All CVEs — page 300 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This vulnerability occurs when Bluetooth RFCOMM listener cleanup closes unaccepted child sockets in the wrong order, potentially causing a deadlock between socket locks and the RFCOMM mutex. This can lead to system instability or denial of service when handling Bluetooth connections.
The flaw allows a concurrent vCPU to race with the free path of another vCPU, leading to a use-after-free condition and potential memory corruption.
The flaw involves an overflow validation issue in the iommu_tce_check_ioba function, which can lead to potential security risks if not properly addressed.
The Linux kernel fails to properly allocate private futex hash tables during vfork() operations, which can lead to race conditions where futex waiters are created before the necessary hash table is allocated. This vulnerability allows for potential memory corruption or denial of service when processes fork with shared memory mappings.
The Linux kernel contains a race condition in sock_gettstamp() where socket flags are modified without proper locking, leading to potential use-after-free conditions in UDP sockets when SIOCGSTAMPNS_NEW ioctl races with bind() operations. This vulnerability allows for memory corruption and system instability.