EUVD-2025-205093

In the Linux kernel, the following vulnerability has been resolved: erofs: limit the level of fs stacking for file-backed mounts Otherwise, it could cause potential kernel stack overflow e.g., EROFS mounting itself...

CVE-2025-68361

In the Linux kernel, the following vulnerability has been resolved: erofs: limit the level of fs stacking for file-backed mounts Otherwise, it could cause potential kernel stack overflow e.g., EROFS mounting itself...

CVE-2025-68361

CVE-2025-68361 relates to the Linux kernel's EROFS file system. The issue is addressed by a patch that limits the level of file-backed filesystem stacking, mitigating a potential kernel stack overflow (for example, when EROFS mounts itself). The connected documents consistently describe the fix i...

PT-2025-53109

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the erofs filesystem related to pcluster objects. Specifically, the issue occurs when a pcluster is registered with a zero block address, which...

UBUNTU-CVE-2025-68251

In the Linux kernel, the following vulnerability has been resolved: erofs: avoid infinite loops due to corrupted subpage compact indexes Robert reported an infinite loop observed by two crafted images. The root cause is that clusterofs can be larger than lclustersize for !NONHEAD lclusters in...

CVE-2025-68210

In the Linux kernel, the following vulnerability has been resolved: erofs: avoid infinite loop due to incomplete zstd-compressed data Currently, the decompression logic incorrectly spins if compressed data is truncated in crafted deliberately corrupted images...

PT-2025-51664

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue in the erofs component can lead to infinite loops when processing corrupted subpage compact indexes. This occurs because the clusterofs variable can exceed the lclustersize for...

PT-2025-52897

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the erofs filesystem. Specifically, the issue involves insufficient limitations on filesystem stacking for file-backed mounts, potentially...

The vulnerability of the erofs_show_options() function in the fs/erofs/super.c module of the Linux operating system allows for a denial-of-service attack to be executed.

The vulnerability of the erofsshowoptions function in the fs/erofs/super.c module of the Linux kernel is related to improper locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2025-51623

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the erofs decompression logic. The decompression process can enter an infinite loop when processing deliberately corrupted or truncated zstd-compresse...

EUVD-2022-55542

Malicious code in bioql PyPI...

EUVD-2024-51907

Malicious code in bioql PyPI...

EUVD-2022-55457

Malicious code in bioql PyPI...

EUVD-2023-37709

Malicious code in bioql PyPI...

CVE-2025-39924

The CVE-2025-39924 entry relates to the Linux kernel EROFS code. A bug was fixed where the algorithm used to validate encoded extents was incorrect; the check is now unified with Z_EROFS_COMPRESSION(_RUNTIME)_MAX and aligned with sbi->available_compr_algs. The impact described in sources is li...

CVE-2025-39868 erofs: fix runtime warning on truncate_folio_batch_exceptionals()

In the Linux kernel, the following vulnerability has been resolved: erofs: fix runtime warning on truncatefoliobatchexceptionals Commit 0e2f80afcfa6"fs/dax: ensure all pages are idle prior to filesystem unmount" introduced the WARNONONCE to capture whether the filesystem has removed all DAX entri...

CVE-2025-39868

In the Linux kernel, the following vulnerability has been resolved: erofs: fix runtime warning on truncatefoliobatchexceptionals Commit 0e2f80afcfa6"fs/dax: ensure all pages are idle prior to filesystem unmount" introduced the WARNONONCE to capture whether the filesystem has removed all DAX entri...

DEBIAN-CVE-2022-50313

In the Linux kernel, the following vulnerability has been resolved: erofs: fix order = MAXORDER warning due to crafted negative isize As syzbot reported 1, the root cause is that isize field is a signed type, and negative isize is also less than EROFSBLKSIZ. As a consequence, it's handled as fast...

UBUNTU-CVE-2022-50313

In the Linux kernel, the following vulnerability has been resolved: erofs: fix order = MAXORDER warning due to crafted negative isize As syzbot reported 1, the root cause is that isize field is a signed type, and negative isize is also less than EROFSBLKSIZ. As a consequence, it's handled as fast...

CVE-2023-53231 erofs: Fix detection of atomic context

In the Linux kernel, the following vulnerability has been resolved: erofs: Fix detection of atomic context Current check for atomic context is not sufficient as zerofsdecompressqueueendio can be called under rcu lock from blkmqflushpluglist. See the stacktrace 1 In such case we should hand off th...