CVE-2022-49068 btrfs: release correct delalloc amount in direct IO write path

In the Linux kernel, the following vulnerability has been resolved: btrfs: release correct delalloc amount in direct IO write path Running generic/406 causes the following WARNING in btrfsdestroyinode which tells there are outstanding extents left. In btrfsgetblocksdirectwrite, we reserve a...

CVE-2021-47635

CVE-2021-47635 concerns a Linux kernel ubifs page refcount bug when a page is marked with PG_private. The connected documents describe that UBIFS did not increase the page’s refcount after SetPagePrivate, causing the migration code to overestimate zero references and migrate pages still in use, p...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a dereference to an obsolete list iterator after a loop body in f2fs...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from ext4 in parseapplysbmountoptions that could lead to a memory leak...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the ceph filesystem acquiring inlinedata while holding a Fwb lock could result in a deadlock...

PT-2025-8205

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the jffs2 file system. The leak occurs when the jffs2 build filesystem function in jffs2 do mount fs returns ...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a cyclic conditional error in the f2fsquotasync function, which could lead to a null pointer dereference...

PT-2025-8483 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue exists in the Linux kernel due to the lack of the invalidate folio method in the ntfs3 filesystem. This causes cached written data to not be freed when the filesyst...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from ext4 not properly handling reserved GDT blocks when resizing the filesystem, which could lead to null pointer...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the f2fs module not performing integrity checks on totaldatablocks, which could lead to a kernel crash...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a bug triggered when the ext4 driver dirty pages without notifying the filesystem, which could lead to data...

ext4 Heap Buffer Overflow DoS

The vulnerability of the ext4mbfindgoodgroupavgfraglists function in the ext4 file system of the Linux operating system is related to read errors beyond the memory boundary. Exploiting this vulnerability could allow an attacker to cause a service failure...

USN-7298-1 linux, linux-lts-xenial vulnerability

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

Medium: grub2

Issue Overview: GNU GRUB aka GRUB2 through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem. CVE-2024-56737 Affected Packages: grub2 Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference...

Linux kernel fs/netfs/fscache_cookie DoS

The vulnerability of the fs/netfs/fscachecookie component of the Linux operating system’s kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-57262

In barebox before 2025.01.0, ext4fsreadsymlink has an integer overflow for zalloc adding one to an le32 variable via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite, a related issue to CVE-2024-57256...

Medium: grub2

Issue Overview: GNU GRUB aka GRUB2 through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem. CVE-2024-56737 Affected Packages: grub2 Issue Correction: Run dnf update grub2 --releasever 2023.6.20250218 to update your system. New Packages: aarch64: ...

Medium: grub2

Issue Overview: GNU GRUB aka GRUB2 through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem. CVE-2024-56737 Affected Packages: grub2 Issue Correction: Run dnf update grub2 --releasever 2023.6.20250218 or dnf update --advisory ALAS2023-2025-847...

SUSE CVE-2024-45778

A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to crash...

SUSE CVE-2024-45779

An integer overflow flaw was found in the BFS file system driver in grub2. When reading a file with an indirect extent map, grub2 fails to validate the number of extent entries to be read. A crafted or corrupted BFS filesystem may cause an integer overflow during the file reading, leading to a he...