CVE-2022-49846

In the Linux kernel, the following vulnerability has been resolved: udf: Fix a slab-out-of-bounds write bug in udffindentry Syzbot reported a slab-out-of-bounds Write bug: loop0: detected capacity change from 0 to 2048 ================================================================== BUG: KASAN:...

CVE-2022-49846

CVE-2022-49846 : In the Linux kernel, a slab-out-of-bounds write bug was reported in udf_find_entry() (fs/udf/namei.c). The issue is demonstrated via a KASAN report during an open path through udf_lookup and namei, with a 256-byte kmalloc object involved. The advisory notes that this has been fix...

CVE-2022-49846 udf: Fix a slab-out-of-bounds write bug in udf_find_entry()

In the Linux kernel, the following vulnerability has been resolved: udf: Fix a slab-out-of-bounds write bug in udffindentry Syzbot reported a slab-out-of-bounds Write bug: loop0: detected capacity change from 0 to 2048 ================================================================== BUG: KASAN:...

CVE-2025-37738

In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs past end Once inside 'ext4xattrinodedecrefall' we should ignore xattrs entries past the 'end' entry. This fixes the following KASAN reported issue:...

CVE-2025-37782

...

CVE-2025-37782

CVE-2025-37782 affects the kernel package for versions earlier than 6.6.92.2-1. An upgraded kernel version (≥ 6.6.92.2-1) resolves the issue. No exploit details are provided in the connected documents. If using affected distributions, upgrade to the specified kernel version to mitigate.

CVE-2025-37782

Removed by vendor...

CVE-2025-37780

CVE-2025-37780 — Linux kernel isofs slab-out-of-bounds . The vulnerability occurs in isofs_fh_to_parent when a too-small fid is used: 12 bytes allocated for file_handle->f_handle while accessing parent_block requires at least 16 bytes, causing a potentially dangerous read. The issue was observ...

CVE-2025-37780 isofs: Prevent the use of too small fid

In the Linux kernel, the following vulnerability has been resolved: isofs: Prevent the use of too small fid syzbot reported a slab-out-of-bounds Read in isofsfhtoparent. 1 The handlebytes value passed in by the reproducing program is equal to 12. In handletopath, only 12 bytes of memory are...

CVE-2025-37779 lib/iov_iter: fix to increase non slab folio refcount

In the Linux kernel, the following vulnerability has been resolved: lib/ioviter: fix to increase non slab folio refcount When testing EROFS file-backed mount over v9fs on qemu, I encountered a folio UAF issue. The page sanity check reports the following call trace. The root cause is that pages in...

CVE-2025-37779 lib/iov_iter: fix to increase non slab folio refcount

In the Linux kernel, the following vulnerability has been resolved: lib/ioviter: fix to increase non slab folio refcount When testing EROFS file-backed mount over v9fs on qemu, I encountered a folio UAF issue. The page sanity check reports the following call trace. The root cause is that pages in...

CVE-2025-37779

In the Linux kernel, the following vulnerability has been resolved: lib/ioviter: fix to increase non slab folio refcount When testing EROFS file-backed mount over v9fs on qemu, I encountered a folio UAF issue. The page sanity check reports the following call trace. The root cause is that pages in...

CVE-2025-37774

In the Linux kernel, the following vulnerability has been resolved: slab: ensure slab-objexts is clear in a newly allocated slab page ktest recently reported crashes while running several buffered io tests with alloctaggingslaballochook at the top of the crash call stack. The signature indicates ...

CVE-2025-37774 slab: ensure slab->obj_exts is clear in a newly allocated slab page

In the Linux kernel, the following vulnerability has been resolved: slab: ensure slab-objexts is clear in a newly allocated slab page ktest recently reported crashes while running several buffered io tests with alloctaggingslaballochook at the top of the crash call stack. The signature indicates ...

CVE-2025-37774 slab: ensure slab->obj_exts is clear in a newly allocated slab page

In the Linux kernel, the following vulnerability has been resolved: slab: ensure slab-objexts is clear in a newly allocated slab page ktest recently reported crashes while running several buffered io tests with alloctaggingslaballochook at the top of the crash call stack. The signature indicates ...

CVE-2025-37738

CVE-2025-37738 details from Connected docs show a Linux kernel ext4 vulnerability: ext4_xattr_inode_dec_ref_all may read past the end while processing xattrs, leading to a slab-use-after-free as reported by KASAN. The fix makes ext4_xattr handling ignore xattrs entries beyond the end, preventing ...

CVE-2025-37738 ext4: ignore xattrs past end

In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs past end Once inside 'ext4xattrinodedecrefall' we should ignore xattrs entries past the 'end' entry. This fixes the following KASAN reported issue:...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from the uninitialization of slab-objexts in slab, which could lead to a null pointer dereference...

PT-2025-18563 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rc2 Description: A slab-out-of-bounds write bug was found in the udf find entry function. This issue was reported by Syzbot and is related to a capacity change from 0 to 2048. The bug is caused by a write ...

PT-2025-18463

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-out-of-bounds issue has been resolved in the Linux kernel's hfs subsystem. The issue was reported by Syzbot and occurred in the hfs bnode read key function. The problem was caused...