PT-2023-36714

Уязвимость функции alloc wbufs модуля fs/ubifs/super.c файловой системы ядра операционной системы Linux связана с неправильным освобождением памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2023-36739

Уязвимость функции ubifs sysfs init модуля fs/ubifs/sysfs.c файловой системы ядра операционной системы Linux связана с неправильным освобождением памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

The vulnerability of the filelock_init function in the locking mechanism (fs/locks.c) of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the filelockinit function in the locking mechanism fs/locks.c of the Linux kernel is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

golang: io/fs: stack exhaustion in Glob

A flaw was found in the golang standard library, io/fs. Calling Glob on a path that contains a large number of path separators can cause a panic issue due to stack exhaustion. This could allow an attacker to impact availability...

PT-2023-36717

Уязвимость функции dlm midcomms commit mhandle модуля fs/dlm/midcomms.c поддержки распределенного менеджера блокировок ядра операционной системы Linux связана с повторным использованием ранее освобожденной памяти. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на...

CVE-2023-22726 Unrestricted file upload leading to privilege escalation in act

act is a project which allows for local running of github actions. The artifact server that stores artifacts from Github Action runs does not sanitize path inputs. This allows an attacker to download and overwrite arbitrary files on the host from a Github Action. This issue may lead to privilege...

GSD-2023-1001353 fs: jfs: fix shift-out-of-bounds in dbDiscardAG

fs: jfs: fix shift-out-of-bounds in dbDiscardAG This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001056 fs/ntfs3: Harden against integer overflows

fs/ntfs3: Harden against integer overflows This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000930 fs/ntfs3: Use __GFP_NOWARN allocation at wnd_init()

fs/ntfs3: Use GFPNOWARN allocation at wndinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000640 fs/ntfs3: Harden against integer overflows

fs/ntfs3: Harden against integer overflows This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000494 fs/ntfs3: Add overflow check for attribute size

fs/ntfs3: Add overflow check for attribute size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000490 fs/ntfs3: Fix memory leak on ntfs_fill_super() error path

fs/ntfs3: Fix memory leak on ntfsfillsuper error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000473 fs/ntfs3: Use __GFP_NOWARN allocation at wnd_init()

fs/ntfs3: Use GFPNOWARN allocation at wndinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000469 fs/ntfs3: Delete duplicate condition in ntfs_read_mft()

fs/ntfs3: Delete duplicate condition in ntfsreadmft This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000399 fs/ntfs3: don't hold ni_lock when calling truncate_setsize()

fs/ntfs3: don't hold nilock when calling truncatesetsize This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

PT-2023-34134

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15.45 through v5.15.85 Description The issue is related to the fs/ntfs3 component and is intended to aid in the discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet be...

PT-2023-34133

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to integer overflows in the fs/ntfs3 component. It was introduced in version v5.15 and fixed in version v5.15.86. The actual impact and attack plausibility have not yet...

PT-2023-33571 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.17 Description: The issue is related to an overflow check for attribute size in the fs/ntfs3 component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33717 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to integer overflows in the fs/ntfs3 component. It was introduced in version v5.15 and fixed in version v6.0.16. The actual impact and attack plausibility have not yet...

PT-2023-34022 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: A potential security issue has been identified in the Linux Kernel, related to the fs/ntfs3 module. The issue concerns the attr load runs vcn function, where a null pointer check has been...