110 vs 94, leaving 16 bytes). The fix ensures proper headroom before skb...

5.5CVSS5.2AI score0.00025EPSS
Exploits0References7Affected Software1
Cvelist
Cvelist
added 2026/02/14 4:27 p.m.25 views

CVE-2025-71222 wifi: wlcore: ensure skb headroom before skb_push

In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: ensure skb headroom before skbpush This avoids occasional skbunderpanic Oops from wl1271txwork. In this case, headroom is less than needed typically 110 - 94 = 16 bytes...

0.00025EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.2 views

PT-2026-27737

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the NFC rawsock functionality of the Linux kernel. Specifically, the rawsock release function does not properly cancel pending tx work and purge the write queue before...

7.8CVSS6.2AI score0.0003EPSS
Exploits0References25
NVD
NVD
added 2025/09/04 4:15 p.m.3 views

CVE-2025-38717

In the Linux kernel, the following vulnerability has been resolved: net: kcm: Fix race condition in kcmunattach syzbot found a race condition when kcmunattachpsock and kcmreleasekcm are executed at the same time. kcmunattach is missing a check of the flag kcm-txstopped before calling queuework. I...

4.7CVSS0.00019EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/05/21 12:45 a.m.2 views

SUSE CVE-2025-37982

In the Linux kernel, the following vulnerability has been resolved: wifi: wl1251: fix memory leak in wl1251txwork The skb dequeued from txqueue is lost when wl1251pselpwakeup fails with a -ETIMEDOUT error. Fix that by queueing the skb back to txqueue...

5.5CVSS7.6AI score0.00066EPSS
Exploits0References17
OSV
OSV
added 2025/02/26 7:0 a.m.2 views

UBUNTU-CVE-2022-49123

In the Linux kernel, the following vulnerability has been resolved: ath11k: Fix frames flush failure caused by deadlock We are seeing below warnings: kernel: 25393.301506 ath11kpci 0000:01:00.0: failed to flush mgmt transmit queue 0 kernel: 25398.421509 ath11kpci 0000:01:00.0: failed to flush mgm...

5.5CVSS6AI score0.00007EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/08/13 10:53 a.m.9 views

kernel: tls: race between tx work scheduling and socket close

A race condition vulnerability was found in the tls subsystem of the Linux kernel. The submitting thread recvmsg/sendmsg may exit as soon as the async crypto handler calls complete, which could lead to undefined behavior and a denial of service...

4.7CVSS6.6AI score0.00034EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/07/15 9:25 p.m.9 views

kernel: tls: race between tx work scheduling and socket close

A race condition vulnerability was found in the tls subsystem of the Linux kernel. The submitting thread recvmsg/sendmsg may exit as soon as the async crypto handler calls complete, which could lead to undefined behavior and a denial of service...

4.7CVSS6.6AI score0.00034EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/07/15 5:18 a.m.5 views

kernel: tls: race between tx work scheduling and socket close

A race condition vulnerability was found in the tls subsystem of the Linux kernel. The submitting thread recvmsg/sendmsg may exit as soon as the async crypto handler calls complete, which could lead to undefined behavior and a denial of service...

4.7CVSS6.6AI score0.00034EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/07/10 12:18 a.m.2 views

kernel: tls: race between tx work scheduling and socket close

A race condition vulnerability was found in the tls subsystem of the Linux kernel. The submitting thread recvmsg/sendmsg may exit as soon as the async crypto handler calls complete, which could lead to undefined behavior and a denial of service...

4.7CVSS6.6AI score0.00034EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/07/08 2:5 a.m.3 views

kernel: tls: race between tx work scheduling and socket close

A race condition vulnerability was found in the tls subsystem of the Linux kernel. The submitting thread recvmsg/sendmsg may exit as soon as the async crypto handler calls complete, which could lead to undefined behavior and a denial of service...

4.7CVSS6.6AI score0.00034EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/04/30 9:57 a.m.2 views

kernel: tls: race between tx work scheduling and socket close

A race condition vulnerability was found in the tls subsystem of the Linux kernel. The submitting thread recvmsg/sendmsg may exit as soon as the async crypto handler calls complete, which could lead to undefined behavior and a denial of service...

4.7CVSS6.6AI score0.00034EPSS
Exploits0References5
Microsoft CVE
Microsoft CVE
added 2024/03/15 7:0 a.m.4 views

tls: fix race between tx work scheduling and socket close

...

4.7CVSS6.7AI score0.00034EPSS
Exploits0
Rows per page
Query Builder