CVE-2025-40167

In the Linux kernel, the following vulnerability has been resolved: ext4: detect invalid INLINEDATA + EXTENTS flag combination syzbot reported a BUGON in ext4escacheextent when opening a verity file on a corrupted ext4 filesystem mounted without a journal. The issue is that the filesystem has an...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the detection of an invalid combination of INLINEDATA and EXTENTS flags, which could lead to file system...

Linux Distros Unpatched Vulnerability : CVE-2025-40167

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: detect invalid INLINEDATA + EXTENTS flag combination syzbot reported a BUGON in ext4escacheextent when opening a verity file on a corrupted ext4 filesyste...

CVE-2025-40167: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ext4: detect invalid INLINEDATA + EXTENTS flag combination syzbot reported a BUGON in ext4escacheextent when opening a verity file on a corrupted ext4 filesystem mounted without a journal. The issue is that the filesystem has an...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990873)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990873 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: avoid use-after-free in ext4extshowleaf In ext4findextent, path may be freed by error or be...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990487)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990487 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix data corruption after conversion from inline format Commit 6dbf7bb55598 fs: Don't...

The vulnerability of the ext4_split_extent_at() function in the fs/ext4/extents.c module of the Linux operating system’s Ext4 file system allows a attacker to cause a service failure.

The vulnerability of the ext4splitextentat function in the fs/ext4/extents.c module of the Linux operating system’s File System Support library is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989460)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989460 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix data corruption after conversion from inline format Commit 6dbf7bb55598 fs: Don't...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988764)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988764 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug in extents parsing when ehentries == 0 and ehdepth 0 When walking through an inode...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989248)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989248 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix abort logic in btrfsreplacefileextents Error injection testing uncovered a case where...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: hfsplus: removed the mutexlock check in hfsplusfreeextents Syzbot reported an issue with the hfsplus filesystem: ------------ cut here --- WARNING: CPU: 0 PID: 4400 at fs/hfsplus/extents.c:346 hfsplusfreeextents+0x700/0xad0 Ca...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: pNFS: Fixed an issue where uninitialized pointers were dereferenced. The error occurs during the third attempt to encode extents. When the function exttreepreparecommit reallocates a larger buffer to retry encoding extents, th...

AZL-68843 CVE-2025-40044 affecting package kernel for versions less than 6.6.112.1-2

In the Linux kernel, the following vulnerability has been resolved: fs: udf: fix OOB read in lengthAllocDescs handling When parsing Allocation Extent Descriptor, lengthAllocDescs comes from on-disk data and must be validated against the block size. Crafted or corrupted images may set...

DEBIAN-CVE-2023-53692

In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free read in ext4findextent for bigalloc + inline Syzbot found the following issue: loop0: detected capacity change from 0 to 2048 EXT4-fs loop0: mounted filesystem 00000000-0000-0000-0000-000000000000 without...

UBUNTU-CVE-2023-53692

In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free read in ext4findextent for bigalloc + inline Syzbot found the following issue: loop0: detected capacity change from 0 to 2048 EXT4-fs loop0: mounted filesystem 00000000-0000-0000-0000-000000000000 without...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987695)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987695 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix bugon in estreesearch Hulk Robot reported a BUGON:...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987647)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987647 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix abort logic in btrfsreplacefileextents Error injection testing uncovered a case where...

EUVD-2022-55136

In the Linux kernel, the following vulnerability has been resolved: btrfs: release correct delalloc amount in direct IO write path Running generic/406 causes the following WARNING in btrfsdestroyinode which tells there are outstanding extents left. In btrfsgetblocksdirectwrite, we reserve a...

The vulnerability of the udf_merge_extents() function in the fs/udf/inode.c file of the OSTA-UDF file system of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the udfmergeextents function in the fs/udf/inode.c file of the OSTA-UDF file system of the Linux operating system is related to memory allocation beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

PT-2025-46642

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the ext4 filesystem handling. Specifically, an invalid combination of the INLINE DATA and EXTENTS flags within an inode can lead to a BUG ON condition...