PT-2023-33985 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue is related to the ext4 file system in the Linux Kernel. A warning is silenced when evicting an inode with dioread nolock. The actual impact and attack plausibility have not yet be...

PT-2023-33950

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description The issue is related to the ext4 file system, specifically in the ext4 rename function where the quota for 'old.inode' is initialized. The actual impact and attack plausibility have not yet...

PT-2023-34603

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description The issue is related to the ext4 file system, specifically in the ext4 rename function where the quota for 'old.inode' is initialized. The actual impact and attack plausibility have not yet...

PT-2023-34334

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to a deadlock caused by mbcache entry corruption in the ext4 filesystem. The actual impact and potential for attack have not been proven yet. Recommendations For Linux...

PT-2023-33973

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description The issue is related to a deadlock caused by mbcache entry corruption in the ext4 filesystem. The actual impact and potential for attack have not been proven yet. Recommendations For Linux...

PT-2023-33962

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description A use-after-free issue was discovered in the ext4 orphan cleanup function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2023-33979

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description The issue concerns leaking uninitialized memory in the fast-commit journal of the ext4 file system. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2023-34314

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A potential issue exists in the ext4 xattr inode create function, related to an inode leak on an error path. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2023-34325

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue concerns the ext4 file system. It involves checking and asserting if marking a no delete evicting inode dirty. The actual impact and attack plausibility have not yet been proven...

PT-2023-33474 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to the ext4 file system, specifically in the ext4 rename function where the quota for 'old.inode' is initialized. The actual impact and potential for attack have not bee...

PT-2023-33944

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description The issue is related to an inode leak in the ext4 xattr inode create function on an error path. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2023-34602

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description The issue is related to the ext4 file system, specifically in the ext4 get branch function. It involves an error code return to user-space. The actual impact and potential for attack have not...

PT-2023-33471 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue concerns an error code return to user-space in the ext4 get branch function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-34339

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue concerns the ext4 file system in the Linux Kernel, where an encryption key is set up during a jbd2 transaction. The actual impact and attack plausibility have not yet been proven...

PT-2023-34606

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description The issue concerns undefined behavior in bit shift for ext4 check flag values. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2023-34345

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to the ext4 file system in the Linux Kernel. A warning is silenced when evicting an inode with dioread nolock. The actual impact and attack plausibility have not yet bee...

PT-2023-33490 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: A use-after-free issue was discovered in the ext4 orphan cleanup function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

PT-2023-34321

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to the initialization of quotas for 'old.inode' in the 'ext4 rename' function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2023-33516 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: A potential security issue exists where the ext4 file system does not properly set up an encryption key during a jbd2 transaction. The actual impact and attack plausibility have not yet been...

PT-2023-33976 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15.61 through v5.15.86 Description: The issue concerns an uninitialized value in the 'ext4 evict inode' function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...