LEAF

Linux 证据获取框架 LEAF 作者：Alexandra Cartwright 2022年4月 描述 Linux 证据获取框架 LEAF 可从 Linux EXT4 系统中获取工件和证据，接受用户输入以自定义工具功能，从而实现更轻松的扩展。通过提供多个模块和参数作为输入，LEAF 能够使用智能分析提取 Linux 工件，并将结果输出为 ISO 镜像文件。 用法 root@kitploit: LEAFmaster.py -h -i INPUT INPUT ... -o OUTPUT -u USERS USERS ... -c CATEGORIES CATEGORIES ... -v -...

AZL-101652 CVE-2026-89778 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array access on empty zisofs block zisofsuncompressblock's empty-block fast path returns pcount 17, so a crafted "ZF" Rock Ridge record can set it below PAGESHIFT; the bug is reached by an ordinary...

CVE-2026-89778

In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array access on empty zisofs block zisofsuncompressblock's empty-block fast path returns pcount 17, so a crafted "ZF" Rock Ridge record can set it below PAGESHIFT; the bug is reached by an ordinary...

DEBIAN-CVE-2026-89778

In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array access on empty zisofs block zisofsuncompressblock's empty-block fast path returns pcount 17, so a crafted "ZF" Rock Ridge record can set it below PAGESHIFT; the bug is reached by an ordinary...

CVE-2026-89778

In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array access on empty zisofs block zisofsuncompressblock's empty-block fast path returns pcount 17, so a crafted "ZF" Rock Ridge record can set it below PAGESHIFT; the bug is reached by an ordinary...

UBUNTU-CVE-2026-89778

In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array access on empty zisofs block zisofsuncompressblock's empty-block fast path returns pcount 17, so a crafted "ZF" Rock Ridge record can set it below PAGESHIFT; the bug is reached by an ordinary...

CVE-2026-89778 isofs: fix out-of-bounds page array access on empty zisofs block

In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array access on empty zisofs block zisofsuncompressblock's empty-block fast path returns pcount 17, so a crafted "ZF" Rock Ridge record can set it below PAGESHIFT; the bug is reached by an ordinary...

CVE-2026-89778

CVE-2026-89778 is an out-of-bounds page array access in the Linux kernel's zisofs (compressed ISO9660) filesystem. The root cause is in zisofs_uncompress_block()'s empty-block fast path, which returns pcount <

CVE-2026-89778 isofs: fix out-of-bounds page array access on empty zisofs block

In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array access on empty zisofs block zisofsuncompressblock's empty-block fast path returns pcount 17, so a crafted "ZF" Rock Ridge record can set it below PAGESHIFT; the bug is reached by an ordinary...

EUVD-2026-80299

In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array access on empty zisofs block zisofsuncompressblock's empty-block fast path returns pcount 17, so a crafted "ZF" Rock Ridge record can set it below PAGESHIFT; the bug is reached by an ordinary...

CVE-2026-89778: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array access on empty zisofs block zisofsuncompressblock's empty-block fast path returns pcount 17, so a crafted "ZF" Rock Ridge record can set it below PAGESHIFT; the bug is reached by an ordinary...

The vulnerability of the ISO9660 driver of the libfsimage library in Xen hypervisors allows attackers to increase their privileges.

The vulnerability of the ISO9660 driver of the libfsimage library in Xen relates to reading data outside of the allowed range in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the ISO9660 driver of the libfsimage library in Xen allows attackers to increase their privileges.

The vulnerability of the ISO9660 driver of the libfsimage library in Xen relates to numerical overflow. Exploiting this vulnerability can allow attackers to enhance their privileges...

SUSE SLES12: xen / xen-devel / xen-doc-html / xen-libs / xen-libs-32bit / etc (SUSE-SU-2026:3451-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3451-1 advisory. This update for xen fixes the following issues - CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. -...

Fedora 44 : xen (2026-bf1da84dfc)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-bf1da84dfc advisory. update to xen 4.21.2 includes security fixes x86 shadow paging is deprecated XSA-495, CVE-2026-42493 vIRQ event channel binding may break Xenstore...

SUSE SLES15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2026:3423-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3423-1 advisory. This update for xen fixes the following issues - CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. -...

SUSE SLES15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2026:3409-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3409-1 advisory. This update for xen fixes the following issues - CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. -...

SUSE CVE-2026-42494

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

CVE-2026-64317

A flaw was found in the Linux kernel's ISO 9660 file system isofs component. A local attacker could exploit this vulnerability by providing a specially crafted ISO 9660 image containing a malformed Rock Ridge symbolic link record. This flaw allows for an out-of-bounds read, leading to the...

Linux Distros Unpatched Vulnerability : CVE-2026-62423

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SU...