The vulnerabilities of the functions ext4_register_sysfs() and ext4_unregister_sysfs() in the fs/ext4/sysfs.c module of the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions ext4registersysfs and ext4unregistersysfs in the fs/ext4/sysfs.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

ROS-20260821-73-0059

The vulnerability of the ext4getgroupinfo function in the fs/ext4/ext4.h file of the Ext4 file system in the Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20260821-73-0022

The vulnerability of the dxprobe function in the fs/ext4/namei.c module of the Ext4 file system in the Linux operating system is related to the lack of code to verify the return value of this function. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260630-73-0029

The vulnerability of the ext4dawriteend function in the fs/ext4/inode.c module of the Ext4 file system in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...

Linux Distros Unpatched Vulnerability : CVE-2026-45892

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: drop extent cache after doing PARTIALVALID1 zeroout When splitting an unwritten extent in the middle and converting it to initialized in ext4splitextent...

Linux Distros Unpatched Vulnerability : CVE-2026-43066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: fix iloc.bh leak in ext4fcreplayinode error paths During code review, Joseph found that ext4fcreplayinode calls ext4getfcinodeloc to get the inode locatio...

Linux Distros Unpatched Vulnerability : CVE-2026-31449

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: validate pidx bounds in ext4extcorrectindexes ext4extcorrectindexes walks up the extent tree correcting index entries when the first extent in a leaf is...

The vulnerability of the ext4_alloc_inode() function in the fs/ext4/super.c module of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext4allocinode function in the fs/ext4/super.c module of the Ext4 file system in the Linux operating system is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Vulnerability of the functions ext4_writepage() and mpage_prepare_extent_to_map() in the fs/ext4/inode.c file of the Ext4 file system in the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the functions ext4writepage and mpageprepareextenttomap in the fs/ext4/inode.c module of the Ext4 file system in the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause service...

CVE-2022-50782

CVE-2022-50782 is tied to an ext4 quota bug where a bad quota inode can bypass ext4 inode checks and trigger a BUG_ON in __es_tree_search. The issue chain involves ext4_fill_super -> ext4_enable_quotas -> ext4_iget -> ext4_ext_check_inode and can be exploited when s_usr_quota_inum equals...

Linux Distros Unpatched Vulnerability : CVE-2023-54153

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: turn quotas off if mount failed after enabling quotas Yi found during a review of the patch ext4: don't BUG on inconsistent journal feature that when...

Linux Distros Unpatched Vulnerability : CVE-2025-40361

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs: ext4: change GFPKERNEL to GFPNOFS to avoid deadlock The parent function ext4xattrinodelookupcreate already uses GFPNOFS for memory alloction, so the functio...

Linux Distros Unpatched Vulnerability : CVE-2025-68264

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: refresh inline data size before write operations The cached ei-iinlinesize can become stale between the initial size check and when...

Siemens SIMATIC S7-1500 Improper Resource Locking (CVE-2024-26772)

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocating blocks from corrupted group in ext4mbfindbygoal Places the logic for checking if the group's block bitmap is corrupt under the protection of the group lock to avoid allocating blocks from the group with a...

Siemens SIMATIC S7-1500 NULL Pointer Dereference (CVE-2024-49881)

In the Linux kernel, the following vulnerability has been resolved: ext4: update origpath in ext4findextent. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if descripti...

Linux Distros Unpatched Vulnerability : CVE-2025-40198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: avoid potential buffer over-read in parseapplysbmountoptions Unlike other strings in the ext4 superblock, we rely on tune2fs to make sure smountopts is NU...

Linux Distros Unpatched Vulnerability : CVE-2022-50512

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: fix potential memory leak in ext4fcrecordregions As krealloc may return NULL, in this case 'state-fcregions' may not be freed by krealloc, but...

EUVD-2022-54879

Malicious code in bioql PyPI...

CVE-2022-50436

CVE-2022-50436 : Linux kernel ext4 had a deadlock risk when ext4_unlink() extended the jbd2 transaction scope, because ext4_find_entry() could require setting up the directory encryption key inside a transaction. The fix restores the transaction to its original scope, preventing the deadlock. The...

Linux Distros Unpatched Vulnerability : CVE-2023-53285

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: add bounds checking in getmaxinlinexattrvaluesize Normally the extended attributes in the inode body would have been checked when the inode is first opene...