CVE-2025-68168

The CVE-2025-68168 issue affects the JFS transaction manager in the Linux kernel. TxInit() failed to initialize TxBlock[0].waitor/waitqueue, causing a crash when txEnd(0) is invoked on read-only filesystems, because tid_to_tblock(0) could dereference an uninitialized waitqueue. The vulnerability’...

Siemens SIMATIC Devices Improper Validation of Array Index (CVE-2024-43858)

In the Linux kernel, the following vulnerability has been resolved: jfs: Fix array-index-out-of-bounds in diFree This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

DEBIAN-CVE-2025-39735

In the Linux kernel, the following vulnerability has been resolved: jfs: fix slab-out-of-bounds read in eaget During the "sizecheck" label in eaget, the code checks if the extended attribute list xattr size matches easize. If not, it logs "eaget: invalid extended attribute" and calls printhexdump...