CVE-2021-45469

In f2fssetxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of-bounds memory access when an inode has an invalid last xattr entry...

UBUNTU-CVE-2021-45469

In f2fssetxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of-bounds memory access when an inode has an invalid last xattr entry...

CVE-2021-45469

In f2fssetxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of-bounds memory access when an inode has an invalid last xattr entry...

Linux kernel 缓冲区错误漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel versions prior to 5.15.11 have a security vulnerability that stems from f2fssetxattr in fs/f2fs/xattr.c in the Linux kernel, which can be exploited when an inode has an invalid last xattr...

PT-2021-6205 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.15.11 Description: The issue arises from an out-of-bounds memory access in the f2fs setxattr function in fs/f2fs/xattr.c when an inode has an invalid last xattr entry. This can potentially impact the...

GSD-2021-1002548 f2fs: set SBI_NEED_FSCK flag when inconsistent node block found

f2fs: set SBINEEDFSCK flag when inconsistent node block found This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.6 by commit...

GSD-2021-1002480 f2fs: set SBI_NEED_FSCK flag when inconsistent node block found

f2fs: set SBINEEDFSCK flag when inconsistent node block found This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.83 by commit...

GSD-2021-1002439 f2fs: set SBI_NEED_FSCK flag when inconsistent node block found

f2fs: set SBINEEDFSCK flag when inconsistent node block found This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.163 by commit...

The vulnerability of the F2fs-Tools tool, related to the ability to disclose information, allows a violator to gain access to confidential information.

The vulnerability of the F2fs-Tools tool is related to the exposure of confidential information. Exploiting this vulnerability could allow an attacker to gain access to confidential information through a specially created file system called f2fs...

The vulnerability of the F2fs-Tools tool, related to reading beyond the memory boundaries, allows a intruder to access confidential information.

The vulnerability of the F2fs-Tools tool is related to reading data beyond the memory boundaries. Exploiting this vulnerability can allow an attacker to access confidential information by using a specially created file system called f2fs, causing a read error beyond the allowed range...

The vulnerability of the F2fs-Tools utility, related to incorrect external manipulation of file names or file paths, allows a malicious user to delete any files they desire.

The vulnerability of the F2fs-Tools tool is related to improper external manipulation of the file name or file path. Exploiting this vulnerability allows an attacker to delete arbitrary files by creating a specially crafted file system called f2fs...

PT-2021-6851 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.16.3 Description: The issue is related to the gc data segment function in the Linux kernel, specifically in fs/f2fs/gc.c. It involves a NULL pointer dereference due to special files not being considered, which...

UVI-2021-1002330 f2fs: fix incorrect return value in f2fs_sanity_check_ckpt()

f2fs: fix incorrect return value in f2fssanitycheckckpt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

GSD-2021-1002330 f2fs: fix incorrect return value in f2fs_sanity_check_ckpt()

f2fs: fix incorrect return value in f2fssanitycheckckpt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

UVI-2021-1002289 f2fs: fix incorrect return value in f2fs_sanity_check_ckpt()

f2fs: fix incorrect return value in f2fssanitycheckckpt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...

GSD-2021-1002289 f2fs: fix incorrect return value in f2fs_sanity_check_ckpt()

f2fs: fix incorrect return value in f2fssanitycheckckpt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...

Ubuntu: Security Advisory (USN-5137-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5137-2 linux-bluefield, linux-gke-5.4, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities

It was discovered that the f2fs file system in the Linux kernel did not properly validate metadata in some situations. An attacker could use this to construct a malicious f2fs image that, when mounted and operated on, could cause a denial of service system crash or possibly execute arbitrary code...

USN-5137-2: Linux kernel vulnerabilities

It was discovered that the f2fs file system in the Linux kernel did not properly validate metadata in some situations. An attacker could use this to construct a malicious f2fs image that, when mounted and operated on, could cause a denial of service system crash or possibly execute arbitrary code...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-5137-2)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5137-2 advisory. It was discovered that the f2fs file system in the Linux kernel did not properly validate metadata in some situations. An attacker could use...