24191 matches found
GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem.
...
HDF5 H5FScache.c H5FS__sinfo_Srialize_Sct_cb heap-based overflow
...
fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
...
A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used. Node.js Permission Model do not operate on file descriptors, however, operations such as fs.fchown or fs.fchmod can use a "read-only" file descriptor to change the owner and permissions of a file.
...
fs/ntfs3: Keep write operations atomic
...
ext4: filesystems without casefold feature cannot be mounted with siphash
...
scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs
...
f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
...
f2fs: quota: fix to avoid warning in dquot_writeback_dquots()
...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from improper VF handling during namespace deletion, which could lead to a null pointer dereference...
btrfs: do proper folio cleanup when cow_file_range() failed
...
fs/9p: fix NULL pointer dereference on mkdir
...
ocfs2: Avoid touching renamed directory if parent does not change
...
ext4: avoid journaling sb update on error if journal is destroying
...
netfs: Only call folio_start_fscache() one time for each folio
...
btrfs: remove BUG() after failure to insert delayed dir index item
...
Arbitrary Code Injection
Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Arbitrary Code Injection via modification of the resources folder when the embeddedAsarIntegrityValidation...
CVE-2025-58458
The CVE-2025-58458 entry concerns the Jenkins Git client Plugin (versions 6.3.2 and earlier, excluding 6.1.4 and 6.2.1). The root cause is inconsistent validation of the Git URL field when using the amazon-s3 protocol with JGit, where the response depends on whether the specified file path exists...
Linux Distros Unpatched Vulnerability : CVE-2025-22242
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Worker process denial of service through file read operation. .A vulnerability exists in the Master's pubret method which is exposed to all minions. The...
USN-7725-3 linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-raspi vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Overlay file system; - Network traffic control; CVE-2025-21887, CVE-2024-57996, CVE-2025-38350, CVE-2025-37752...