45 matches found
EUVD-2026-66451
In the Linux kernel, the following vulnerability has been resolved: xfs: bounds-check buffer log item's dirty bitmap xlogrecoverdoregbuffer replays each dirty region described by a buffer log item's bitmap into the buffer read for that item: memcpyxfsbufoffsetbp, uintbit ribufi.iovbase, nbits...
CVE-2026-80536
A flaw was found in the Linux kernel's XFS filesystem. A local attacker, by mounting a specially crafted XFS image, could trigger an out-of-bounds write during log recovery. This vulnerability allows for kernel heap corruption, which could lead to a denial of service or potentially arbitrary code...
CVE-2026-80536
In the Linux kernel, the following vulnerability has been resolved: xfs: bounds-check buffer log item's dirty bitmap xlogrecoverdoregbuffer replays each dirty region described by a buffer log item's bitmap into the buffer read for that item: memcpyxfsbufoffsetbp, uintbit ribufi.iovbase, nbits...
CVE-2026-80536
CVE-2026-80536 is an out-of-bounds write in the Linux kernel's XFS filesystem , specifically in xlog_recover_do_reg_buffer() during mount-time log recovery. The destination offset and buffer size are both attacker-controlled but only bounded by an ASSERT() that compiles away on production kernels...
CVE-2026-80536 xfs: bounds-check buffer log item's dirty bitmap
In the Linux kernel, the following vulnerability has been resolved: xfs: bounds-check buffer log item's dirty bitmap xlogrecoverdoregbuffer replays each dirty region described by a buffer log item's bitmap into the buffer read for that item: memcpyxfsbufoffsetbp, uintbit ribufi.iovbase, nbits...
CVE-2026-80529
CVE-2026-80529 affects the Linux kernel's XFS filesystem . In xlog_recover_dquot_commit_pass2() , a recovered dquot is validated via xfs_dqblk_verify() ; on failure the function sets error = -EFSCORRUPTED and jumps to out_release , which unconditionally returns 0. This discards the corruption err...
SUSE CVE-2026-64187
In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no regions If the first op of a transaction is a bare transaction header len == sizeofstruct xfstransheader, xlogrecoveraddtotrans adds an item but no region, leaving it on ritemq...
CVE-2026-64187
A flaw was found in the Linux kernel's XFS filesystem log recovery component. A local attacker could exploit this vulnerability by crafting a malicious XFS log. When the system attempts to recover from this log, it triggers a null-pointer dereference, which can lead to a system crash. This result...
CVE-2026-64187
In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no regions If the first op of a transaction is a bare transaction header len == sizeofstruct xfstransheader, xlogrecoveraddtotrans adds an item but no region, leaving it on ritemq...
CVE-2026-64187
Technical details for CVE-2026-64187 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2026-64187 xfs: fail recovery on a committed log item with no regions
In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no regions If the first op of a transaction is a bare transaction header len == sizeofstruct xfstransheader, xlogrecoveraddtotrans adds an item but no region, leaving it on ritemq...
CVE-2026-64187
In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no regions If the first op of a transaction is a bare transaction header len == sizeofstruct xfstransheader, xlogrecoveraddtotrans adds an item but no region, leaving it on ritemq...
EUVD-2026-46007
In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no regions If the first op of a transaction is a bare transaction header len == sizeofstruct xfstransheader, xlogrecoveraddtotrans adds an item but no region, leaving it on ritemq...
CVE-2026-64187 xfs: fail recovery on a committed log item with no regions
In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no regions If the first op of a transaction is a bare transaction header len == sizeofstruct xfstransheader, xlogrecoveraddtotrans adds an item but no region, leaving it on ritemq...
PT-2026-61640
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference exists in the XFS file system recovery parser. When processing a crafted log where the first operation of a transaction is a bare transaction header, the xlog...
Linux Distros Unpatched Vulnerability : CVE-2026-64187
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: fail recovery on a committed log item with no regions If the first op of a transaction is a bare transaction header len == sizeofstruct xfstransheader,...
CVE-2026-43365
In the Linux kernel, the following vulnerability has been resolved: xfs: fix undersized liclogroundoff values If the superblock doesn't list a log stripe unit, we set the incore log roundoff value to 512. This leads to corrupt logs and unmountable filesystems in generic/617 on a disk with 4k...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the presence of a crash window when the attribute dabtree is deactivated, which could result in an invalid...
CLSA-2025-1750168919 kernel: Fix of 6 CVEs
pfifotailenqueue: Drop new packet when sch-limit == 0 CVE-2025-21702 - xfs: add bounds checking to xlogrecoverprocessdata CVE-2024-41014 - netfilter: validate user input for expected length CVE-2024-35896 - nfs: fix UAF in direct writes CVE-2024-26958 - Squashfs: check the inode number is not the...
Important: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: tls: fix race between tx work scheduling and socket close Similarly to previous commit, the submitting thread recvmsg/sendmsg may exit as soon as the async crypto handler calls complete. Reorder scheduling the wor...