Oracle Linux 7 : libblockdev (ELSA-2025-10796)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-10796 advisory. - Don't allow suid and dev set on fs resize CVE-2025-6019 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

Linux Distros Unpatched Vulnerability : CVE-2024-26935

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix unremoved procfs host directory regression Commit fc663711b94...

Linux Distros Unpatched Vulnerability : CVE-2025-38276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fs/dax: Fix don't skip locked entries when scanning entries Commit 6be3e21d25ca fs/dax: don'...

Linux Distros Unpatched Vulnerability : CVE-2025-22079

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: validate ltreedepth to avoid out-of-bounds access The ltreedepth field is 16-bit le16, but the actual maximum depth is limited to OCFS2MAXPATHDEPTH. Add ...

CVE-2025-51056

An unrestricted file upload vulnerability in Vedo Suite version 2024.17 allows remote authenticated attackers to write to arbitrary filesystem paths by exploiting the insecure 'uploadPreviews' custom function in '/apivedo/colorwayspreview', ultimately resulting in remote code execution RCE...

CVE-2025-51057

A local file inclusion LFI vulnerability in Vedo Suite version 2024.17 allows remote authenticated attackers to read arbitrary filesystem files by exploiting an unsanitized 'readfile' function call in '/apivedo/video/preview'...

Linux Distros Unpatched Vulnerability : CVE-2022-50020

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ext4: avoid resizing to a partial cluster size This patch avoids an attempt to resize the...

CVE-2025-51052

A path traversal vulnerability exists in Vedo Suite version 2024.17 , allowing remote authenticated attackers to read arbitrary filesystem files. The root cause is an unsanitized file_get_contents() function call within the /api_vedo/template API endpoint. The issue has been patched in version 20...

CVE-2025-51056

The Vedo Suite version 2024.17 (by Bottinelli Informatica) contains an unrestricted file upload vulnerability. The root cause is a lack of effective validation within the insecure uploadPreviews() custom function located in the /api_vedo/colorways_preview endpoint. Remote authenticated attackers ...

Linux Distros Unpatched Vulnerability : CVE-2022-49831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: initialize device's zone info for seeding When performing seeding on a zoned...

CVE-2025-51052

A path traversal vulnerability in Vedo Suite 2024.17 allows remote authenticated attackers to read arbitrary filesystem files by exploiting an unsanitized 'filegetcontents' function call in '/apivedo/template'...

PT-2025-32216

Name of the Vulnerable Software and Affected Versions Vedo Suite version 2024.17 Description A path traversal issue exists in Vedo Suite 2024.17 that may allow remote authenticated attackers to read arbitrary filesystem files. The issue is due to an unsanitized file get contents function call...

CVE-2025-51057

The Vedo Suite version 2024.17 by Bottinelli Informatica contains a local file inclusion (LFI) vulnerability. The root cause is an unsanitized readfile() function call within the /api_vedo/video/preview API endpoint. This flaw allows remote authenticated attackers to read arbitrary filesystem fil...

Linux Distros Unpatched Vulnerability : CVE-2022-49834

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: fix use-after-free bug of nswriter on remount If a nilfs2 filesystem is downgraded to read-only due to metadata corruption on disk and is remounted...

Linux Distros Unpatched Vulnerability : CVE-2018-13096

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.14. A denial of service out-of- bounds memory access and BUG can occur upon encounterin...

USN-7685-2: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Device tree and open firmware driver; - SCSI subsystem; - TTY drivers; - Ext4 file system; - SMB network file syste...

PT-2025-44145

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the f2fs filesystem within the Linux kernel that could lead to an overflow during a left shift operation. The issue is addressed by casting the type of folio-index from...

Linux Distros Unpatched Vulnerability : CVE-2019-15538

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in xfssetattrnonsize in fs/xfs/xfsiops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on account of being...

Linux Distros Unpatched Vulnerability : CVE-2024-57256

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in ext4fsreadsymlink in Das U-Boot before 2025.01-rc1 occurs for zalloc adding one to an le32 variable via a crafted ext4 filesystem with an...

kernel: ext4: avoid resizing to a partial cluster size

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid resizing to a partial cluster size This patch avoids an attempt to resize the filesystem to an unaligned cluster boundary. An online resize to a size that is not integral to cluster size results in the last iteration...