4954 matches found
CVE-2025-32346
CVE-2025-32346 pertains to VoicemailSettingsActivity.java in Android, where a confused deputy allows disclosure of work profile contact numbers, enabling local escalation of privilege with no additional privileges and no user interaction required. The connected documents reiterate the same root c...
CVE-2025-32346
In onActivityResult of VoicemailSettingsActivity.java, there is a possible work profile contact number leak due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-32346
In onActivityResult of VoicemailSettingsActivity.java, there is a possible work profile contact number leak due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-38717
In the Linux kernel, the following vulnerability has been resolved: net: kcm: Fix race condition in kcmunattach syzbot found a race condition when kcmunattachpsock and kcmreleasekcm are executed at the same time. kcmunattach is missing a check of the flag kcm-txstopped before calling queuework. I...
AZL-66887 CVE-2025-38717 affecting package kernel 6.6.126.1-1
In the Linux kernel, the following vulnerability has been resolved: net: kcm: Fix race condition in kcmunattach syzbot found a race condition when kcmunattachpsock and kcmreleasekcm are executed at the same time. kcmunattach is missing a check of the flag kcm-txstopped before calling queuework. I...
AZL-70783 CVE-2025-38717 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: net: kcm: Fix race condition in kcmunattach syzbot found a race condition when kcmunattachpsock and kcmreleasekcm are executed at the same time. kcmunattach is missing a check of the flag kcm-txstopped before calling queuework. I...
DEBIAN-CVE-2025-38717
In the Linux kernel, the following vulnerability has been resolved: net: kcm: Fix race condition in kcmunattach syzbot found a race condition when kcmunattachpsock and kcmreleasekcm are executed at the same time. kcmunattach is missing a check of the flag kcm-txstopped before calling queuework. I...
UBUNTU-CVE-2025-38717
In the Linux kernel, the following vulnerability has been resolved: net: kcm: Fix race condition in kcmunattach syzbot found a race condition when kcmunattachpsock and kcmreleasekcm are executed at the same time. kcmunattach is missing a check of the flag kcm-txstopped before calling queuework. I...
CVE-2025-38717 net: kcm: Fix race condition in kcm_unattach()
In the Linux kernel, the following vulnerability has been resolved: net: kcm: Fix race condition in kcmunattach syzbot found a race condition when kcmunattachpsock and kcmreleasekcm are executed at the same time. kcmunattach is missing a check of the flag kcm-txstopped before calling queuework. I...
CVE-2025-38717
The CVE-2025-38717 entry describes a race condition in the Linux kernel’s net: kcm subsystem, specifically between kcm_unattach(psock) and kcm_release(kcm). The bug occurred because kcm_unattach() did not check the kcm->tx_stopped flag before queue_work(), which could allow kcm->tx_work to ...
CVE-2025-38717 net: kcm: Fix race condition in kcm_unattach()
In the Linux kernel, the following vulnerability has been resolved: net: kcm: Fix race condition in kcmunattach syzbot found a race condition when kcmunattachpsock and kcmreleasekcm are executed at the same time. kcmunattach is missing a check of the flag kcm-txstopped before calling queuework. I...
dm cache: fix flushing uninitialized delayed_work on cache_ctr error
...
workqueue: Put the pwq after detaching the rescuer from the pool
...
Google Android 安全漏洞
Google Android is a free and open source mobile operating system based on the Linux kernel, developed by Google Inc. and the Open Handset Alliance, and is mainly used for smartphones, tablets and other devices. Google Android suffers from an obfuscated proxy vulnerability that originates from...
PT-2025-36045
Name of the Vulnerable Software and Affected Versions: VoicemailSettingsActivity.java affected versions not specified Description: A potential work profile contact number leak exists due to a confused deputy condition within the onActivityResult function of the VoicemailSettingsActivity.java file...
PT-2025-36053
Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A logic error in the code may allow for the leakage of hidden work profile notifications, potentially leading to local information disclosure. Exploitation does not require additional execution...
Bluetooth: hci_conn: Use disable_delayed_work_sync
...
vhost_task: Handle SIGKILL by flushing work and exiting
...