PT-2024-7321

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to the btrfs component of the Linux kernel and is caused by an assertion failure during subvolume creation. This can lead to a denial of service. The issue...

PT-2024-7625

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a NULL dereference bug in the fs/ntfs3 component of the Linux kernel. This bug occurs when the ntfs load attr list function is called, and the "size" comes from...

CVE-2024-22705

A vulnerability was found in ksmbd in the Linux kernel's smb2getdataarealen in fs/smb/server/smb2misc. This flaw allows an attacker to cause an smbstrndupfromutf16 out-of-bounds access due to mishandling the relationship between Name data and CreateContexts data...

CVE-2023-31654

Redis raft master-1b8bd86 to master-7b46079 was discovered to contain an ODR violation via the component hiredisAllocFns at /opt/fs/redisraft/deps/hiredis/alloc.c...

CVE-2024-23850

In btrfsgetrootref in fs/btrfs/disk-io.c in the Linux kernel through 6.7.1, there can be an assertion failure and crash because a subvolume can be read out too soon after its root item is inserted upon subvolume creation...

PT-2024-8281

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential double-free in the fs any create groups function. When kcalloc for ft-g succeeds but kvzalloc for in fails, fs any create groups will free ft-g...

CVE-2024-23850: Reachable Assertion

In btrfsgetrootref in fs/btrfs/disk-io.c in the Linux kernel through 6.7.1, there can be an assertion failure and crash because a subvolume can be read out too soon after its root item is inserted upon subvolume creation...

CVE-2024-22705

An issue was discovered in ksmbd in the Linux kernel before 6.6.10. smb2getdataarealen in fs/smb/server/smb2misc.c can cause an smbstrndupfromutf16 out-of-bounds access because the relationship between Name data and CreateContexts data is mishandled...

CVE-2024-22705: Out-of-bounds Read

An issue was discovered in ksmbd in the Linux kernel before 6.6.10. smb2getdataarealen in fs/smb/server/smb2misc.c can cause an smbstrndupfromutf16 out-of-bounds access because the relationship between Name data and CreateContexts data is mishandled...

CVE-2024-0775: Use After Free

A use-after-free flaw was found in the ext4remount in fs/ext4/super.c in ext4 in the Linux kernel. This flaw allows a local user to cause an information leak problem while freeing the old quota file names before a potential failure, leading to a use-after-free...

PT-2024-19813

Name of the Vulnerable Software and Affected Versions Vite versions prior to 2.9.17 Vite versions prior to 3.2.8 Vite versions prior to 4.5.2 Vite versions prior to 5.0.12 Description The Vite dev server option server.fs.deny can be bypassed on case-insensitive file systems using case-augmented...

PT-2024-7610

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the ext4 component of the Linux kernel, specifically with the function ext4 mb find by goal in fs/ext4/mballoc.c. It involves incorrect locking, which can lead to...

Ubuntu 23.10 : Linux kernel (Azure) vulnerabilities (USN-6572-1)

The remote Ubuntu 23.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6572-1 advisory. Yu Hao discovered that the UBI driver in the Linux kernel did not properly check for MTD with zero erasesize during device attachment. A local privileged...

PT-2024-14644

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.7.0 Description The issue is related to an array-index-out-of-bounds error in the diNewExt function in the JFS file system. When the agstart value is too large, it can cause an agno overflow. This error is...

PT-2025-7422

Name of the Vulnerable Software and Affected Versions fs/tar affected versions not specified Description The issue is related to an integer overflow that causes a heap out-of-bounds write. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

PT-2025-7421

Name of the Vulnerable Software and Affected Versions fs/bfs affected versions not specified Description The issue is related to an integer overflow in the BFS parser, which can lead to a Heap OOB Read and potentially Write in the fs/bfs component. Recommendations At the moment, there is no...

The vulnerability of the free_pipe_info function in the fs/pipe.c file of the Linux kernel allows a hacker to increase their privileges.

The vulnerability of the freepipeinfo function in the fs/pipe.c file of the Linux kernel relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

SUSE SLES15: kernel-livepatch-5_14_21-150400_24_74-default / etc (SUSE-SU-2023:4805-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4805-1 advisory. This update for the Linux Kernel 5.14.21-1504002474 fixes several issues. The following security issues were fixed: - CVE-2023-3610: Fixed...

PT-2024-8268

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a regression introduced by a commit that added general notification queue support, which caused resized pipes to lock up under certain conditions. This occurred...

CVE-2023-6610

CVE-2023-6610 is an out-of-bounds read in Linux kernel’s smb2_dump_detail() (fs/smb/client/smb2ops.c). The vulnerability can allow a local attacker to crash the kernel or leak internal kernel information. Connected advisories (e.g., MiracleLinux/Tencent/Tenable Nessus entries) confirm the issue a...