709 matches found
CVE-2023-52582 netfs: Only call folio_start_fscache() one time for each folio
In the Linux kernel, the following vulnerability has been resolved: netfs: Only call foliostartfscache one time for each folio If a network filesystem using netfs implements a clamplength function, it can set subrequest lengths smaller than a page size. When we loop through the folios in...
CVE-2023-52582
CVE-2023-52582 affects the Linux kernel netfs path. The issue is in netfs_rreq_unlock_folios() where folio_start_fscache() could be invoked more than once per folio when a clamp_length() is used, potentially triggering an oops as described in the public advisory. The connected advisories confirm ...
CVE-2023-52582
In the Linux kernel, the following vulnerability has been resolved: netfs: Only call foliostartfscache one time for each folio If a network filesystem using netfs implements a clamplength function, it can set subrequest lengths smaller than a page size. When we loop through the folios in...
CVE-2023-52582: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: netfs: Only call foliostartfscache one time for each folio If a network filesystem using netfs implements a clamplength function, it can set subrequest lengths smaller than a page size. When we loop through the folios in...
CVE-2024-26612 netfs, fscache: Prevent Oops in fscache_put_cache()
In the Linux kernel, the following vulnerability has been resolved: netfs, fscache: Prevent Oops in fscacheputcache This function dereferences "cache" and then checks if it's ISERRORNULL. Check first, then dereference...
CVE-2024-26612 netfs, fscache: Prevent Oops in fscache_put_cache()
In the Linux kernel, the following vulnerability has been resolved: netfs, fscache: Prevent Oops in fscacheputcache This function dereferences "cache" and then checks if it's ISERRORNULL. Check first, then dereference...
CVE-2024-26612
The Linux kernel contains a vulnerability in the netfs and fscache components within the fscache_put_cache() function. The root cause is that the function dereferences the "cache" object before checking if it is IS_ERR_OR_NULL() . The fix involves performing the null/error check before dereferenc...
CVE-2024-26612
In the Linux kernel, the following vulnerability has been resolved: netfs, fscache: Prevent Oops in fscacheputcache This function dereferences "cache" and then checks if it's ISERRORNULL. Check first, then dereference...
CVE-2024-26612: NULL Pointer Dereference
In the Linux kernel, the following vulnerability has been resolved: netfs, fscache: Prevent Oops in fscacheputcache This function dereferences "cache" and then checks if it's ISERRORNULL. Check first, then dereference...
PT-2024-3385
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the function fscache put cache in the Linux kernel's netfs module, which dereferences a "cache" variable before checking if it's IS ERR OR NULL. This can lead t...
PT-2023-8752
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.4.0-rc5 Description The issue is related to the netfs module in the Linux kernel, where the function netfs rreq unlock folios can cause an oops when a network filesystem using netfs implements a clamp length...
GSD-2022-1007732 netfs: Fix missing xas_retry() calls in xarray iteration
netfs: Fix missing xasretry calls in xarray iteration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...
PT-2022-35987 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue is related to missing xas retry calls in xarray iteration in the netfs component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...
GSD-2022-1004310 netfs: gcc-12: temporarily disable '-Wattribute-warning' for now
netfs: gcc-12: temporarily disable '-Wattribute-warning' for now This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.6 by commit...
GSD-2022-1004288 netfs: Fix gcc-12 warning by embedding vfs inode in netfs_i_context
netfs: Fix gcc-12 warning by embedding vfs inode in netfsicontext This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.6 by commit...
PT-2022-32572
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.6 Description The issue is related to the netfs component in the Linux Kernel, where the gcc-12 compiler temporarily disables the '-Wattribute-warning' option. The actual impact and potential for attacks ha...
GSD-2021-1002721 netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock
netfs: Fix lockdep warning from taking sbwriters whilst holding mmaplock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.10 by commit...
PT-2019-20196
Name of the Vulnerable Software and Affected Versions util-linux affected versions not specified shadow affected versions not specified Description The issue involves problems with PATH settings in /etc/default/su being ignored, outdated pam files, and incorrect behavior with pseudofs and netfs...
PT-2019-20099
Name of the Vulnerable Software and Affected Versions util-linux affected versions not specified shadow affected versions not specified Description The issue involves multiple problems with util-linux and shadow, including ignored PATH settings in /etc/default/su, outdated pam files, and incorrec...
