SUSE CVE-2020-10761

An assertion failure issue was found in the Network Block DeviceNBD Server in all QEMU versions before QEMU 5.0.1. This flaw occurs when an nbd-client sends a spec-compliant request that is near the boundary of maximum permitted request length. A remote nbd-client could use this flaw to crash the...

SUSE CVE-2020-15436

Use-after-free vulnerability in fs/blockdev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field...

SUSE CVE-2021-20196

A NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs while processing read/write ioport commands if the selected floppy drive is not initialized with a block device. This flaw allows a privileged guest user to crash the QEMU process on the host, resulti...

SUSE CVE-2022-26496

In nbd-server in nbd before 3.24, there is a stack-based buffer overflow. An attacker can cause a buffer overflow in the parsing of the name field by sending a crafted NBDOPTINFO or NBDOPTGO message with an large value as the length of the name...

SUSE CVE-2022-26495

In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of 0xffffffff in the name length field will cause a zero-sized buffer to be allocated for the name, resulting in a write to a dangling pointer. This issue exists for the NBDOPTINFO,...

PT-2025-40220

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the network block device nbd module related to incomplete validation of arguments passed through ioctl calls. Specifically, the issue arises from...

PT-2025-54163

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel where the zero page can be corrupted when using dm-flakey with corrupt bio writes enabled. This corruption occurs because the blkdev issue zero pages...

SUSE: Security Advisory (SUSE-SU-2022:4630-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-36400 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: drbd versions prior to v5.4.225 Description: The issue is related to a use after free in the drbd create device function. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions prior to v5.4.225,...

kernel: drbd: only clone bio if we have a backing device

A NULL pointer dereference was found in the Linux kernel Distributed Replicated Block Device driver's I/O request handling. A local user with privileges to perform I/O operations on a DRBD block device can trigger I/O requests when the DRBD device is configured in diskless mode no local backing...

kernel: nbd: fix io hung while disconnecting device

In the Linux kernel, the following vulnerability has been resolved: nbd: fix io hung while disconnecting device In our tests, "qemu-nbd" triggers a io hung: INFO: task qemu-nbd:11445 blocked for more than 368 seconds. Not tainted 5.18.0-rc3-next-20220422-00003-g2176915513ca 884 "echo 0...

PT-2025-40740

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to DRBD Distributed Replicated Block Device. A null pointer dereference can occur when a DRBD device is diskless, specifically during the...

PT-2022-35141 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: A potential use-after-free issue was identified in jbd2 fc wait bufs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-34983 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to a hung condition when a signal interrupts the nbd start device ioctl function. The actual impact and potential for attack have not been fully determined...

PT-2022-35381 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: A potential buffer head reference count leak was identified in jbd2. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-35144 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: A potential issue exists in the jbd2 component of the Linux Kernel, related to the fc do one pass function. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2022-35744 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.262 Description: The issue is related to a hung condition when a signal interrupts the nbd start device ioctl function. The actual impact and potential for attack have not been fully determined...

PT-2025-49454

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s md/raid0 and raid10 subsystems related to discard sector handling. The issue arises because the code incorrectly sets the maximum discard sectors,...

PT-2025-37606

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the init mtd function within the MTD core subsystem. A resource leak can occur during initialization, potentially leading to errors when registering t...

GSD-2022-1006542 block: stop setting the nomerges flags in blk_cleanup_queue

block: stop setting the nomerges flags in blkcleanupqueue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.12 by commit...