28932 matches found
CVE-2025-0373
On 64-bit systems, the implementation of VOPVPTOFH in the cd9660, tarfs and ext2fs filesystems overflows the destination FID buffer by 4 bytes, a stack buffer overflow. A NFS server that exports a cd9660, tarfs, or ext2fs file system can be made to panic by mounting and accessing the export with ...
CVE-2025-0373
The FreeBSD operating system kernel contains a stack buffer overflow vulnerability (CVE-2025-0373) affecting the cd9660 , tarfs , and ext2fs filesystems on 64-bit systems . The root cause is a 4-byte overflow of the destination FID buffer during the implementation of the VOP_VPTOFH() function. A ...
CVE-2025-0373 Buffer overflow in some filesystems via NFS
On 64-bit systems, the implementation of VOPVPTOFH in the cd9660, tarfs and ext2fs filesystems overflows the destination FID buffer by 4 bytes, a stack buffer overflow. A NFS server that exports a cd9660, tarfs, or ext2fs file system can be made to panic by mounting and accessing the export with ...
FreeBSD security vulnerabilities
FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. FreeBSD suffers from a buffer overflow vulnerability that stems from the implementation of VOPVPTOFH in the cd9660, tarfs, and ext2fs filesystems that causes the target FID buffer to overflow by 4 bytes, which can be...
net/mlx5: fs, lock FTE when checking if active
...
fs/ntfs3: Add rough attr alloc_size check
...
fs: Fix uninitialized value issue in from_kuid and from_kgid
...
PT-2025-3858 · Freebsd · Freebsd
Name of the Vulnerable Software and Affected Versions: FreeBSD affected versions not specified Description: The implementation of VOP VPTOFH in the cd9660, tarfs, and ext2fs filesystems overflows the destination FID buffer by 4 bytes, causing a stack buffer overflow. A NFS server that exports one...
Linux FUSE Virtio DoS
The vulnerability of the fs/fuse/virtiofs.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2025-24122
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to modify protected parts of the file system...
DEBIAN-CVE-2025-24814
Core creation allows users to replace "trusted" configset files with arbitrary configuration Solr instances that 1 use the "FileSystemConfigSetService" component the default in "standalone" or "user-managed" mode, and 2 are running without authentication and authorization are vulnerable to a sort...
UBUNTU-CVE-2025-24814
Core creation allows users to replace "trusted" configset files with arbitrary configuration Solr instances that 1 use the "FileSystemConfigSetService" component the default in "standalone" or "user-managed" mode, and 2 are running without authentication and authorization are vulnerable to a sort...
K000149484: Linux kernel vulnerability CVE-2024-40998
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: ext4: fix uninitialized ratelimitstate-lock access in ext4fillsuper In the following concurrency we will access the uninitialized rs-lock: ext4fillsuper ext4registersysfs // sysfs registered...
OESA-2025-1079 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ext4: don't set SBRDONLY after filesystem errors When the filesystem is mounted with errors=remount-ro, we were setting SBRDONLY flag to stop all filesystem...
CVE-2024-52328
ECOVACS robot lawnmowers and vacuums insecurely store audio files used to indicate that the camera is on. An attacker with access to the /data filesystem can delete or modify warning files such that users may not be aware that the camera is on...
CVE-2024-12079
ECOVACS robot lawnmowers are affected by CVE-2024-12079 due to storing the anti-theft PIN in cleartext on the device filesystem. This allows a local attacker to read the PIN and reset the anti-theft mechanism, enabling theft or circumvention of anti-theft protections. The available sources confir...
PT-2025-1745 · Ecovacs · Ecovacs Robot Lawnmowers
Name of the Vulnerable Software and Affected Versions: ECOVACS robot lawnmowers affected versions not specified Description: The issue concerns the storage of the anti-theft PIN in cleartext on the device filesystem. This allows an attacker to steal a lawnmower, read the PIN, and reset the...
CVE-2024-52328: Incorrect Permission Assignment for Critical Resource
ECOVACS robot lawnmowers and vacuums insecurely store audio files used to indicate that the camera is on. An attacker with access to the /data filesystem can delete or modify warning files such that users may not be aware that the camera is on...
SUSE CVE-2024-57941
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix the non-cancellation of copy when cache is temporarily disabled When the caching for a cookie is temporarily disabled e.g. due to a DIO write on that file, future copying to the cache for that file is disabled until al...
SUSE CVE-2024-57942
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix ceph copy to cache on write-begin At the end of netfsunlockreadfolio in which folios are marked appropriately for copying to the cache either with by being marked dirty and having their private data set or by having...