Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 18

Количество 18

ubuntu логотип

CVE-2025-39877

около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix use-after-free in state_show() state_show() reads kdamond->damon_ctx without holding damon_sysfs_lock. This allows a use-after-free race: CPU 0 CPU 1 ----- ----- state_show() damon_sysfs_turn_damon_on() ctx = kdamond->damon_ctx; mutex_lock(&damon_sysfs_lock); damon_destroy_ctx(kdamond->damon_ctx); kdamond->damon_ctx = NULL; mutex_unlock(&damon_sysfs_lock); damon_is_running(ctx); /* ctx is freed */ mutex_lock(&ctx->kdamond_lock); /* UAF */ (The race can also occur with damon_sysfs_kdamonds_rm_dirs() and damon_sysfs_kdamond_release(), which free or replace the context under damon_sysfs_lock.) Fix by taking damon_sysfs_lock before dereferencing the context, mirroring the locking used in pid_show(). The bug has existed since state_show() first accessed kdamond->damon_ctx.

CVSS3: 7.8
EPSS: Низкий
redhat логотип

CVE-2025-39877

около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix use-after-free in state_show() state_show() reads kdamond->damon_ctx without holding damon_sysfs_lock. This allows a use-after-free race: CPU 0 CPU 1 ----- ----- state_show() damon_sysfs_turn_damon_on() ctx = kdamond->damon_ctx; mutex_lock(&damon_sysfs_lock); damon_destroy_ctx(kdamond->damon_ctx); kdamond->damon_ctx = NULL; mutex_unlock(&damon_sysfs_lock); damon_is_running(ctx); /* ctx is freed */ mutex_lock(&ctx->kdamond_lock); /* UAF */ (The race can also occur with damon_sysfs_kdamonds_rm_dirs() and damon_sysfs_kdamond_release(), which free or replace the context under damon_sysfs_lock.) Fix by taking damon_sysfs_lock before dereferencing the context, mirroring the locking used in pid_show(). The bug has existed since state_show() first accessed kdamond->damon_ctx.

CVSS3: 4.7
EPSS: Низкий
nvd логотип

CVE-2025-39877

около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix use-after-free in state_show() state_show() reads kdamond->damon_ctx without holding damon_sysfs_lock. This allows a use-after-free race: CPU 0 CPU 1 ----- ----- state_show() damon_sysfs_turn_damon_on() ctx = kdamond->damon_ctx; mutex_lock(&damon_sysfs_lock); damon_destroy_ctx(kdamond->damon_ctx); kdamond->damon_ctx = NULL; mutex_unlock(&damon_sysfs_lock); damon_is_running(ctx); /* ctx is freed */ mutex_lock(&ctx->kdamond_lock); /* UAF */ (The race can also occur with damon_sysfs_kdamonds_rm_dirs() and damon_sysfs_kdamond_release(), which free or replace the context under damon_sysfs_lock.) Fix by taking damon_sysfs_lock before dereferencing the context, mirroring the locking used in pid_show(). The bug has existed since state_sh

CVSS3: 7.8
EPSS: Низкий
msrc логотип

CVE-2025-39877

около 1 года назад

mm/damon/sysfs: fix use-after-free in state_show()

EPSS: Низкий
debian логотип

CVE-2025-39877

около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: m ...

CVSS3: 7.8
EPSS: Низкий
github логотип

GHSA-46f8-9r54-mw7h

около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix use-after-free in state_show() state_show() reads kdamond->damon_ctx without holding damon_sysfs_lock. This allows a use-after-free race: CPU 0 CPU 1 ----- ----- state_show() damon_sysfs_turn_damon_on() ctx = kdamond->damon_ctx; mutex_lock(&damon_sysfs_lock); damon_destroy_ctx(kdamond->damon_ctx); kdamond->damon_ctx = NULL; mutex_unlock(&damon_sysfs_lock); damon_is_running(ctx); /* ctx is freed */ mutex_lock(&ctx->kdamond_lock); /* UAF */ (The race can also occur with damon_sysfs_kdamonds_rm_dirs() and damon_sysfs_kdamond_release(), which free or replace the context under damon_sysfs_lock.) Fix by taking damon_sysfs_lock before dereferencing the context, mirroring the locking used in pid_show(). The bug has existed since state...

CVSS3: 7.8
EPSS: Низкий
fstec логотип

BDU:2025-13886

около 1 года назад

Уязвимость функции state_show() модуля mm/damon/sysfs.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код

CVSS3: 7
EPSS: Низкий
redos логотип

ROS-20260806-80-0020

3 месяца назад

Уязвимость kernel-lt

CVSS3: 7
EPSS: Низкий
redos логотип

ROS-20260806-73-0020

3 месяца назад

Уязвимость kernel-lt

CVSS3: 7
EPSS: Низкий
altlinux логотип

ALT-PU-2025-16601

около 1 года назад

ALT-PU-2025-16601: package `kernel-image-un-def` update to version 6.1.153-alt1

CVSS3: 7.8
EPSS: Низкий
oracle-oval логотип

ELSA-2025-25754

12 месяцев назад

ELSA-2025-25754: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS: Низкий
altlinux логотип

ALT-PU-2025-12715

около 1 года назад

ALT-PU-2025-12715: package `kernel-image-rt` update to version 6.12.51-alt1

CVSS3: 8
EPSS: Низкий
altlinux логотип

ALT-PU-2025-12713

около 1 года назад

ALT-PU-2025-12713: package `kernel-image-6.12` update to version 6.12.51-alt1

CVSS3: 8
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2025:20081-1

12 месяцев назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2025-20011-1

около 1 года назад

Security update for the Linux Kernel

EPSS: Низкий
altlinux логотип

ALT-PU-2026-1529

10 месяцев назад

ALT-PU-2026-1529: package `kernel-image-pine` update to version 6.12.66-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2025-12647

около 1 года назад

ALT-PU-2025-12647: package `kernel-image-rpi-un` update to version 6.12.49-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-9924

5 месяцев назад

ALT-PU-2026-9924: package `kernel-image-rpi-un` update to version 6.12.94-alt1

CVSS3: 10
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-39877

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix use-after-free in state_show() state_show() reads kdamond->damon_ctx without holding damon_sysfs_lock. This allows a use-after-free race: CPU 0 CPU 1 ----- ----- state_show() damon_sysfs_turn_damon_on() ctx = kdamond->damon_ctx; mutex_lock(&damon_sysfs_lock); damon_destroy_ctx(kdamond->damon_ctx); kdamond->damon_ctx = NULL; mutex_unlock(&damon_sysfs_lock); damon_is_running(ctx); /* ctx is freed */ mutex_lock(&ctx->kdamond_lock); /* UAF */ (The race can also occur with damon_sysfs_kdamonds_rm_dirs() and damon_sysfs_kdamond_release(), which free or replace the context under damon_sysfs_lock.) Fix by taking damon_sysfs_lock before dereferencing the context, mirroring the locking used in pid_show(). The bug has existed since state_show() first accessed kdamond->damon_ctx.

CVSS3: 7.8
0%
Низкий
около 1 года назад
redhat логотип
CVE-2025-39877

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix use-after-free in state_show() state_show() reads kdamond->damon_ctx without holding damon_sysfs_lock. This allows a use-after-free race: CPU 0 CPU 1 ----- ----- state_show() damon_sysfs_turn_damon_on() ctx = kdamond->damon_ctx; mutex_lock(&damon_sysfs_lock); damon_destroy_ctx(kdamond->damon_ctx); kdamond->damon_ctx = NULL; mutex_unlock(&damon_sysfs_lock); damon_is_running(ctx); /* ctx is freed */ mutex_lock(&ctx->kdamond_lock); /* UAF */ (The race can also occur with damon_sysfs_kdamonds_rm_dirs() and damon_sysfs_kdamond_release(), which free or replace the context under damon_sysfs_lock.) Fix by taking damon_sysfs_lock before dereferencing the context, mirroring the locking used in pid_show(). The bug has existed since state_show() first accessed kdamond->damon_ctx.

CVSS3: 4.7
0%
Низкий
около 1 года назад
nvd логотип
CVE-2025-39877

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix use-after-free in state_show() state_show() reads kdamond->damon_ctx without holding damon_sysfs_lock. This allows a use-after-free race: CPU 0 CPU 1 ----- ----- state_show() damon_sysfs_turn_damon_on() ctx = kdamond->damon_ctx; mutex_lock(&damon_sysfs_lock); damon_destroy_ctx(kdamond->damon_ctx); kdamond->damon_ctx = NULL; mutex_unlock(&damon_sysfs_lock); damon_is_running(ctx); /* ctx is freed */ mutex_lock(&ctx->kdamond_lock); /* UAF */ (The race can also occur with damon_sysfs_kdamonds_rm_dirs() and damon_sysfs_kdamond_release(), which free or replace the context under damon_sysfs_lock.) Fix by taking damon_sysfs_lock before dereferencing the context, mirroring the locking used in pid_show(). The bug has existed since state_sh

CVSS3: 7.8
0%
Низкий
около 1 года назад
msrc логотип
CVE-2025-39877

mm/damon/sysfs: fix use-after-free in state_show()

0%
Низкий
около 1 года назад
debian логотип
CVE-2025-39877

In the Linux kernel, the following vulnerability has been resolved: m ...

CVSS3: 7.8
0%
Низкий
около 1 года назад
github логотип
GHSA-46f8-9r54-mw7h

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix use-after-free in state_show() state_show() reads kdamond->damon_ctx without holding damon_sysfs_lock. This allows a use-after-free race: CPU 0 CPU 1 ----- ----- state_show() damon_sysfs_turn_damon_on() ctx = kdamond->damon_ctx; mutex_lock(&damon_sysfs_lock); damon_destroy_ctx(kdamond->damon_ctx); kdamond->damon_ctx = NULL; mutex_unlock(&damon_sysfs_lock); damon_is_running(ctx); /* ctx is freed */ mutex_lock(&ctx->kdamond_lock); /* UAF */ (The race can also occur with damon_sysfs_kdamonds_rm_dirs() and damon_sysfs_kdamond_release(), which free or replace the context under damon_sysfs_lock.) Fix by taking damon_sysfs_lock before dereferencing the context, mirroring the locking used in pid_show(). The bug has existed since state...

CVSS3: 7.8
0%
Низкий
около 1 года назад
fstec логотип
BDU:2025-13886

Уязвимость функции state_show() модуля mm/damon/sysfs.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код

CVSS3: 7
0%
Низкий
около 1 года назад
redos логотип
ROS-20260806-80-0020

Уязвимость kernel-lt

CVSS3: 7
0%
Низкий
3 месяца назад
redos логотип
ROS-20260806-73-0020

Уязвимость kernel-lt

CVSS3: 7
0%
Низкий
3 месяца назад
altlinux логотип
ALT-PU-2025-16601

ALT-PU-2025-16601: package `kernel-image-un-def` update to version 6.1.153-alt1

CVSS3: 7.8
около 1 года назад
oracle-oval логотип
ELSA-2025-25754

ELSA-2025-25754: Unbreakable Enterprise kernel security update (IMPORTANT)

12 месяцев назад
altlinux логотип
ALT-PU-2025-12715

ALT-PU-2025-12715: package `kernel-image-rt` update to version 6.12.51-alt1

CVSS3: 8
около 1 года назад
altlinux логотип
ALT-PU-2025-12713

ALT-PU-2025-12713: package `kernel-image-6.12` update to version 6.12.51-alt1

CVSS3: 8
около 1 года назад
suse-cvrf логотип
openSUSE-SU-2025:20081-1

Security update for the Linux Kernel

12 месяцев назад
suse-cvrf логотип
openSUSE-SU-2025-20011-1

Security update for the Linux Kernel

около 1 года назад
altlinux логотип
ALT-PU-2026-1529

ALT-PU-2026-1529: package `kernel-image-pine` update to version 6.12.66-alt1

CVSS3: 9.8
10 месяцев назад
altlinux логотип
ALT-PU-2025-12647

ALT-PU-2025-12647: package `kernel-image-rpi-un` update to version 6.12.49-alt1

CVSS3: 9.8
около 1 года назад
altlinux логотип
ALT-PU-2026-9924

ALT-PU-2026-9924: package `kernel-image-rpi-un` update to version 6.12.94-alt1

CVSS3: 10
5 месяцев назад

Уязвимостей на страницу