28801 matches found
CVE-2025-43853 iwasm vulnerable to filesystem sandbox escape with symlink when using uvwasi feature
The WebAssembly Micro Runtime's WAMR iwasm package is the executable binary built with WAMR VMcore which supports WebAssembly System Interface WASI and command line interface. Anyone running WAMR up to and including version 2.2.0 or WAMR built with libc-uvwasi on Windows is affected by a symlink...
CVE-2025-43853
CVE-2025-43853 concerns the WebAssembly Micro Runtime (WAMR) iwasm binary, including builds with WASI support. A symlink-following vulnerability affects WAMR up to and including version 2.2.0 (and WAMR builds on Windows using libc-uvwasi), where creating a symlink outside the preopened sandbox an...
CVE-2025-43853 iwasm vulnerable to filesystem sandbox escape with symlink when using uvwasi feature
The WebAssembly Micro Runtime's WAMR iwasm package is the executable binary built with WAMR VMcore which supports WebAssembly System Interface WASI and command line interface. Anyone running WAMR up to and including version 2.2.0 or WAMR built with libc-uvwasi on Windows is affected by a symlink...
CVE-2025-3877
Rejected reason: This CVE was marked as fixed, but due to other code landing - was not actually fixed. It was subsequently fixed in CVE-2025-5986...
net-tools security vulnerabilities
net-tools is a Linux-based networking tool from the individual developer Bernd. A security vulnerability exists in net-tools version 2.10 and earlier, which stems from insufficient validation of the /proc file structure and could lead to arbitrary code execution or a crash...
ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
A flaw was found in Ghostscript/base/gputf8.c. This vulnerability allows directory traversal via overlong UTF-8 encoding, potentially leading to unauthorized access to filesystem directories...
kernel: Linux kernel: Denial of Service in erofs due to memory leak
A flaw was found in the Linux kernel's erofs filesystem. A local user can trigger a memory leak by exploiting a condition in the zerofsregisterpcluster function where a pcluster's block address is zero, leading to an unreleased reference count. This vulnerability can result in resource exhaustion...
kernel: Linux kernel OverlayFS: Kernel crash via null pointer dereference in ovl_get_acl_rcu()
A flaw was found in the OverlayFS ovl component of the Linux kernel. A local user can trigger a null pointer dereference by performing a specific sequence of file system operations. This vulnerability occurs when the ovlgetaclrcu function attempts to access a real inode that has been set to NULL...
kernel: erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails
A resource leak flaw was found in the Linux kernel's EROFS filesystem. When zerofsgetextentcompressedlen fails, the corresponding meta buffer is not properly unmapped, leading to a memory leak over time...
kernel: ovl: fix null pointer dereference in ovl_permission()
In the Linux kernel, the following vulnerability has been resolved: ovl: fix null pointer dereference in ovlpermission Following process: P1 P2 pathlookupat linkpathwalk inodepermission ovlpermission ovlipathrealinode, &realpath path-dentry = ovlidentryupperinode dropcache dentrykillovldentry...
kernel: ext4: fix slab-use-after-free in ext4_split_extent_at()
A flaw was found in the Linux kernel's ext4 filesystem. A memory corruption vulnerability, specifically a use-after-free, exists in the ext4splitextentat function. This issue arises when an error during file extent creation causes the system to attempt to use memory that has already been released...
kernel: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
A flaw was found in the Linux kernel. A local user can trigger a kernel crash by performing specific memory operations involving hugetlb a memory management feature during the hot-removal of a memory device. This issue arises when the dumpmapping function attempts to access an invalid memory...
kernel: ext4: check stripe size compatibility on remount as well
In the Linux kernel, the following vulnerability has been resolved: ext4: check stripe size compatibility on remount as well We disable stripe size in ext4fillsuper if it is not a multiple of the cluster ratio however this check is missed when trying to remount. This can leave us with cases where...
kernel: ext4: sanity check for NULL pointer after ext4_force_shutdown
REJECTED CVE A NULL pointer dereference vulnerability has been identified in the Linux Kernel's ext4 filesystem. The issue occurs during concurrent write operations with inline data, where an ext4forceshutdown is triggered due to inconsistencies like "block bitmap and bg descriptor inconsistent."...
kernel: ovl: Filter invalid inodes with missing lookup function
In the Linux kernel, the following vulnerability has been resolved: ovl: Filter invalid inodes with missing lookup function Add a check to the ovldentryweird function to prevent the processing of directory inodes that lack the lookup function. This is important because such inodes can cause error...
kernel: ext4: don't set SB_RDONLY after filesystem errors
A flaw was found in the Linux kernel's handling of filesystem errors. When a filesystem encounters an error and is configured to remount as read-only, the kernel's attempt to apply this setting can conflict with other filesystem operations, specifically during filesystem freezing. This conflict c...
kernel: ext4: no need to continue when the number of entries is 1
No description is available for this CVE...
kernel: ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
A flaw was found in the ext4 file system component of the Linux kernel. Improper pointer handling during journal replay operations can trigger a double-free condition, where the system attempts to release the same memory block twice. A local user could exploit this vulnerability by mounting a...
kernel: erofs: fix missing xas_retry() in fscache mode
In the Linux kernel, the following vulnerability has been resolved: erofs: fix missing xasretry in fscache mode The xarray iteration only holds the RCU read lock and thus may encounter XARETRYENTRY if there's process modifying the xarray concurrently. This will cause oops when referring to the...