8 matches found
EUVD-2025-12962
Malicious code in bioql PyPI...
EUVD-2025-12966
Malicious code in bioql PyPI...
CVE-2022-49815
CVE-2022-49815 : In the Linux kernel, the erofs fix adds a missing xas_retry() in fscache mode during xarray iteration. The iteration currently holds only the RCU read lock and may encounter XA_RETRY_ENTRY when an entry is modified concurrently, which could cause an oops when dereferencing an inv...
CVE-2022-49815 erofs: fix missing xas_retry() in fscache mode
In the Linux kernel, the following vulnerability has been resolved: erofs: fix missing xasretry in fscache mode The xarray iteration only holds the RCU read lock and thus may encounter XARETRYENTRY if there's process modifying the xarray concurrently. This will cause oops when referring to the...
CVE-2022-49810 netfs: Fix missing xas_retry() calls in xarray iteration
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing xasretry calls in xarray iteration netfslib has a number of places in which it performs iteration of an xarray whilst being under the RCU read lock. It should call xasretry as the first thing inside of the loop...
CVE-2022-49810
The CVE-2022-49810 issue affects the Linux kernel netfs/xarray iteration under RCUp where missing xas_retry() checks could cause a NULL-pointer dereference in netfs_rreq_unlock and related code paths. Connected documents confirm the root cause in netfslib’s xarray iteration under RCU read lock an...
GSD-2022-1007737 erofs: fix missing xas_retry() in fscache mode
erofs: fix missing xasretry in fscache mode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...
GSD-2022-1007732 netfs: Fix missing xas_retry() calls in xarray iteration
netfs: Fix missing xasretry calls in xarray iteration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...