[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-71274":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-30T21:17:53.703Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":28,"aliases":29,"duplicate_of":9,"upstream":30,"downstream":31,"duplicates":46,"related":47,"reserved_at":9,"published_at":49,"modified_at":50,"state":51,"summary":52,"references_raw":61,"kevs":96,"epss":97,"epss_history":100,"metrics":269,"affected":275},"CVE-2025-71274","In the Linux kernel, the following vulnerability has been resolved:\n\nrpmsg: core: fix race in driver_override_show() and use core helper\n\nThe driver_override_show function reads the driver_override string\nwithout holding the device_lock. However, the store function modifies\nand frees the string while holding the device_lock. This creates a race\ncondition where the string can be freed by the store function while\nbeing read by the show function, leading to a use-after-free.\n\nTo fix this, replace the rpmsg_string_attr macro with explicit show and\nstore functions. The new driver_override_store uses the standard\ndriver_set_override helper. Since the introduction of\ndriver_set_override, the comments in include/linux/rpmsg.h have stated\nthat this helper must be used to set or clear driver_override, but the\nimplementation was not updated until now.\n\nBecause driver_set_override modifies and frees the string while holding\nthe device_lock, the new driver_override_show now correctly holds the\ndevice_lock during the read operation to prevent the race.\n\nAdditionally, since rpmsg_string_attr has only ever been used for\ndriver_override, removing the macro simplifies the code.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-362","Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')","The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.","weakness","Draft","Class","Medium",[20,24],{"id":21,"name":22,"techniques":23},"CAPEC-26","Leveraging Race Conditions",[],{"id":25,"name":26,"techniques":27},"CAPEC-29","Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions",[],[],[],[],[32,34,36,38,40,42,44],{"_key":33},"DEBIAN-CVE-2025-71274",{"_key":35},"USN-8492-4",{"_key":37},"SUSE-SU-2026:3130-1",{"_key":39},"UBUNTU-CVE-2025-71274",{"_key":41},"USN-8492-5",{"_key":43},"USN-8575-1",{"_key":45},"USN-8576-1",[],[48],{"_key":37},"2026-05-06T11:27:07.525Z","2026-05-11T21:57:13.516Z","Analyzed",{"cisa_kev":53,"cisa_ransomware":53,"cisa_vendor":9,"epss_severity":54,"epss_score":55,"severity":56,"severity_score":57,"severity_version":58,"severity_source":59,"severity_vector":60,"severity_status":51},false,"low",0.00091,"medium",4.7,"v3.1","nvd","CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",[62,68,72,76,80,84,88,92],{"url":63,"sources":64,"tags":66},"https://git.kernel.org/stable/c/2e4a70f3c30910427e5ea848b799066d67b963d5",[59,65],"cve.org",[67],"Patch",{"url":69,"sources":70,"tags":71},"https://git.kernel.org/stable/c/392c6b68334aa0e0ae9aba95c0a366bcb0d92f5d",[59,65],[67],{"url":73,"sources":74,"tags":75},"https://git.kernel.org/stable/c/42023d4b6d2661a40ee2dcf7e1a3528a35c638ca",[59,65],[67],{"url":77,"sources":78,"tags":79},"https://git.kernel.org/stable/c/47615557447185917afa432b7958f87583c417cb",[59,65],[67],{"url":81,"sources":82,"tags":83},"https://git.kernel.org/stable/c/7654e6e3cd6bdee9602f6063b3c670bd556d7e61",[59,65],[67],{"url":85,"sources":86,"tags":87},"https://git.kernel.org/stable/c/90c8353f471821d7ccd4fe573a2402e056192494",[59,65],[67],{"url":89,"sources":90,"tags":91},"https://git.kernel.org/stable/c/954557957177c3c13d7c655976665b1170da5e50",[59,65],[67],{"url":93,"sources":94,"tags":95},"https://git.kernel.org/stable/c/d66b8074c555e8abb0ae19eea1c9f3635498bdde",[59,65],[67],[],{"date":98,"score":55,"percentile":99},"2026-07-05",0.00611,[101,105,108,111,114,117,121,125,128,130,133,136,139,142,145,148,151,154,157,160,163,166,169,172,175,178,180,183,186,189,191,194,198,201,204,207,210,213,216,218,221,224,227,230,232,235,237,239,241,243,246,248,250,253,256,258,261,263,265,268],{"date":102,"score":103,"percentile":104},"2026-05-07",0.00024,0.06957,{"date":106,"score":103,"percentile":107},"2026-05-08",0.06984,{"date":109,"score":103,"percentile":110},"2026-05-09",0.07036,{"date":112,"score":103,"percentile":113},"2026-05-10",0.0704,{"date":115,"score":103,"percentile":116},"2026-05-11",0.07021,{"date":118,"score":119,"percentile":120},"2026-05-12",0.00032,0.09349,{"date":122,"score":123,"percentile":124},"2026-05-13",0.00012,0.01724,{"date":126,"score":123,"percentile":127},"2026-05-14",0.01726,{"date":129,"score":123,"percentile":124},"2026-05-15",{"date":131,"score":123,"percentile":132},"2026-05-16",0.01722,{"date":134,"score":123,"percentile":135},"2026-05-17",0.01718,{"date":137,"score":123,"percentile":138},"2026-05-18",0.01704,{"date":140,"score":123,"percentile":141},"2026-05-19",0.01701,{"date":143,"score":123,"percentile":144},"2026-05-20",0.01698,{"date":146,"score":123,"percentile":147},"2026-05-21",0.01686,{"date":149,"score":123,"percentile":150},"2026-05-22",0.01807,{"date":152,"score":123,"percentile":153},"2026-05-23",0.01804,{"date":155,"score":123,"percentile":156},"2026-05-24",0.01802,{"date":158,"score":123,"percentile":159},"2026-05-25",0.01792,{"date":161,"score":123,"percentile":162},"2026-05-26",0.01784,{"date":164,"score":123,"percentile":165},"2026-05-27",0.018,{"date":167,"score":123,"percentile":168},"2026-05-28",0.01795,{"date":170,"score":123,"percentile":171},"2026-05-29",0.01805,{"date":173,"score":123,"percentile":174},"2026-05-30",0.01813,{"date":176,"score":123,"percentile":177},"2026-05-31",0.01806,{"date":179,"score":123,"percentile":159},"2026-06-01",{"date":181,"score":123,"percentile":182},"2026-06-02",0.01783,{"date":184,"score":123,"percentile":185},"2026-06-03",0.01775,{"date":187,"score":123,"percentile":188},"2026-06-04",0.01772,{"date":190,"score":123,"percentile":182},"2026-06-05",{"date":192,"score":123,"percentile":193},"2026-06-06",0.01789,{"date":195,"score":196,"percentile":197},"2026-06-07",0.00014,0.02585,{"date":199,"score":196,"percentile":200},"2026-06-08",0.0257,{"date":202,"score":196,"percentile":203},"2026-06-09",0.02535,{"date":205,"score":196,"percentile":206},"2026-06-10",0.02544,{"date":208,"score":196,"percentile":209},"2026-06-11",0.0256,{"date":211,"score":196,"percentile":212},"2026-06-12",0.02564,{"date":214,"score":196,"percentile":215},"2026-06-13",0.02554,{"date":217,"score":196,"percentile":212},"2026-06-14",{"date":219,"score":55,"percentile":220},"2026-06-15",0.00622,{"date":222,"score":55,"percentile":223},"2026-06-16",0.0062,{"date":225,"score":55,"percentile":226},"2026-06-17",0.00623,{"date":228,"score":55,"percentile":229},"2026-06-18",0.00625,{"date":231,"score":55,"percentile":229},"2026-06-19",{"date":233,"score":55,"percentile":234},"2026-06-20",0.00624,{"date":236,"score":55,"percentile":234},"2026-06-21",{"date":238,"score":55,"percentile":234},"2026-06-22",{"date":240,"score":55,"percentile":226},"2026-06-23",{"date":242,"score":55,"percentile":223},"2026-06-24",{"date":244,"score":55,"percentile":245},"2026-06-25",0.00619,{"date":247,"score":55,"percentile":223},"2026-06-26",{"date":249,"score":55,"percentile":245},"2026-06-27",{"date":251,"score":55,"percentile":252},"2026-06-28",0.00614,{"date":254,"score":55,"percentile":255},"2026-06-29",0.00615,{"date":257,"score":55,"percentile":252},"2026-06-30",{"date":259,"score":55,"percentile":260},"2026-07-01",0.00613,{"date":262,"score":55,"percentile":260},"2026-07-02",{"date":264,"score":55,"percentile":260},"2026-07-03",{"date":266,"score":55,"percentile":267},"2026-07-04",0.00612,{"date":98,"score":55,"percentile":99},[270],{"source":59,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":271,"cvss_v4_0":9},{"baseScore":57,"baseSeverity":272,"vectorString":60,"impactScore":273,"exploitabilityScore":274},"MEDIUM",6,2.6,[276,311],{"ecosystem":9,"name":277,"vendor":278,"product":278,"cpe_part":279,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":280},"Linux","linux","a",[281,288,291,294,297,300,303,306,309],{"version":282,"is_range":283,"range_type":65,"version_start":284,"version_start_type":285,"version_end":286,"version_end_type":287,"fixed_in":9},">= 39e47767ec9b22f844c2a07c9d329256960d4021, \u003C 392c6b68334aa0e0ae9aba95c0a366bcb0d92f5d",true,"39e47767ec9b22f844c2a07c9d329256960d4021","including","392c6b68334aa0e0ae9aba95c0a366bcb0d92f5d","excluding",{"version":289,"is_range":283,"range_type":65,"version_start":284,"version_start_type":285,"version_end":290,"version_end_type":287,"fixed_in":9},">= 39e47767ec9b22f844c2a07c9d329256960d4021, \u003C d66b8074c555e8abb0ae19eea1c9f3635498bdde","d66b8074c555e8abb0ae19eea1c9f3635498bdde",{"version":292,"is_range":283,"range_type":65,"version_start":284,"version_start_type":285,"version_end":293,"version_end_type":287,"fixed_in":9},">= 39e47767ec9b22f844c2a07c9d329256960d4021, \u003C 47615557447185917afa432b7958f87583c417cb","47615557447185917afa432b7958f87583c417cb",{"version":295,"is_range":283,"range_type":65,"version_start":284,"version_start_type":285,"version_end":296,"version_end_type":287,"fixed_in":9},">= 39e47767ec9b22f844c2a07c9d329256960d4021, \u003C 90c8353f471821d7ccd4fe573a2402e056192494","90c8353f471821d7ccd4fe573a2402e056192494",{"version":298,"is_range":283,"range_type":65,"version_start":284,"version_start_type":285,"version_end":299,"version_end_type":287,"fixed_in":9},">= 39e47767ec9b22f844c2a07c9d329256960d4021, \u003C 7654e6e3cd6bdee9602f6063b3c670bd556d7e61","7654e6e3cd6bdee9602f6063b3c670bd556d7e61",{"version":301,"is_range":283,"range_type":65,"version_start":284,"version_start_type":285,"version_end":302,"version_end_type":287,"fixed_in":9},">= 39e47767ec9b22f844c2a07c9d329256960d4021, \u003C 2e4a70f3c30910427e5ea848b799066d67b963d5","2e4a70f3c30910427e5ea848b799066d67b963d5",{"version":304,"is_range":283,"range_type":65,"version_start":284,"version_start_type":285,"version_end":305,"version_end_type":287,"fixed_in":9},">= 39e47767ec9b22f844c2a07c9d329256960d4021, \u003C 954557957177c3c13d7c655976665b1170da5e50","954557957177c3c13d7c655976665b1170da5e50",{"version":307,"is_range":283,"range_type":65,"version_start":284,"version_start_type":285,"version_end":308,"version_end_type":287,"fixed_in":9},">= 39e47767ec9b22f844c2a07c9d329256960d4021, \u003C 42023d4b6d2661a40ee2dcf7e1a3528a35c638ca","42023d4b6d2661a40ee2dcf7e1a3528a35c638ca",{"version":310,"is_range":53,"range_type":65,"version_start":310,"version_start_type":285,"version_end":310,"version_end_type":285,"fixed_in":9},"4.18",{"ecosystem":9,"name":312,"vendor":278,"product":313,"cpe_part":279,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":314},"Linux Kernel","linux kernel",[315,319,323,327,331,335,339],{"version":316,"is_range":283,"range_type":317,"version_start":310,"version_start_type":285,"version_end":318,"version_end_type":287,"fixed_in":9},"gte4.18_lt5.10.252","cpe","5.10.252",{"version":320,"is_range":283,"range_type":317,"version_start":321,"version_start_type":285,"version_end":322,"version_end_type":287,"fixed_in":9},"gte5.11_lt5.15.202","5.11","5.15.202",{"version":324,"is_range":283,"range_type":317,"version_start":325,"version_start_type":285,"version_end":326,"version_end_type":287,"fixed_in":9},"gte5.16_lt6.1.165","5.16","6.1.165",{"version":328,"is_range":283,"range_type":317,"version_start":329,"version_start_type":285,"version_end":330,"version_end_type":287,"fixed_in":9},"gte6.2_lt6.6.128","6.2","6.6.128",{"version":332,"is_range":283,"range_type":317,"version_start":333,"version_start_type":285,"version_end":334,"version_end_type":287,"fixed_in":9},"gte6.7_lt6.12.75","6.7","6.12.75",{"version":336,"is_range":283,"range_type":317,"version_start":337,"version_start_type":285,"version_end":338,"version_end_type":287,"fixed_in":9},"gte6.13_lt6.18.16","6.13","6.18.16",{"version":340,"is_range":283,"range_type":317,"version_start":341,"version_start_type":285,"version_end":342,"version_end_type":287,"fixed_in":9},"gte6.19_lt6.19.6","6.19","6.19.6"]