kernel: can: bcm: Fix UAF in bcm_proc_show()

A flaw was found in the Linux kernel's Controller Area Network CAN Broadcast Manager BCM module. A local attacker with low privileges could exploit a use-after-free vulnerability in the bcmprocshow function. This occurs because the bcmop object is freed before its corresponding procfs entry is...

[SECURITY] Fedora 41 Update: buildah-1.39.2-1.fc41

The buildah package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a ne...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-56780)

"The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56780 advisory. - In the Linux kernel, the following vulnerability has been resolved: quota: flush quotareleasework upon quot...

The vulnerability of the ubifs_dump_tnc() function in the file system of the UBIFS driver (fs/ubifs/debug.c) in Linux kernel allows a attacker to cause a service failure.

The vulnerability of the ubifsdumptnc function in the file system of the UBIFS driver fs/ubifs/debug.c in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

NFSD: Prevent NULL dereference in nfsd4_process_cb_update()

...

ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write

...

hfsplus: don't query the device logical block size multiple times

...

jffs2: Prevent rtime decompress memory corruption

...

PT-2025-14330

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.14.0-rc2+ 241 Description A vulnerability in the Linux kernel has been resolved, related to the LoongArch architecture. The issue arises when the base address allocated from hugetlbfs is not aligned with the pm...

The vulnerability of the Oracle Solaris operating system’s file system allows a perpetrator to gain privileged access to infrastructure resources or cause service interruptions.

The vulnerability of the Oracle Solaris operating system’s file system is related to reading data beyond the buffer boundaries of memory. Exploiting this vulnerability can allow an attacker to gain privileged access to infrastructure resources or cause service failures...

Esri ArcGIS Server Catalog Traversal Vulnerability

Esri ArcGIS Server is Esri's Web-oriented enterprise software platform for providing geolocation services. A directory traversal vulnerability exists in Esri ArcGIS Server versions 10.9.1 through 11.3, which can be exploited by a remote authenticated attacker to access files outside the file syst...

USN-7323-2: Linux kernel vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2024-45779

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow flaw was found in the BFS file system driver in grub2. When reading a file with an indirect extent map, grub2 fails to validate the number o...

Linux Distros Unpatched Vulnerability : CVE-2024-50230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: fix kernel bug due to missing clearing of checked flag Syzbot reported that in directory operations after nilfs2 detects filesystem corruption and...

Linux Distros Unpatched Vulnerability : CVE-2024-56581

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: btrfs: ref-verify: fix use-after-free after invalid ref action At btrfsreftreemod after we...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Fix null pointer dereference on error CVE-2024-41098 In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Prevent UAF in proccpusetshow CVE-2024-43853 In the Linux...

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-7331-1)

"The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7331-1 advisory. Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a...

Linux Distros Unpatched Vulnerability : CVE-2024-53147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - exfat: fix out-of-bounds access of directory entries In the case of the directory size is greater than or equal to the cluster size, if startclu becomes an EOF...

Linux Distros Unpatched Vulnerability : CVE-2024-49880

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: fix off by one issue in allocflexgd Wesley reported an issue: ================================================================== EXT4-fs dm-5: resizing...

Ubuntu: Security Advisory (USN-7328-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...