28933 matches found
CVE-2025-21665: Loop with Unreachable Exit Condition
In the Linux kernel, the following vulnerability has been resolved: filemap: avoid truncating 64-bit offset to 32 bits On 32-bit kernels, folioseekholedata was inadvertently truncating a 64-bit value to 32 bits, leading to a possible infinite loop when writing to an xfs filesystem...
CVE-2025-0373
On 64-bit systems, the implementation of VOPVPTOFH in the cd9660, tarfs and ext2fs filesystems overflows the destination FID buffer by 4 bytes, a stack buffer overflow. A NFS server that exports a cd9660, tarfs, or ext2fs file system can be made to panic by mounting and accessing the export with ...
CVE-2025-0373
The FreeBSD operating system kernel contains a stack buffer overflow vulnerability (CVE-2025-0373) affecting the cd9660 , tarfs , and ext2fs filesystems on 64-bit systems . The root cause is a 4-byte overflow of the destination FID buffer during the implementation of the VOP_VPTOFH() function. A ...
CVE-2025-0373 Buffer overflow in some filesystems via NFS
On 64-bit systems, the implementation of VOPVPTOFH in the cd9660, tarfs and ext2fs filesystems overflows the destination FID buffer by 4 bytes, a stack buffer overflow. A NFS server that exports a cd9660, tarfs, or ext2fs file system can be made to panic by mounting and accessing the export with ...
FreeBSD security vulnerabilities
FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. FreeBSD suffers from a buffer overflow vulnerability that stems from the implementation of VOPVPTOFH in the cd9660, tarfs, and ext2fs filesystems that causes the target FID buffer to overflow by 4 bytes, which can be...
net/mlx5: fs, lock FTE when checking if active
...
fs/ntfs3: Add rough attr alloc_size check
...
fs: Fix uninitialized value issue in from_kuid and from_kgid
...
PT-2025-3858 · Freebsd · Freebsd
Name of the Vulnerable Software and Affected Versions: FreeBSD affected versions not specified Description: The implementation of VOP VPTOFH in the cd9660, tarfs, and ext2fs filesystems overflows the destination FID buffer by 4 bytes, causing a stack buffer overflow. A NFS server that exports one...
Linux FUSE Virtio DoS
The vulnerability of the fs/fuse/virtiofs.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2025-24122
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to modify protected parts of the file system...
DEBIAN-CVE-2025-24814
Core creation allows users to replace "trusted" configset files with arbitrary configuration Solr instances that 1 use the "FileSystemConfigSetService" component the default in "standalone" or "user-managed" mode, and 2 are running without authentication and authorization are vulnerable to a sort...
UBUNTU-CVE-2025-24814
Core creation allows users to replace "trusted" configset files with arbitrary configuration Solr instances that 1 use the "FileSystemConfigSetService" component the default in "standalone" or "user-managed" mode, and 2 are running without authentication and authorization are vulnerable to a sort...
K000149484: Linux kernel vulnerability CVE-2024-40998
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: ext4: fix uninitialized ratelimitstate-lock access in ext4fillsuper In the following concurrency we will access the uninitialized rs-lock: ext4fillsuper ext4registersysfs // sysfs registered...
OESA-2025-1079 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ext4: don't set SBRDONLY after filesystem errors When the filesystem is mounted with errors=remount-ro, we were setting SBRDONLY flag to stop all filesystem...
CVE-2024-52328
ECOVACS robot lawnmowers and vacuums insecurely store audio files used to indicate that the camera is on. An attacker with access to the /data filesystem can delete or modify warning files such that users may not be aware that the camera is on...
CVE-2024-12079
ECOVACS robot lawnmowers are affected by CVE-2024-12079 due to storing the anti-theft PIN in cleartext on the device filesystem. This allows a local attacker to read the PIN and reset the anti-theft mechanism, enabling theft or circumvention of anti-theft protections. The available sources confir...
PT-2025-1745 · Ecovacs · Ecovacs Robot Lawnmowers
Name of the Vulnerable Software and Affected Versions: ECOVACS robot lawnmowers affected versions not specified Description: The issue concerns the storage of the anti-theft PIN in cleartext on the device filesystem. This allows an attacker to steal a lawnmower, read the PIN, and reset the...
CVE-2024-52328: Incorrect Permission Assignment for Critical Resource
ECOVACS robot lawnmowers and vacuums insecurely store audio files used to indicate that the camera is on. An attacker with access to the /data filesystem can delete or modify warning files such that users may not be aware that the camera is on...
SUSE CVE-2024-57941
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix the non-cancellation of copy when cache is temporarily disabled When the caching for a cookie is temporarily disabled e.g. due to a DIO write on that file, future copying to the cache for that file is disabled until al...