28975 matches found
GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem.
...
HDF5 H5FScache.c H5FS__sinfo_Srialize_Sct_cb heap-based overflow
...
fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
...
A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used. Node.js Permission Model do not operate on file descriptors, however, operations such as fs.fchown or fs.fchmod can use a "read-only" file descriptor to change the owner and permissions of a file.
...
fs/ntfs3: Keep write operations atomic
...
scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs
...
f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
...
f2fs: quota: fix to avoid warning in dquot_writeback_dquots()
...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from improper VF handling during namespace deletion, which could lead to a null pointer dereference...
CVE-2025-38697: Improper Validation of Array Index
In the Linux kernel, the following vulnerability has been resolved: jfs: upper bound check of tree index in dbAllocAG When computing the tree index in dbAllocAG, we never check if we are out of bounds realative to the size of the stree. This could happen in a scenario where the filesystem metadat...
ocfs2: Avoid touching renamed directory if parent does not change
...
netfs: Only call folio_start_fscache() one time for each folio
...
btrfs: remove BUG() after failure to insert delayed dir index item
...
Arbitrary Code Injection
Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Arbitrary Code Injection via modification of the resources folder when the embeddedAsarIntegrityValidation...
CVE-2025-58458
The Jenkins Git client Plugin (versions 6.3.2 and earlier, except 6.1.4 and 6.2.1) is vulnerable to an information disclosure flaw. The issue stems from differential form validation behavior when using the amazon-s3 protocol with JGit; specifically, the Git URL field validation responses vary dep...
PT-2025-36635
Impact This only impacts apps that have the embeddedAsarIntegrityValidation and onlyLoadAppFromAsar fuses enabled. Apps without these fuses enabled are not impacted. Specifically this issue can only be exploited if your app is launched from a filesystem the attacker has write access too. i.e. the...
Linux Distros Unpatched Vulnerability : CVE-2025-22242
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Worker process denial of service through file read operation. .A vulnerability exists in the Master's pubret method which is exposed to all minions. The...
USN-7725-3 linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-raspi vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Overlay file system; - Network traffic control; CVE-2025-21887, CVE-2024-57996, CVE-2025-38350, CVE-2025-37752...
Linux Distros Unpatched Vulnerability : CVE-2025-38663
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - nilfs2: reject invalid file types when reading inodes To prevent inodes with invalid file types from tripping through the vfs and causing...
Linux Distros Unpatched Vulnerability : CVE-2024-22232
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A specially crafted url can be created which leads to a directory traversal in the salt file server. A malicious user can read an arbitrary file from a Salt...