6024 matches found
CVE-2025-32346
In onActivityResult of VoicemailSettingsActivity.java, there is a possible work profile contact number leak due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-32346
The Google Android operating system is affected by an obfuscated proxy vulnerability within the VoicemailSettingsActivity.java file, specifically in the onActivityResult function. Due to a confused deputy issue, an attacker can exploit this to cause a leak of work profile contact numbers and achi...
AZL-66887 CVE-2025-38717 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: net: kcm: Fix race condition in kcmunattach syzbot found a race condition when kcmunattachpsock and kcmreleasekcm are executed at the same time. kcmunattach is missing a check of the flag kcm-txstopped before calling queuework. I...
DEBIAN-CVE-2025-38717
In the Linux kernel, the following vulnerability has been resolved: net: kcm: Fix race condition in kcmunattach syzbot found a race condition when kcmunattachpsock and kcmreleasekcm are executed at the same time. kcmunattach is missing a check of the flag kcm-txstopped before calling queuework. I...
CVE-2025-38717
In the Linux kernel, the following vulnerability has been resolved: net: kcm: Fix race condition in kcmunattach syzbot found a race condition when kcmunattachpsock and kcmreleasekcm are executed at the same time. kcmunattach is missing a check of the flag kcm-txstopped before calling queuework. I...
AZL-70783 CVE-2025-38717 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: net: kcm: Fix race condition in kcmunattach syzbot found a race condition when kcmunattachpsock and kcmreleasekcm are executed at the same time. kcmunattach is missing a check of the flag kcm-txstopped before calling queuework. I...
UBUNTU-CVE-2025-38717
In the Linux kernel, the following vulnerability has been resolved: net: kcm: Fix race condition in kcmunattach syzbot found a race condition when kcmunattachpsock and kcmreleasekcm are executed at the same time. kcmunattach is missing a check of the flag kcm-txstopped before calling queuework. I...
CVE-2025-38717 net: kcm: Fix race condition in kcm_unattach()
In the Linux kernel, the following vulnerability has been resolved: net: kcm: Fix race condition in kcmunattach syzbot found a race condition when kcmunattachpsock and kcmreleasekcm are executed at the same time. kcmunattach is missing a check of the flag kcm-txstopped before calling queuework. I...
CVE-2025-38717
The CVE-2025-38717 entry describes a race condition in the Linux kernel’s net: kcm subsystem, specifically between kcm_unattach(psock) and kcm_release(kcm). The bug occurred because kcm_unattach() did not check the kcm->tx_stopped flag before queue_work(), which could allow kcm->tx_work to ...
CVE-2025-38717 net: kcm: Fix race condition in kcm_unattach()
In the Linux kernel, the following vulnerability has been resolved: net: kcm: Fix race condition in kcmunattach syzbot found a race condition when kcmunattachpsock and kcmreleasekcm are executed at the same time. kcmunattach is missing a check of the flag kcm-txstopped before calling queuework. I...
workqueue: Put the pwq after detaching the rescuer from the pool
...
Bluetooth: hci_conn: Use disable_delayed_work_sync
...
genirq/irq_sim: Initialize work context pointers properly
...
bpf: Defer work in bpf_timer_cancel_and_free
...
dm cache: fix flushing uninitialized delayed_work on cache_ctr error
...
PT-2025-36045
Name of the Vulnerable Software and Affected Versions: VoicemailSettingsActivity.java affected versions not specified Description: A potential work profile contact number leak exists due to a confused deputy condition within the onActivityResult function of the VoicemailSettingsActivity.java file...
Google Android 安全漏洞
Google Android is a free and open source mobile operating system based on the Linux kernel, developed by Google Inc. and the Open Handset Alliance, and is mainly used for smartphones, tablets and other devices. Google Android suffers from an obfuscated proxy vulnerability that originates from...
PT-2025-36053
Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A logic error in the code may allow for the leakage of hidden work profile notifications, potentially leading to local information disclosure. Exploitation does not require additional execution...