3627 matches found
CVE-2024-36027
In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: do not flag ZEROOUT on non-dirty extent buffer Btrfs clears the content of an extent buffer marked as EXTENTBUFFERZONEDZEROOUT before the bio submission. This mechanism is introduced to prevent a write hole of an...
CVE-2024-36943
In the Linux kernel, the following vulnerability has been resolved: fs/proc/taskmmu: fix loss of young/dirty bits during pagemap scan makeuffdwppte was previously doing: pte = ptepgetptep; ptepmodifyprotstartptep; pte = ptemkuffdwppte; ptepmodifyprotcommitptep, pte; But if another thread accessed...
CVE-2024-36943
CVE-2024-36943 involves the Linux kernel’s fs/proc/task_mmu code. The race condition occurs in make_uffd_wp_pte() where ptep modifications could race with concurrent accesses, risking loss of the young/dirty bits during pagemap scanning. The incorrect sequence (pte = ptep_get(ptep); ptep_modify_p...
CVE-2024-36923
CVE-2024-36923 is documented in a connected Nessus entry as a Linux kernel vulnerability affecting fs/9p inode eviction. Root cause: when iget fails to retrieve server information, the inode may be partially initialized; during eviction, references to uninitialized structures (e.g., fscache cooki...
PT-2024-9022
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a race condition between the AIO completion handler and AIO cancel in the Linux kernel's usb: gadget: f fs component. This occurs when the FFS application issue...
CVE-2024-36027: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: do not flag ZEROOUT on non-dirty extent buffer Btrfs clears the content of an extent buffer marked as EXTENTBUFFERZONEDZEROOUT before the bio submission. This mechanism is introduced to prevent a write hole of an...
CVE-2024-36943: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: fs/proc/taskmmu: fix loss of young/dirty bits during pagemap scan makeuffdwppte was previously doing: pte = ptepgetptep; ptepmodifyprotstartptep; pte = ptemkuffdwppte; ptepmodifyprotcommitptep, pte; But if another thread accessed...
The vulnerability of the smb2_is_network_name_deleted() function in the Linux kernel-based SMB client implementation allows a attacker to cause a service failure.
The vulnerability of the smb2isnetworknamedeleted function in the fs/smb/client/smb2ops.c module of the SMB protocol client implementation in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a servic...
The vulnerability of the scrub_submit_initial_read() function in the file system of the brtfs kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the scrubsubmitinitialread function in the fs/btrfs/scrub.c file of the Linux operating system’s file system brtfs relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
CVE-2021-47508
In the Linux kernel, the following vulnerability has been resolved: btrfs: free exchange changeset on failures Fstests runs on my VMs have show several kmemleak reports like the following. unreferenced object 0xffff88811ae59080 size 64: comm "xfsio", pid 12124, jiffies 4294987392 age 6.368s hex...
CVE-2021-47569: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: iouring: fail cancellation for EXITING tasks WARNING: CPU: 1 PID: 20 at fs/iouring.c:6269 iotrycanceluserdata+0x3c5/0x640 fs/iouring.c:6269 CPU: 1 PID: 20 Comm: kworker/1:0 Not tainted 5.16.0-rc1-syzkaller 0 Workqueue: events...
CVE-2023-52810
In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add check for negative dbl2nbperpage l2nbperpage is log2number of blks per page, and the minimum legal value should be 0, not negative. In the case of l2nbperpage being negative, an error will occur when subsequently used...
CVE-2023-52804
In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add validity check for dbmaxag and dbagpref Both dbmaxag and dbagpref are used as the index of the dbagfree array, but there is currently no validity check for dbmaxag and dbagpref, which can lead to errors. The following...
systemd security update
239-82.0.1 - Fixed deletion issue for symlink when device is opened Orabug: 36228608 - Fix local-fs and remote-fs targets during system boot replaces old Orabug: 25897792 Orabug: 35871376 - 1A Add 'systemd-fstab-generator-reload-targets.service' file Orabug: 35871376 - 1B Add required rpms for...
gix-lock (>=5.0.0, <=12.0.1), gix-tempfile (>=5.0.3, <=12.0.1) potentially affected by CVE-2024-35186 via gix-fs (>=0.1.1, <=0.9.1)
gix-fs CARGO version =0.1.1, =5.0.0, =5.0.3, =12.0.1 Source cves: CVE-2024-35186 Source advisory: OSV:GHSA-7W47-3WG8-547C...
gix-lock (>=5.0.0, <=12.0.1), gix-tempfile (>=5.0.3, <=12.0.1) potentially affected by CVE-2024-35186 via gix-fs (>=0.1.1, <=0.9.1)
gix-fs CARGO version =0.1.1, =5.0.0, =5.0.3, =12.0.1 Source cves: CVE-2024-35186 Source advisory: OSV:RUSTSEC-2024-0350...
PT-2024-3970
Name of the Vulnerable Software and Affected Versions gitoxide versions prior to 0.36.0 Description During checkout, gitoxide does not verify that paths point to locations in the working tree. A specially crafted repository can, when cloned, place new files anywhere writable by the application...
CVE-2023-52848
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to drop metainode's page cache in f2fsputsuper syzbot reports a kernel bug as below: F2FS-fs loop1: detect filesystem reference count leak during umount, type: 10, count: 1 kernel BUG at fs/f2fs/super.c:1639! CPU: 0 PID...