700 matches found
The vulnerability of the ext4_xattr inode_update_ref() function in the Linux operating system allows a hacker to execute arbitrary code.
The vulnerability of the ext4xattr inodeupdateref function in the Linux operating system is related to a countable loss of significance. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
ext4: guard against EA inode refcount underflow in xattr update
...
EUVD-2025-150384
In the Linux kernel, the following vulnerability has been resolved: ext4: guard against EA inode refcount underflow in xattr update syzkaller found a path where ext4xattrinodeupdateref reads an EA inode refcount that is already ref underflow: refcount=-1 refchange=-1 EXT4-fs warning: eainode dec...
PT-2025-51677
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to inline data handling within the ext4 filesystem. A stale cached value for i inline size can occur due to concurrent xattr operations, leading ...
CVE-2025-40190
CVE-2025-40190 affects the Linux kernel ext4: EA inode refcount underflow during xattr updates. The root cause is in ext4_xattr_inode_update_ref(), where a non-positive refcount could be decremented (ref_change -1), leading to underflow and errors. The fix enforces that if the current refcount is...
CLSA-2025-1762535960 tar: Fix of CVE-2023-39804
CVE-2023-39804: fix crash in GNU tar caused by incorrect handling of extended PAX xattr headers leading to memory corruption DoS...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990358)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990358 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: xattr: fix buffer overflow for invalid xattr When an xattr size is not what is expected, it ...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989319)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989319 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: fix slab-out-of-bounds read in eaget During the sizecheck label in eaget, the code checks i...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989831)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989831 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on ixattrnid in sanitycheckinode syzbot reports a kernel bug as belo...
Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990011)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990011 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: don't walk off the end of ealist Add a check before visiting the members of ea to make sure...
Samba Memory Disclosure Vulnerability (CVE-2025-9640)
Samba is prone to an uninitialized memory disclosure vulnerability via vfsstreamsxattr. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2025-9640
A flaw was found in Samba, in the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability...
CVE-2025-9640
A flaw was found in Samba, in the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability...
CVE-2025-9640 Samba: vfs_streams_xattr uninitialized memory write possible
A flaw was found in Samba, in the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability...
CVE-2025-9640
A flaw was found in Samba, in the vfsstreamsxattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability. Mitigati...
EUVD-2005-0758
Malware in sbrugna...
EUVD-2018-2960
Malware in sbrugna...
EUVD-2017-6513
Malware in sbrugna...