Astra Linux – Vulnerability in ntfs-3g

In NTFS-3G versions before 2021.8.22, when a specially crafted NTFS attribute is provided to the function ntfsgetattributevalue, a heap buffer overflow can occur, allowing for memory disclosure or denial of service. The vulnerability is caused by an out-of-bound buffer access, which can be...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ext4: Fix for a possible UAF Use-after-Write when remounting a read-only mmp-protected file system. After committing the change 618f003199c6 “ext4: Fix memory leak in ext4fillsuper”, there is a race condition where the kmmpd thre...

UBUNTU-CVE-2026-64322

In the Linux kernel, the following vulnerability has been resolved: udf: validate sparing table length as an entry count, not a byte count udfloadsparablemap accepts a sparing table when sizeofst + le16tocpust-reallocationTableLen sb-sblocksize is false, i.e. it treats reallocationTableLen as a...

MGASA-2026-0291 Updated cifs-utils packages fix a security vulnerability

The updated packages fix a security vulnerability: Local privilege escalation via forged cifs.spnego key description in cifs.upcall. CVE-2026-12505...

The vulnerability of the NTFS file system in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the NTFS file system in Windows operating systems is related to integer overflow. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2026-50402 NTFS Elevation of Privilege Vulnerability

...

CVE-2026-50386 Windows NTFS Remote Code Execution Vulnerability

...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the improper handling of file backend mounting by the erofs file system. This issue may allow I/O...

Google Chrome 输入验证错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 had a vulnerability related to input validation. This vulnerability stemmed from improper implementations in the FileSystem, which could allow remote attackers with compromised rendering...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which can trigger an infinite loop if the valid values remain constant during processing in the ntfs3 file system...

CVE-2026-43158

In the Linux kernel, the following vulnerability has been resolved: xfs: fix freemap adjustments when adding xattrs to leaf blocks xfs/592 and xfs/794 both trip this assertion in the leaf block freemap adjustment code after 20 minutes of running on my test VMs: ASSERTichdr-firstused = ichdr-count...

CVE-2026-34863

Out-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-34863

Huawei HarmonyOS is affected by CVE-2026-34863, describing an out-of-bounds write in the file system that can impact availability. The vulnerability is documented across multiple feeds (NVD, CNVD, EUVD, CIRCL, etc.), indicating a file-system level flaw likely exploitable with local access (attack...

The vulnerability of the f2fs_do_zero_range() function in the fs/f2fs/file.c module of the F2FS file system support in Linux kernel allows a attacker to cause a service failure.

The vulnerability of the f2fsdozerorange function in the fs/f2fs/file.c module of the F2FS file system support in Linux kernel involves unconstrained and unrestricted resource allocation. Exploiting this vulnerability could allow a attacker to cause service failures...

The vulnerability of the ext4_put_super() function in the fs/ext4/super.c file of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4putsuper function in the fs/ext4/super.c file of the Linux kernel’s Ext4 file system is related to copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the inode_init_always() function in the fs/inode.c file of the Linux kernel’s file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the inodeinitalways function in the fs/inode.c file of the Linux kernel’s file system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Huawei EMUI and Huawei HarmonyOS file system module out-of-bounds write vulnerability

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. An out-of-bounds write vulnerability exists in the Huawei EMUI and Huawei HarmonyOS file system module, which can...

The vulnerability of the __ext4_fill_super() function in the fs/ext4/super.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ext4fillsuper function in the fs/ext4/super.c module of the Linux operating system is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the hfs_mdb_get() function in the fs/hfs/mdb.c module of the Linux kernel file system allows a attacker to cause a service failure.

The vulnerability of the hfsmdbget function in the fs/hfs/mdb.c module of the Linux kernel file system is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

[SECURITY] [DLA 4460-1] ceph security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-4460-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta February 01, 2026 https://wiki.debian.org/LTS -...