5284 matches found
CVE-2026-25828
grub-btrfs through 2026-01-31 on Arch Linux and derivative distributions allows initramfs OS command injection because it does not sanitize the $root parameter to resolvedevice. NOTE: a third party reports "exploitation may not be feasible under normal conditions and may depend on specific...
PT-2026-7909
grub-btrfs through 2026-01-31 on Arch Linux and derivative distributions allows initramfs OS command injection because it does not sanitize the $root parameter to resolve device...
CVE-2026-25828
CVE-2026-25828 affects grub-btrfs up to 2026-01-31 on Arch Linux and derivatives. The initramfs hook grub-btrfs-overlayfs passes the kernel parameter $root to resolve_device() without sanitization, enabling potential initramfs command execution as root during boot. The issue is rooted in not sani...
CVE-2026-25828
grub-btrfs through 2026-01-31 on Arch Linux and derivative distributions allows initramfs OS command injection because it does not sanitize the $root parameter to resolvedevice. NOTE: a third party reports "exploitation may not be feasible under normal conditions and may depend on specific...
[SECURITY] Fedora 42 Update: rust-btrd-0.5.3-12.fc42
The btrfs debugger...
[SECURITY] Fedora 43 Update: rust-btrd-0.5.3-12.fc43
The btrfs debugger...
The vulnerability in the `btrfs_finish_extent_commit()` function of the `fs/btrfs/extent-tree.c` file in the Linux kernel’s file system allows a attacker to trigger a service failure.
The vulnerability of the btrfsfinishextentcommit function in the fs/btrfs/extent-tree.c file of the btrfs file system in the Linux operating system is related to synchronization errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
Exploit for CVE-2026-25828
CVE-2026-25828 - Command Injection in grub-btrfs initramfs hoo...
The vulnerability of the btrfs_quota_enable() function in the fs/btrfs/qgroup.c module of the file system Btrfs in the Linux kernel allows a malicious actor to trigger a service failure.
The vulnerability of the btrfsquotaenable function in the fs/btrfs/qgroup.c module of the btrfs file system in Linux kernels is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
SUSE CVE-2025-71194
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock in waitcurrenttrans due to ignored transaction type When waitcurrenttrans is called during starttransaction, it currently waits for a blocked transaction without considering whether the given transaction type...
SUSE CVE-2026-23043
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix NULL pointer dereference in doabortlogreplay Coverity reported a NULL pointer dereference issue CID 1666756 in doabortlogreplay. When btrfsallocpath fails in replayonebuffer, wc-subvolpath is NULL, but...
The vulnerability of the btrfs_delete_free_space_tree() function in the fs/btrfs/free-space-tree.c module of the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the btrfsdeletefreespacetree function in the fs/btrfs/free-space-tree.c file of the Linux kernel operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...
CVE-2025-71194
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock in waitcurrenttrans due to ignored transaction type When waitcurrenttrans is called during starttransaction, it currently waits for a blocked transaction without considering whether the given transaction type...
CVE-2025-71194
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock in waitcurrenttrans due to ignored transaction type When waitcurrenttrans is called during starttransaction, it currently waits for a blocked transaction without considering whether the given transaction type...
UBUNTU-CVE-2025-71194
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock in waitcurrenttrans due to ignored transaction type When waitcurrenttrans is called during starttransaction, it currently waits for a blocked transaction without considering whether the given transaction type...
CVE-2026-23043
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix NULL pointer dereference in doabortlogreplay Coverity reported a NULL pointer dereference issue CID 1666756 in doabortlogreplay. When btrfsallocpath fails in replayonebuffer, wc-subvolpath is NULL, but...
CVE-2026-23043
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix NULL pointer dereference in doabortlogreplay Coverity reported a NULL pointer dereference issue CID 1666756 in doabortlogreplay. When btrfsallocpath fails in replayonebuffer, wc-subvolpath is NULL, but...
UBUNTU-CVE-2026-23043
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix NULL pointer dereference in doabortlogreplay Coverity reported a NULL pointer dereference issue CID 1666756 in doabortlogreplay. When btrfsallocpath fails in replayonebuffer, wc-subvolpath is NULL, but...
CVE-2025-71194
Summary: CVE-2025-71194 concerns the Linux kernel, specifically a btrfs deadlock involving wait_current_trans() during start_transaction(). The issue stems from a missing check that should consider the transaction type against btrfs_blocked_trans_types[] for the current state, causing a transacti...
CVE-2025-71194 btrfs: fix deadlock in wait_current_trans() due to ignored transaction type
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock in waitcurrenttrans due to ignored transaction type When waitcurrenttrans is called during starttransaction, it currently waits for a blocked transaction without considering whether the given transaction type...