DEBIAN-CVE-2024-36001

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix the pre-flush when appending to a file in writethrough mode In netfsperformwrite, when the file is marked NETFSICTXWRITETHROUGH or OSYNC or RWFSYNC was specified, write-through caching is performed on a buffered file...

UBUNTU-CVE-2024-35993

In the Linux kernel, the following vulnerability has been resolved: mm: turn foliotesthugetlb into a PageType The current foliotesthugetlb can be fooled by a concurrent folio split into returning true for a folio which has never belonged to hugetlbfs. This can't happen if the caller holds a...

Exploit for Unrestricted Upload of File with Dangerous Type in Git

CVE-2024-32002: Exploiting Git RCE via git clone This repos...

CVE-2023-52699

A vulnerability was found in the Linux kernel's System V sysv filesystem and occurred when calling the sbbread function while holding the pointerslock lock. This improper handling can lead to potential deadlocks or other erratic behavior in the filesystem. Mitigation Mitigation for this issue is...

CVE-2023-52699

In the Linux kernel, the following vulnerability has been resolved: sysv: don't call sbbread with pointerslock held syzbot is reporting sleep in atomic context in SysV filesystem 1, for sbbread is called with rwspinlock held. A "writelock&pointerslock = readlock&pointerslock deadlock" bug and a...

DEBIAN-CVE-2023-52699

In the Linux kernel, the following vulnerability has been resolved: sysv: don't call sbbread with pointerslock held syzbot is reporting sleep in atomic context in SysV filesystem 1, for sbbread is called with rwspinlock held. A "writelock&pointerslock = readlock&pointerslock deadlock" bug and a...

UBUNTU-CVE-2023-52699

In the Linux kernel, the following vulnerability has been resolved: sysv: don't call sbbread with pointerslock held syzbot is reporting sleep in atomic context in SysV filesystem 1, for sbbread is called with rwspinlock held. A "writelock&pointerslock = readlock&pointerslock deadlock" bug and a...

CVE-2023-52699

In the Linux kernel, the following vulnerability has been resolved: sysv: don't call sbbread with pointerslock held syzbot is reporting sleep in atomic context in SysV filesystem 1, for sbbread is called with rwspinlock held. A "writelock&pointerslock = readlock&pointerslock deadlock" bug and a...

CVE-2023-52699 sysv: don't call sb_bread() with pointers_lock held

In the Linux kernel, the following vulnerability has been resolved: sysv: don't call sbbread with pointerslock held syzbot is reporting sleep in atomic context in SysV filesystem 1, for sbbread is called with rwspinlock held. A "writelock&pointerslock = readlock&pointerslock deadlock" bug and a...

CVE-2023-52699

In CVE-2023-52699, the Linux kernel SysV locking flaw caused sleep in atomic context because sb_bread() was invoked with pointers_lock held. The root cause spans historical locking changes: replacing BKL with a sysvfs-private rwlock (Linux 2.5.12) introduced a write_lock → read_lock deadlock; the...

CVE-2023-52699 sysv: don't call sb_bread() with pointers_lock held

In the Linux kernel, the following vulnerability has been resolved: sysv: don't call sbbread with pointerslock held syzbot is reporting sleep in atomic context in SysV filesystem 1, for sbbread is called with rwspinlock held. A "writelock&pointerslock = readlock&pointerslock deadlock" bug and a...

CVE-2023-52699 sysv: don't call sb_bread() with pointers_lock held

In the Linux kernel, the following vulnerability has been resolved: sysv: don't call sbbread with pointerslock held syzbot is reporting sleep in atomic context in SysV filesystem 1, for sbbread is called with rwspinlock held. A "writelock&pointerslock = readlock&pointerslock deadlock" bug and a...

Exploit for Unrestricted Upload of File with Dangerous Type in Git

CVE-2024-32002 RCE POC A POC for CVE-2024-32002 demonstrating...

DEBIAN-CVE-2024-35844

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix reservecblocks counting error when out of space When a file only needs one directnode, performing the following operations will cause the file to be unrepairable: unisoc ./f2fsio compress test.apk unisoc df -h...

DEBIAN-CVE-2023-52682

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to wait on block writeback for postread case If inode is compressed, but not encrypted, it missed to call f2fswaitonblockwriteback to wait for GCed page writeback in IPU write path. Thread A GC-Thread - f2fsgc -...

UBUNTU-CVE-2024-35815

In the Linux kernel, the following vulnerability has been resolved: fs/aio: Check IOCBAIORW before the struct aiokiocb conversion The first kiocbsetcancelfn argument may point at a struct kiocb that is not embedded inside struct aiokiocb. With the current code, depending on the compiler, the...

UBUNTU-CVE-2024-35807

In the Linux kernel, the following vulnerability has been resolved: ext4: fix corruption during on-line resize We observed a corruption during on-line resize of a file system that is larger than 16 TiB with 4k block size. With having more then 2^32 blocks resizeinode is turned off by default by...

CLSA-2024-1715949385 kernel: Fix of 12 CVEs

fs,hugetlb: fix NULL pointer dereference in hugetlbsfillsuper CVE-2024-0841 - bpf: Fix incorrect verifier pruning due to missing register precision taints CVE-2023-2163 - bpf: Fix hashtab overflow check on 32-bit arches CVE-2024-26884 - RDMA/mlx5: Fix fortify source warning while accessing Eth...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from a corruption that occurs during resizing of the file system...

EulerOS Virtualization 3.0.6.6 : qemu (EulerOS-SA-2024-1671)

According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the 9p passthrough filesystem 9pfs implementation in QEMU. The 9pfs server did not prohibit opening special file...