Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 24

Количество 24

ubuntu логотип

CVE-2025-21943

больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: protect driver attr handlers against module unload Both new_device_store and delete_device_store touch module global resources (e.g. gpio_aggregator_lock). To prevent race conditions with module unload, a reference needs to be held. Add try_module_get() in these handlers. For new_device_store, this eliminates what appears to be the most dangerous scenario: if an id is allocated from gpio_aggregator_idr but platform_device_register has not yet been called or completed, a concurrent module unload could fail to unregister/delete the device, leaving behind a dangling platform device/GPIO forwarder. This can result in various issues. The following simple reproducer demonstrates these problems: #!/bin/bash while :; do # note: whether 'gpiochip0 0' exists or not does not matter. echo 'gpiochip0 0' > /sys/bus/platform/drivers/gpio-aggregator/new_device done & while :; do modprobe gpio-aggregator modprobe -...

CVSS3: 4.7
EPSS: Низкий
redhat логотип

CVE-2025-21943

больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: protect driver attr handlers against module unload Both new_device_store and delete_device_store touch module global resources (e.g. gpio_aggregator_lock). To prevent race conditions with module unload, a reference needs to be held. Add try_module_get() in these handlers. For new_device_store, this eliminates what appears to be the most dangerous scenario: if an id is allocated from gpio_aggregator_idr but platform_device_register has not yet been called or completed, a concurrent module unload could fail to unregister/delete the device, leaving behind a dangling platform device/GPIO forwarder. This can result in various issues. The following simple reproducer demonstrates these problems: #!/bin/bash while :; do # note: whether 'gpiochip0 0' exists or not does not matter. echo 'gpiochip0 0' > /sys/bus/platform/drivers/gpio-aggregator/new_device done & while :; do modprobe gpio-aggregator modprobe -...

CVSS3: 4.7
EPSS: Низкий
nvd логотип

CVE-2025-21943

больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: protect driver attr handlers against module unload Both new_device_store and delete_device_store touch module global resources (e.g. gpio_aggregator_lock). To prevent race conditions with module unload, a reference needs to be held. Add try_module_get() in these handlers. For new_device_store, this eliminates what appears to be the most dangerous scenario: if an id is allocated from gpio_aggregator_idr but platform_device_register has not yet been called or completed, a concurrent module unload could fail to unregister/delete the device, leaving behind a dangling platform device/GPIO forwarder. This can result in various issues. The following simple reproducer demonstrates these problems: #!/bin/bash while :; do # note: whether 'gpiochip0 0' exists or not does not matter. echo 'gpiochip0 0' > /sys/bus/platform/drivers/gpio-aggregator/new_device done & while :; do modprobe gpio

CVSS3: 4.7
EPSS: Низкий
msrc логотип

CVE-2025-21943

3 месяца назад

gpio: aggregator: protect driver attr handlers against module unload

CVSS3: 4.7
EPSS: Низкий
debian логотип

CVE-2025-21943

больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: g ...

CVSS3: 4.7
EPSS: Низкий
github логотип

GHSA-m7pp-g2rm-wrcq

больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: protect driver attr handlers against module unload Both new_device_store and delete_device_store touch module global resources (e.g. gpio_aggregator_lock). To prevent race conditions with module unload, a reference needs to be held. Add try_module_get() in these handlers. For new_device_store, this eliminates what appears to be the most dangerous scenario: if an id is allocated from gpio_aggregator_idr but platform_device_register has not yet been called or completed, a concurrent module unload could fail to unregister/delete the device, leaving behind a dangling platform device/GPIO forwarder. This can result in various issues. The following simple reproducer demonstrates these problems: #!/bin/bash while :; do # note: whether 'gpiochip0 0' exists or not does not matter. echo 'gpiochip0 0' > /sys/bus/platform/drivers/gpio-aggregator/new_device done & while :; do modprobe g...

CVSS3: 4.7
EPSS: Низкий
fstec логотип

BDU:2025-04620

больше 1 года назад

Уязвимость модуля drivers/gpio/gpio-aggregator.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 4.7
EPSS: Низкий
redos логотип

ROS-20260120-73-0001

10 месяцев назад

Уязвимость kernel-lt

CVSS3: 4.7
EPSS: Низкий
altlinux логотип

ALT-PU-2025-16594

больше 1 года назад

ALT-PU-2025-16594: package `kernel-image-un-def` update to version 6.1.131-alt1

CVSS3: 8
EPSS: Низкий
altlinux логотип

ALT-PU-2025-16505

больше 1 года назад

ALT-PU-2025-16505: package `kernel-image-6.12` update to version 6.12.19-alt1

CVSS3: 8
EPSS: Низкий
altlinux логотип

ALT-PU-2025-5012

больше 1 года назад

ALT-PU-2025-5012: package `kernel-image-rt` update to version 5.10.235-alt1.rt129

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2025-4689

больше 1 года назад

ALT-PU-2025-4689: package `kernel-image-std-def` update to version 5.10.235-alt1

CVSS3: 9.8
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:01707-1

больше 1 года назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:01614-1

больше 1 года назад

Security update for the Linux Kernel

EPSS: Низкий
altlinux логотип

ALT-PU-2025-4807

больше 1 года назад

ALT-PU-2025-4807: package `kernel-image-pine` update to version 6.12.20-alt1

CVSS3: 8
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:01951-1

больше 1 года назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:01967-1

больше 1 года назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:01964-1

больше 1 года назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:01919-1

больше 1 года назад

Security update for the Linux Kernel

EPSS: Низкий
altlinux логотип

ALT-PU-2025-5786

больше 1 года назад

ALT-PU-2025-5786: package `kernel-image-rt` update to version 6.12.24-alt1

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-21943

In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: protect driver attr handlers against module unload Both new_device_store and delete_device_store touch module global resources (e.g. gpio_aggregator_lock). To prevent race conditions with module unload, a reference needs to be held. Add try_module_get() in these handlers. For new_device_store, this eliminates what appears to be the most dangerous scenario: if an id is allocated from gpio_aggregator_idr but platform_device_register has not yet been called or completed, a concurrent module unload could fail to unregister/delete the device, leaving behind a dangling platform device/GPIO forwarder. This can result in various issues. The following simple reproducer demonstrates these problems: #!/bin/bash while :; do # note: whether 'gpiochip0 0' exists or not does not matter. echo 'gpiochip0 0' > /sys/bus/platform/drivers/gpio-aggregator/new_device done & while :; do modprobe gpio-aggregator modprobe -...

CVSS3: 4.7
0%
Низкий
больше 1 года назад
redhat логотип
CVE-2025-21943

In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: protect driver attr handlers against module unload Both new_device_store and delete_device_store touch module global resources (e.g. gpio_aggregator_lock). To prevent race conditions with module unload, a reference needs to be held. Add try_module_get() in these handlers. For new_device_store, this eliminates what appears to be the most dangerous scenario: if an id is allocated from gpio_aggregator_idr but platform_device_register has not yet been called or completed, a concurrent module unload could fail to unregister/delete the device, leaving behind a dangling platform device/GPIO forwarder. This can result in various issues. The following simple reproducer demonstrates these problems: #!/bin/bash while :; do # note: whether 'gpiochip0 0' exists or not does not matter. echo 'gpiochip0 0' > /sys/bus/platform/drivers/gpio-aggregator/new_device done & while :; do modprobe gpio-aggregator modprobe -...

CVSS3: 4.7
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2025-21943

In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: protect driver attr handlers against module unload Both new_device_store and delete_device_store touch module global resources (e.g. gpio_aggregator_lock). To prevent race conditions with module unload, a reference needs to be held. Add try_module_get() in these handlers. For new_device_store, this eliminates what appears to be the most dangerous scenario: if an id is allocated from gpio_aggregator_idr but platform_device_register has not yet been called or completed, a concurrent module unload could fail to unregister/delete the device, leaving behind a dangling platform device/GPIO forwarder. This can result in various issues. The following simple reproducer demonstrates these problems: #!/bin/bash while :; do # note: whether 'gpiochip0 0' exists or not does not matter. echo 'gpiochip0 0' > /sys/bus/platform/drivers/gpio-aggregator/new_device done & while :; do modprobe gpio

CVSS3: 4.7
0%
Низкий
больше 1 года назад
msrc логотип
CVE-2025-21943

gpio: aggregator: protect driver attr handlers against module unload

CVSS3: 4.7
0%
Низкий
3 месяца назад
debian логотип
CVE-2025-21943

In the Linux kernel, the following vulnerability has been resolved: g ...

CVSS3: 4.7
0%
Низкий
больше 1 года назад
github логотип
GHSA-m7pp-g2rm-wrcq

In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: protect driver attr handlers against module unload Both new_device_store and delete_device_store touch module global resources (e.g. gpio_aggregator_lock). To prevent race conditions with module unload, a reference needs to be held. Add try_module_get() in these handlers. For new_device_store, this eliminates what appears to be the most dangerous scenario: if an id is allocated from gpio_aggregator_idr but platform_device_register has not yet been called or completed, a concurrent module unload could fail to unregister/delete the device, leaving behind a dangling platform device/GPIO forwarder. This can result in various issues. The following simple reproducer demonstrates these problems: #!/bin/bash while :; do # note: whether 'gpiochip0 0' exists or not does not matter. echo 'gpiochip0 0' > /sys/bus/platform/drivers/gpio-aggregator/new_device done & while :; do modprobe g...

CVSS3: 4.7
0%
Низкий
больше 1 года назад
fstec логотип
BDU:2025-04620

Уязвимость модуля drivers/gpio/gpio-aggregator.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 4.7
0%
Низкий
больше 1 года назад
redos логотип
ROS-20260120-73-0001

Уязвимость kernel-lt

CVSS3: 4.7
0%
Низкий
10 месяцев назад
altlinux логотип
ALT-PU-2025-16594

ALT-PU-2025-16594: package `kernel-image-un-def` update to version 6.1.131-alt1

CVSS3: 8
больше 1 года назад
altlinux логотип
ALT-PU-2025-16505

ALT-PU-2025-16505: package `kernel-image-6.12` update to version 6.12.19-alt1

CVSS3: 8
больше 1 года назад
altlinux логотип
ALT-PU-2025-5012

ALT-PU-2025-5012: package `kernel-image-rt` update to version 5.10.235-alt1.rt129

CVSS3: 9.8
больше 1 года назад
altlinux логотип
ALT-PU-2025-4689

ALT-PU-2025-4689: package `kernel-image-std-def` update to version 5.10.235-alt1

CVSS3: 9.8
больше 1 года назад
suse-cvrf логотип
SUSE-SU-2025:01707-1

Security update for the Linux Kernel

больше 1 года назад
suse-cvrf логотип
SUSE-SU-2025:01614-1

Security update for the Linux Kernel

больше 1 года назад
altlinux логотип
ALT-PU-2025-4807

ALT-PU-2025-4807: package `kernel-image-pine` update to version 6.12.20-alt1

CVSS3: 8
больше 1 года назад
suse-cvrf логотип
SUSE-SU-2025:01951-1

Security update for the Linux Kernel

больше 1 года назад
suse-cvrf логотип
SUSE-SU-2025:01967-1

Security update for the Linux Kernel

больше 1 года назад
suse-cvrf логотип
SUSE-SU-2025:01964-1

Security update for the Linux Kernel

больше 1 года назад
suse-cvrf логотип
SUSE-SU-2025:01919-1

Security update for the Linux Kernel

больше 1 года назад
altlinux логотип
ALT-PU-2025-5786

ALT-PU-2025-5786: package `kernel-image-rt` update to version 6.12.24-alt1

CVSS3: 9.8
больше 1 года назад

Уязвимостей на страницу