CVE-2025-36010

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 could allow an unauthenticated user to cause a denial of service due to executable segments that are waiting for each other to release a necessary lock.

Scoring

Severity

MEDIUM

CVSS base score

6.5

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS probability

0.24%

CWE

CWE-833

Published

2025-07-29

Last modified

2026-03-13

Affected products

• IBM Db2
• IBM Db2
• IBM Db2

Weakness type

• CWE-833

Related vulnerabilities

• CVE-2026-70616 — boringproxy 0.10.0 Resource Exhaustion DoS via GET /loading endpoint
• CVE-2026-10647 — Deadlock denial of service in USB CDC-NCM device class on TX enqueue failure
• CVE-2026-47334 — Deadlock or kernel panic in Ubuntu Linux AppArmor notification handling
• CVE-2026-33904 — Ella Core has a Denial of Service via SCTP connection cleanup deadlock
• CVE-2025-10150 — Webserver crash caused by scanning on TCP port 80
• CVE-2025-59463 — Denial-of-service (DoS) via chunk size mismatch
• CVE-2025-54796 — Copyparty is vulnerable to Regex Denial of Service (ReDoS) attacks through "Recent Uploads" page
• CVE-2025-8312 — Deadlock in PAM automatic check-in feature in Devolutions Server allows a password to remain valid...

Markdown version · Browse all CVEs