4261 matches found
CVE-2025-38701
CVE-2025-38701 relates to ext4 in the Linux kernel where a syzbot-triggered BUG_ON could occur when INLINE_DATA_FL is set but the system.data xattr is missing. The fix replaces BUG_ON with EXT4_ERROR_INODE() in ext4_create_inline_data() and ext4_inline_data_truncate(), and documents reporting a c...
f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
...
f2fs: fix to avoid panic in f2fs_evict_inode
...
ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
...
f2fs: fix to truncate meta inode pages forcely
...
jfs: reject on-disk inodes of an unsupported type
...
fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass
...
fs/ntfs3: cancle set bad inode after removing name fails
...
fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
...
An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.
...
Squashfs: check the inode number is not the invalid value of zero
...
btrfs: don't drop extent_map for free space inode on write error
...
fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()
...
btrfs: lock the inode in shared mode before starting fiemap
...
An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.
...
f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic
...
f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
...
btrfs: don't readahead the relocation inode on RST
...
Linux Distros Unpatched Vulnerability : CVE-2025-38677
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: fix to avoid out-of-boundary access in dnode page As Jiaming Zhang reported: dumpstack lib/dumpstack.c:94 inline dumpstacklvl+0x1c1/0x2a0...
kernel: ext4: only dirty folios when data journaling regular files
In the Linux kernel, the following vulnerability has been resolved: ext4: only dirty folios when data journaling regular files fstest generic/388 occasionally reproduces a crash that looks as follows: BUG: kernel NULL pointer dereference, address: 0000000000000000 ... Call Trace:...