Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 14

Количество 14

github логотип

GHSA-258w-3pq9-4jh3

около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix race condition in RPC handle list access The 'sess->rpc_handle_list' XArray manages RPC handles within a ksmbd session. Access to this list is intended to be protected by 'sess->rpc_lock' (an rw_semaphore). However, the locking implementation was flawed, leading to potential race conditions. In ksmbd_session_rpc_open(), the code incorrectly acquired only a read lock before calling xa_store() and xa_erase(). Since these operations modify the XArray structure, a write lock is required to ensure exclusive access and prevent data corruption from concurrent modifications. Furthermore, ksmbd_session_rpc_method() accessed the list using xa_load() without holding any lock at all. This could lead to reading inconsistent data or a potential use-after-free if an entry is concurrently removed and the pointer is dereferenced. Fix these issues by: 1. Using down_write() and up_write() in ksmbd_session_rpc_open() ...

CVSS3: 4.7
EPSS: Низкий
ubuntu логотип

CVE-2025-40039

около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix race condition in RPC handle list access The 'sess->rpc_handle_list' XArray manages RPC handles within a ksmbd session. Access to this list is intended to be protected by 'sess->rpc_lock' (an rw_semaphore). However, the locking implementation was flawed, leading to potential race conditions. In ksmbd_session_rpc_open(), the code incorrectly acquired only a read lock before calling xa_store() and xa_erase(). Since these operations modify the XArray structure, a write lock is required to ensure exclusive access and prevent data corruption from concurrent modifications. Furthermore, ksmbd_session_rpc_method() accessed the list using xa_load() without holding any lock at all. This could lead to reading inconsistent data or a potential use-after-free if an entry is concurrently removed and the pointer is dereferenced. Fix these issues by: 1. Using down_write() and up_write() in ksmbd_session_rpc_open() to ensu...

CVSS3: 4.7
EPSS: Низкий
redhat логотип

CVE-2025-40039

около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix race condition in RPC handle list access The 'sess->rpc_handle_list' XArray manages RPC handles within a ksmbd session. Access to this list is intended to be protected by 'sess->rpc_lock' (an rw_semaphore). However, the locking implementation was flawed, leading to potential race conditions. In ksmbd_session_rpc_open(), the code incorrectly acquired only a read lock before calling xa_store() and xa_erase(). Since these operations modify the XArray structure, a write lock is required to ensure exclusive access and prevent data corruption from concurrent modifications. Furthermore, ksmbd_session_rpc_method() accessed the list using xa_load() without holding any lock at all. This could lead to reading inconsistent data or a potential use-after-free if an entry is concurrently removed and the pointer is dereferenced. Fix these issues by: 1. Using down_write() and up_write() in ksmbd_session_rpc_open() to ensu...

EPSS: Низкий
nvd логотип

CVE-2025-40039

около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix race condition in RPC handle list access The 'sess->rpc_handle_list' XArray manages RPC handles within a ksmbd session. Access to this list is intended to be protected by 'sess->rpc_lock' (an rw_semaphore). However, the locking implementation was flawed, leading to potential race conditions. In ksmbd_session_rpc_open(), the code incorrectly acquired only a read lock before calling xa_store() and xa_erase(). Since these operations modify the XArray structure, a write lock is required to ensure exclusive access and prevent data corruption from concurrent modifications. Furthermore, ksmbd_session_rpc_method() accessed the list using xa_load() without holding any lock at all. This could lead to reading inconsistent data or a potential use-after-free if an entry is concurrently removed and the pointer is dereferenced. Fix these issues by: 1. Using down_write() and up_write() in ksmbd_session_rpc_open() to

CVSS3: 4.7
EPSS: Низкий
msrc логотип

CVE-2025-40039

8 месяцев назад

ksmbd: Fix race condition in RPC handle list access

CVSS3: 4.7
EPSS: Низкий
debian логотип

CVE-2025-40039

около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: k ...

CVSS3: 4.7
EPSS: Низкий
fstec логотип

BDU:2026-11400

около 1 года назад

Уязвимость компонента ksmbd ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 4.7
EPSS: Низкий
redos логотип

ROS-20260923-80-0096

около 2 месяцев назад

Уязвимость kernel-lt

CVSS3: 4.7
EPSS: Низкий
redos логотип

ROS-20260923-73-0095

около 2 месяцев назад

Уязвимость kernel-lt

CVSS3: 4.7
EPSS: Низкий
altlinux логотип

ALT-PU-2025-16511

около 1 года назад

ALT-PU-2025-16511: package `kernel-image-6.12` update to version 6.12.55-alt1

CVSS3: 7
EPSS: Низкий
altlinux логотип

ALT-PU-2025-16466

около 1 года назад

ALT-PU-2025-16466: package `kernel-image-rt` update to version 6.12.55-alt1

CVSS3: 7
EPSS: Низкий
altlinux логотип

ALT-PU-2026-6044

7 месяцев назад

ALT-PU-2026-6044: package `kernel-image-rpi-un` update to version 6.12.79-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-1529

10 месяцев назад

ALT-PU-2026-1529: package `kernel-image-pine` update to version 6.12.66-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-9924

5 месяцев назад

ALT-PU-2026-9924: package `kernel-image-rpi-un` update to version 6.12.94-alt1

CVSS3: 10
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-258w-3pq9-4jh3

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix race condition in RPC handle list access The 'sess->rpc_handle_list' XArray manages RPC handles within a ksmbd session. Access to this list is intended to be protected by 'sess->rpc_lock' (an rw_semaphore). However, the locking implementation was flawed, leading to potential race conditions. In ksmbd_session_rpc_open(), the code incorrectly acquired only a read lock before calling xa_store() and xa_erase(). Since these operations modify the XArray structure, a write lock is required to ensure exclusive access and prevent data corruption from concurrent modifications. Furthermore, ksmbd_session_rpc_method() accessed the list using xa_load() without holding any lock at all. This could lead to reading inconsistent data or a potential use-after-free if an entry is concurrently removed and the pointer is dereferenced. Fix these issues by: 1. Using down_write() and up_write() in ksmbd_session_rpc_open() ...

CVSS3: 4.7
0%
Низкий
около 1 года назад
ubuntu логотип
CVE-2025-40039

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix race condition in RPC handle list access The 'sess->rpc_handle_list' XArray manages RPC handles within a ksmbd session. Access to this list is intended to be protected by 'sess->rpc_lock' (an rw_semaphore). However, the locking implementation was flawed, leading to potential race conditions. In ksmbd_session_rpc_open(), the code incorrectly acquired only a read lock before calling xa_store() and xa_erase(). Since these operations modify the XArray structure, a write lock is required to ensure exclusive access and prevent data corruption from concurrent modifications. Furthermore, ksmbd_session_rpc_method() accessed the list using xa_load() without holding any lock at all. This could lead to reading inconsistent data or a potential use-after-free if an entry is concurrently removed and the pointer is dereferenced. Fix these issues by: 1. Using down_write() and up_write() in ksmbd_session_rpc_open() to ensu...

CVSS3: 4.7
0%
Низкий
около 1 года назад
redhat логотип
CVE-2025-40039

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix race condition in RPC handle list access The 'sess->rpc_handle_list' XArray manages RPC handles within a ksmbd session. Access to this list is intended to be protected by 'sess->rpc_lock' (an rw_semaphore). However, the locking implementation was flawed, leading to potential race conditions. In ksmbd_session_rpc_open(), the code incorrectly acquired only a read lock before calling xa_store() and xa_erase(). Since these operations modify the XArray structure, a write lock is required to ensure exclusive access and prevent data corruption from concurrent modifications. Furthermore, ksmbd_session_rpc_method() accessed the list using xa_load() without holding any lock at all. This could lead to reading inconsistent data or a potential use-after-free if an entry is concurrently removed and the pointer is dereferenced. Fix these issues by: 1. Using down_write() and up_write() in ksmbd_session_rpc_open() to ensu...

0%
Низкий
около 1 года назад
nvd логотип
CVE-2025-40039

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix race condition in RPC handle list access The 'sess->rpc_handle_list' XArray manages RPC handles within a ksmbd session. Access to this list is intended to be protected by 'sess->rpc_lock' (an rw_semaphore). However, the locking implementation was flawed, leading to potential race conditions. In ksmbd_session_rpc_open(), the code incorrectly acquired only a read lock before calling xa_store() and xa_erase(). Since these operations modify the XArray structure, a write lock is required to ensure exclusive access and prevent data corruption from concurrent modifications. Furthermore, ksmbd_session_rpc_method() accessed the list using xa_load() without holding any lock at all. This could lead to reading inconsistent data or a potential use-after-free if an entry is concurrently removed and the pointer is dereferenced. Fix these issues by: 1. Using down_write() and up_write() in ksmbd_session_rpc_open() to

CVSS3: 4.7
0%
Низкий
около 1 года назад
msrc логотип
CVE-2025-40039

ksmbd: Fix race condition in RPC handle list access

CVSS3: 4.7
0%
Низкий
8 месяцев назад
debian логотип
CVE-2025-40039

In the Linux kernel, the following vulnerability has been resolved: k ...

CVSS3: 4.7
0%
Низкий
около 1 года назад
fstec логотип
BDU:2026-11400

Уязвимость компонента ksmbd ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 4.7
0%
Низкий
около 1 года назад
redos логотип
ROS-20260923-80-0096

Уязвимость kernel-lt

CVSS3: 4.7
0%
Низкий
около 2 месяцев назад
redos логотип
ROS-20260923-73-0095

Уязвимость kernel-lt

CVSS3: 4.7
0%
Низкий
около 2 месяцев назад
altlinux логотип
ALT-PU-2025-16511

ALT-PU-2025-16511: package `kernel-image-6.12` update to version 6.12.55-alt1

CVSS3: 7
около 1 года назад
altlinux логотип
ALT-PU-2025-16466

ALT-PU-2025-16466: package `kernel-image-rt` update to version 6.12.55-alt1

CVSS3: 7
около 1 года назад
altlinux логотип
ALT-PU-2026-6044

ALT-PU-2026-6044: package `kernel-image-rpi-un` update to version 6.12.79-alt1

CVSS3: 9.8
7 месяцев назад
altlinux логотип
ALT-PU-2026-1529

ALT-PU-2026-1529: package `kernel-image-pine` update to version 6.12.66-alt1

CVSS3: 9.8
10 месяцев назад
altlinux логотип
ALT-PU-2026-9924

ALT-PU-2026-9924: package `kernel-image-rpi-un` update to version 6.12.94-alt1

CVSS3: 10
5 месяцев назад

Уязвимостей на страницу