Long Li

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to the fixed version **Description** A race condition exists in the Linux kernel's f2fs file system, specifically in the `f2fs stop gc thread()` function. This issue arises when concurrent calls are made to shut down the f2fs file system, leading to a general protection fault. The root cause is a race condition between different shutdown paths, resulting in a use-after-free error. The commit `c7f114d864ac` attempted to fix this issue but failed to prevent all race conditions. The fix involves converting to a write lock of `s umount` in `f2fs do shutdown()`. **Recommendations** To resolve this issue, update the Linux kernel to a version that includes the fix for the race condition in `f2fs stop gc thread()`. As a temporary workaround, consider disabling the `f2fs stop gc thread()` function until a patch is available. Restrict access to the `f2fs do shutdown()` function to minimize the risk of exploitation. Avoid using the `gc th` variable in the affected shutdown paths until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** The issue is related to an information disclosure problem when the Windows kernel improperly handles objects in memory. This can allow an attacker to obtain sensitive information. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers **Description** An information disclosure issue exists due to the win32k component improperly providing kernel information. This could allow an attacker to disclose protected information using a specially crafted application. **Recommendations** For Windows 7, apply the necessary patch to fix the win32k component issue. For Windows Server 2012 R2, update the win32k component to prevent information disclosure. For Windows RT 8.1, install the latest security update to address the win32k vulnerability. For Windows Server 2008, apply the recommended fix to the win32k component. For Windows Server 2012, update the system to prevent exploitation of the win32k issue. For Windows 8.1, install the necessary patch to secure the win32k component. For Windows Server 2016, apply the latest security update to fix the win32k vulnerability. For Windows Server 2008 R2, update the win32k component to prevent information disclosure. For Windows 10, install the latest security patch to address the win32k issue. For Windows 10 Servers, apply the necessary update to secure the win32k component.