PT-2023-34860 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.165 Description: The issue is related to the f2fs component, where a panic can be avoided if the extent tree is not created. The actual impact and attack plausibility have not yet been proven...

PT-2022-35140 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns a fix for a sanity check on summary information in the f2fs component. The actual impact and potential for attack have not been proven yet. Recommendations: For versions...

CLSA-2022-1667414297 Fix CVE(s): CVE-2021-44879

CVE-2021-44879 - ELSCVE-3342 f2fs: fix to do sanity check on inode type during garbage collection...

PT-2022-34350 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.256 Description: The issue is related to the use of f2fs bug on in f2fs new node page. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior t...

PT-2025-8251

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an infinite loop in the f2fs file system, which can occur when flushing node pages. This loop can be triggered by xfstests/generic/475, resulting in an EIO error...

AZL-7073 CVE-2021-45469 affecting package kernel for versions less than 5.15.18.1-1

In f2fssetxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of-bounds memory access when an inode has an invalid last xattr entry...

The vulnerability of the F2fs-Tools tool, related to reading beyond the memory boundaries, allows a intruder to access confidential information.

The vulnerability of the F2fs-Tools tool is related to reading data beyond the memory boundaries. Exploiting this vulnerability can allow an attacker to access confidential information by causing a read error beyond the allowed range, thereby creating a specially crafted file system for F2fs...

PT-2024-11090 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.12.0-rc1-custom 1 Description: The issue is caused by a race condition between truncate and overwrite operations in the f2fs compress functionality. This can lead to a situation where a page is detached from t...

CVE-2020-15858

Some devices of Thales DIS formerly Gemalto, formerly Cinterion allow Directory Traversal by physically proximate attackers. The directory path access check of the internal flash file system can be circumvented. This flash file system can store application-specific data and data needed for custom...

CVE-2020-15858

Some devices of Thales DIS formerly Gemalto, formerly Cinterion allow Directory Traversal by physically proximate attackers. The directory path access check of the internal flash file system can be circumvented. This flash file system can store application-specific data and data needed for custom...

Directory traversal

Some devices of Thales DIS formerly Gemalto, formerly Cinterion allow Directory Traversal by physically proximate attackers. The directory path access check of the internal flash file system can be circumvented. This flash file system can store application-specific data and data needed for custom...

CVE-2020-15858

Some devices of Thales DIS formerly Gemalto, formerly Cinterion allow Directory Traversal by physically proximate attackers. The directory path access check of the internal flash file system can be circumvented. This flash file system can store application-specific data and data needed for custom...

CVE-2020-15858

CVE-2020-15858 describes a Directory Traversal flaw in Thales DIS (Cinterion) modules where the directory path access check of the internal flash file system can be bypassed. This enables proximate attackers to access sensitive data stored in the UFS, including application data and data used by J...

The vulnerability in the `fs/f2fs/inline.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fs/f2fs/inline.c component in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

Google Android f2fs component buffer overflow vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA. f2fs is a flash file system component of Android. A buffer overflow vulnerability exists in the f2fs component of Android, which can be exploited by an attacker to obtain information...

The Sleuth Kit (TSK) Stack Buffer Overflow Vulnerability

The Sleuth Kit TSK is a set of command line tools and a C library that lets you analyze disk images and recover files from them. A stack buffer overflow vulnerability exists in the YAFFS file timestamp parsing logic of yaffsfsistat in fs/yaffs.c in The Sleuth Kit TSK 4.8.0 and earlier. No detaile...

Barco ClickShare Button R9861500D01 Input Validation Error Vulnerability

The Barco ClickShare Button R9861500D01 is a wireless control device for presentation systems from Barco Belgium. A security vulnerability exists in Barco ClickShare Button R9861500D01 prior to version 1.9.0, which originates from the program failing to perform an integrity check on variable...

UBUNTU-CVE-2019-19814

In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause removedirtysegment slab-out-of-bounds write access because an array is bounded by the number of dirty types 8 but the array index can exceed this...

UBUNTU-CVE-2019-9445

In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation...

USN-3932-1 linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities

It was discovered that a race condition existed in the f2fs file system implementation in the Linux kernel. A local attacker could use this to cause a denial of service. CVE-2017-18249 Wen Xu discovered that the f2fs file system implementation in the Linux kernel did not properly validate metadat...