CVE-2025-21183 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

...

CVE-2025-21182 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

...

CVE-2025-21182

CVE-2025-21182 is a Windows ReFS Deduplication Service elevation of privilege vulnerability. The connected MSRC/MSKB advisories confirm a local-elevation flaw in the ReFS Deduplication component, with exploitation requiring local access and no user interaction. CVSS metrics show local access, hig...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: smb: Client: Fix deadlock in smb2findsmbtcon Unlock cifstcpseslock before calling cifsputsmbses to avoid such deadlocks...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: jfs: fixed a null pointer dereference in dtInsertEntry Reported by syzbot General protection fault, likely for a non-canonical address 0xdffffc0000000001: 0000 1 PREEMPT SMP KASAN PTI KASAN: nullptrderef in range...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: jfs: Fix for array-index-out-of-bounds in dtReadFirst. The value of stbl can sometimes be out of bounds due to a faulty filesystem. A check was added, along with an appropriate return of the error code in such cases...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: jfs: fixed a out-of-bounds situation in dbSplit. When dmtbudmin is less than zero, it causes errors in later stages. A check was added to return an error beforehand within dbAllocCtl itself...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nfs: Handling of the error from rpcprocregister in nfsnetinit. syzkaller reported a warning 0 that was triggered while destroying immature netnames. The rpcprocregister function was called in initnfsfs, but its error has been...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: btrfs: fixed a NULL pointer dereference when attempting to start a new transaction. BUG Syzbot reported a NULL pointer dereference, accompanied by a crash: FAULTINJECTION: Forced a failure. starttransaction+0x830/0x1670...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: kTLS, Fixed incorrect page reference counting. The kTLS transaction handling code uses a combination of getpage and pagerefinc APIs to increment page references. However, in the release path...

SUSE CVE-2025-24143

The issue was addressed with improved access restrictions to the file system. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, visionOS 2.3. A maliciously crafted webpage may be able to fingerprint the user...

PT-2025-6289 · Microsoft · Windows Resilient File System (Refs) Deduplication Service +1

Name of the Vulnerable Software and Affected Versions: Windows Resilient File System ReFS Deduplication Service affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Resilient File System ReFS Deduplication Service. It is cause...

Microsoft Windows Resilient File System 资源管理错误漏洞

Microsoft Windows Resilient File System ReFS is a resilient file system from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Resilient File System ReFS. An attacker could exploit the vulnerability to elevate privileges. The following products and...

Microsoft Windows NTFS 访问控制错误漏洞

Microsoft Windows NTFS is a file system from Microsoft USA that serves computer files. The file system has error warning, disk self-repair, and logging capabilities. An access control error vulnerability exists in Microsoft Windows NTFS. An attacker could exploit the vulnerability to elevate...

Microsoft Windows Resilient File System 资源管理错误漏洞

Microsoft Windows Resilient File System ReFS is a resilient file system from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Resilient File System ReFS. An attacker could exploit the vulnerability to elevate privileges. The following products and...

macOS 14.x < 14.4 Multiple Vulnerabilities (120895)

The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.4. It is, therefore, affected by multiple vulnerabilities: - The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, tvO...

PT-2025-16772

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the f2fs file system. The issue involves a warning in the dquot writeback dquots function due to a race condition betwee...

Azure Linux 3.0 Security Update: kernel (CVE-2024-49884)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49884 advisory. - In the Linux kernel, the following vulnerability has been resolved: ext4: fix slab-use-after-free in...

IBM App Connect Enterprise Certified Container Denial of Service Vulnerability (CNVD-2025-02814)

IBM App Connect Enterprise Certified Container is an image of the IBM App Connect Enterprise software product based on the International Business Machines IBM, Inc. The package is provided as an executable file that can be deployed and run in a containerized environment. A security vulnerability...

CLSA-2025-1738958068 Fix of 49 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-38553/CVE-2024-38597 - netpoll: make ndopollcontroller optional - bonding: use netpollpolldev helper - netpoll: do not test NAPISTATESCHED in pollonenapi CVE-url: https://ubuntu.com/security/CVE-2024-38597 - eth: sungem: remove .ndopollcontroller to...