Linux Distros Unpatched Vulnerability : CVE-2026-71219

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca with an exponentially-derived size from the...

Linux Distros Unpatched Vulnerability : CVE-2026-71224

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack overflow vulnerability was found in gfs2-utils. The metadata walk code in metawalk.c uses alloca with an untrusted inode height value from on-disk...

PT-2026-90905

A heap out-of-bounds read vulnerability was found in gfs2-utils. The ea num ptrs field from on-disk extended attribute metadata is consumed without bounds validation, causing a heap buffer over-read that may disclose sensitive memory contents or cause a crash when processing crafted GFS2 filesyst...

PT-2026-90906

A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca with an exponentially-derived size from the untrusted on-disk di depth field without bounds validation. A crafted GFS2 filesystem image with a large di depth value causes stack exhausti...

PT-2026-90903

A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2 edit, the di height field from on-disk inode metadata is used as an array index without bounds checking, causing a stack buffer overflow that may lead to arbitrary code execution when processing crafted GFS2 filesystem...

PT-2026-90907

A stack overflow vulnerability was found in gfs2-utils. The metadata walk code in metawalk.c uses alloca with an untrusted inode height value from on-disk metadata without bounds validation, causing stack exhaustion and a denial of service when processing crafted GFS2 filesystem images...

PT-2026-90904

A stack out-of-bounds write vulnerability was found in gfs2-utils. In savemeta, the height value from on-disk inode metadata is used as a loop bound without bounds checking, causing a stack buffer overflow that may lead to arbitrary code execution when processing crafted GFS2 filesystem images...

CVE-2026-71224: Allocation of Resources Without Limits or Throttling

A stack overflow vulnerability was found in gfs2-utils. The metadata walk code in metawalk.c uses alloca with an untrusted inode height value from on-disk metadata without bounds validation, causing stack exhaustion and a denial of service when processing crafted GFS2 filesystem images...

CVE-2026-71222: Out-of-bounds Read

A heap out-of-bounds read vulnerability was found in gfs2-utils. The eanumptrs field from on-disk extended attribute metadata is consumed without bounds validation, causing a heap buffer over-read that may disclose sensitive memory contents or cause a crash when processing crafted GFS2 filesystem...

CVE-2026-71221: Out-of-bounds Write

A stack out-of-bounds write vulnerability was found in gfs2-utils. In savemeta, the height value from on-disk inode metadata is used as a loop bound without bounds checking, causing a stack buffer overflow that may lead to arbitrary code execution when processing crafted GFS2 filesystem images...

CVE-2026-71219: Allocation of Resources Without Limits or Throttling

A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca with an exponentially-derived size from the untrusted on-disk didepth field without bounds validation. A crafted GFS2 filesystem image with a large didepth value causes stack exhaustion...

CVE-2026-71220: Out-of-bounds Write

A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2edit, the diheight field from on-disk inode metadata is used as an array index without bounds checking, causing a stack buffer overflow that may lead to arbitrary code execution when processing crafted GFS2 filesystem image...

Linux Distros Unpatched Vulnerability : CVE-2026-71220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2edit, the diheight field from on-disk inode metadata is used as an array index without...

Linux Distros Unpatched Vulnerability : CVE-2026-71221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack out-of-bounds write vulnerability was found in gfs2-utils. In savemeta, the height value from on- disk inode metadata is used as a loop bound without...

Malicious code in real-router-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f91fd520ae94997277ef7d591d30dc728b895611fd45b890e2ec1a68233e29a8 package.json declares a preinstall script that runs an inline node command reading the installer's OS hostname, username, and current working directo...

MAL-2026-15825 Malicious code in real-router-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f91fd520ae94997277ef7d591d30dc728b895611fd45b890e2ec1a68233e29a8 package.json declares a preinstall script that runs an inline node command reading the installer's OS hostname, username, and current working directo...

ROOT-APP-NPM-CVE-2022-37601 CVE-2022-37601 in loader-utils - Patched by Root

Root has patched CVE-2022-37601 in the loader-utils package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2022-37603 CVE-2022-37603 in loader-utils - Patched by Root

Root has patched CVE-2022-37603 in the loader-utils package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2022-37599 CVE-2022-37599 in loader-utils - Patched by Root

Root has patched CVE-2022-37599 in the loader-utils package for Root:npm. Multiple fixed versions available...

Malicious Package

Overview google-cloud-internal-core-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...