3403 matches found
The vulnerability of the `ceph_writepages_start()` function in the `fs/ceph/addr.c` module of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the cephwritepagesstart function in the fs/ceph/addr.c module of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988877)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988877 advisory. In the Linux kernel, the following vulnerability has been resolved: ceph: properly put cephstring reference after async create attempt The reference acquired by...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990328)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990328 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix race between delayedwork and cephmoncstop The way the delayed work is handled in...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989588)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989588 advisory. In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leak in cephreaddir when notelastdentry returns error Reset the lastreaddir at t...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: ceph: avoid kernel BUG for encrypted inode with unaligned file size The generic/397 test hits a BUGON for the case of encrypted inode with unaligned file size for example, 33K or 1K: 877.737811 run fstests generic/397 at 2025-01-...
The vulnerability of the __fh_to_dentry() function in the fs/ceph/export.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the fhtodentry function in the fs/ceph/export.c module of the Linux operating system is related to security configuration errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
NewStart CGSL MAIN 7.02 : ceph Vulnerability (NS-SA-2025-0247)
The remote NewStart CGSL host, running version MAIN 7.02, has ceph packages installed that are affected by a vulnerability: - A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump, and dump privileged...
PT-2025-46556
Name of the Vulnerable Software and Affected Versions Ceph affected versions not specified Description A denial-of-service issue exists in Ceph’s RGW component due to improper input validation. Specifically, providing an empty string as the content for the x-amz-copy-source argument when putting ...
CVE-2025-9648 affecting package ceph for versions less than 16.2.10-10
CVE-2025-9648 affecting package ceph for versions less than 16.2.10-10. A patched version of the package is available...
CVE-2025-40007 netfs: fix reference leak
In the Linux kernel, the following vulnerability has been resolved: netfs: fix reference leak Commit 20d72b00ca81 "netfs: Fix the request's work item to not require a ref" modified netfsallocrequest to initialize the reference counter to 2 instead of 1. The rationale was that the requet's "work"...
GHSA-W8GX-HHCX-PX6W vulnerabilities
Vulnerabilities for packages: ceph...
CVE-2017-12155 vulnerabilities
Vulnerabilities for packages: ceph...
Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2025-1223)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1223 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix use-after-free in stateshow CVE-2025-39877 In the Linux kernel, the following vulnerability has been...
CVE-2025-9648 affecting package ceph for versions less than 18.2.2-11
CVE-2025-9648 affecting package ceph for versions less than 18.2.2-11. A patched version of the package is available...
ROS-20251013-01
A vulnerability in the LoongArch component of the Linux operating system kernel is related to the inability to process a kernel swap request. kernel swap requests. Exploitation of the vulnerability could allow an attacker to cause a denial of service Vulnerability in the sii902xinit function in t...
The vulnerabilities of the functions con_fault_finish() and clear_standby() in the kernel module net/ceph/messenger.c of the Linux operating system allow a attacker to execute arbitrary code.
The vulnerabilities of the confaultfinish and clearstandby functions in the net/ceph/messenger.c module of the Linux kernel are related to deficiencies in the authentication process. Exploiting these vulnerabilities could allow an attacker to execute arbitrary code...
Security Bulletin: IBM Storage Ceph is vulnerable to Allocation of Resources Without Limits or Throttling in Grafana (CVE-2023-45290)
Summary Grafana is used by IBM Storage Ceph as a metrics dashboard. CVE-2023-45290 This bulletin identifies the steps to take to address the vulnerability in Grafana. Vulnerability Details CVEID:CVE-2023-45290 DESCRIPTION: When parsing a multipart form either explicitly with...
Security Bulletin: IBM Storage Ceph is vulnerable to an Infinite Loop in Grafana (CVE-2024-24786)
Summary Grafana is used by IBM Storage Ceph as a metrics dashboard. CVE-2024-24786 This bulletin identifies the steps to take to address the vulnerability in Grafana. Vulnerability Details CVEID:CVE-2024-24786 DESCRIPTION: The protojson.Unmarshal function can enter an infinite loop when...
EUVD-2025-31824
A security vulnerability has been detected in SourceCodester Hotel and Lodge Management System up to 1.0. The impacted element is an unknown function of the file /managewebsite.php. The manipulation of the argument websiteimage/backloginimage leads to unrestricted upload. The attack is possible t...