paulchungmd.com Cross Site Scripting vulnerability OBB-3650870

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

OracleVM 3.4 : kernel-uek (OVMSA-2023-0017)

The remote OracleVM system is missing necessary patches to address security updates: - A use-after-free flaw was found in the Linux kernel's Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages. This flaw allows a local user ...

PT-2025-37652

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference issue was identified in the r5l flush stripe to raid function within the md/raid5-cache module of the Linux kernel. The issue occurs because the flushing ios...

PT-2025-43123

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s md/raid1 subsystem where an out-of-bounds write can occur in the raid1 remove disk function if rddev-raid disk is greater than mddev-raid disks. This...

CVE-2020-19952

Cross Site Scripting XSS vulnerability in Rendering Engine in jbt Markdown Editor thru commit 2252418c27dffbb35147acd8ed324822b8919477, allows remote attackers to execute arbirary code via crafted payload or opening malicious .md file...

PT-2023-36788

Уязвимость функции bch btree node alloc модуля drivers/md/bcache/btree.c драйвера нескольких устройств RAID и LVM ядра операционной системы Linux связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2025-38207

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained a flaw in the md/raid10 subsystem within the md bitmap get counter function. A missing check for out-of-bounds access in the md bitmap get counter function,...

PT-2023-36695

Уязвимость функции max corrected read errors store модуля drivers/md/md.c драйвера нескольких устройств RAID и LVM ядра операционной системы Linux связана с копированием буфера без проверки размера входных данных классическое переполнение буфера. Эксплуатация уязвимости может позволить нарушителю...

PT-2025-38031

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s md/raid10 component where an incorrect setting of max corr read errors could occur due to a missing input check when echoing to md/max read errors,...

PT-2025-38359

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the md/raid10 subsystem, specifically in the raid10 sync request function. A null-pointer dereference of mreplace can occur if a faulty state is s...

PT-2023-36656

Уязвимость функции raid10 sync request модуля drivers/md/raid10.c драйвера нескольких устройств RAID и LVM ядра операционной системы Linux связана с ошибками отображения информации о состоянии ресурса в результате несогласованности проверок. Эксплуатация уязвимости может позволить нарушителю...

kernel: md: fix a crash in mempool_free

In the Linux kernel, the following vulnerability has been resolved: md: fix a crash in mempoolfree There's a crash in mempoolfree when running the lvm test shell/lvchange-rebuild-raid.sh. The reason for the crash is this: superwritten calls atomicdecandtest&mddev-pendingwrites and...

m.summitmd.com Cross Site Scripting vulnerability OBB-3328460

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

kernel: drivers:md:fix a potential use-after-free bug

A use-after-free bug exists in the linux kernel such that in the line "raid5releasestripesh;" drops the reference to sh and may cause sh to be released. However, sh is subsequently used in lines "if sh-batchhead && sh != sh-batchhead" resulting in a minor application crash...

kernel: md-raid10: fix KASAN warning

In the Linux kernel, the following vulnerability has been resolved: md-raid10: fix KASAN warning There's a KASAN warning in raid10removedisk when running the lvm test lvconvert-raid-reshape.sh. We fix this warning by verifying that the value "number" is valid. BUG: KASAN: slab-out-of-bounds in...

kernel: drivers/md/md-bitmap: check the return value of md_bitmap_get_counter()

In the Linux kernel, the following vulnerability has been resolved: drivers/md/md-bitmap: check the return value of mdbitmapgetcounter Check the return value of mdbitmapgetcounter in case it returns NULL pointer, which will result in a null pointer dereference. v2: update the check to include oth...

kernel: md: fix a crash in mempool_free

In the Linux kernel, the following vulnerability has been resolved: md: fix a crash in mempoolfree There's a crash in mempoolfree when running the lvm test shell/lvchange-rebuild-raid.sh. The reason for the crash is this: superwritten calls atomicdecandtest&mddev-pendingwrites and...

PT-2025-38329

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc3 Description A crash in the mempool free function within the Linux kernel's md Multiple Devices subsystem was resolved. The crash occurred during the execution of the lvm test...

PT-2025-37524

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s md/raid10 subsystem that can lead to a soft lockup during write flushing. This occurs due to an unlimited number of plugged bio operations in raid10,...

samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided

A flaw was found in samba. The Netlogon RPC implementations may use the rc4-hmac encryption algorithm, which is considered weak and should be avoided even if the client supports more modern encryption types. This issue could allow an attacker who knows the plain text content communicated between...