CVE-2023-53227

Mode C: Concrete details found. The CVE-2023-53227 entry relates to the Linux kernel UBIFS code path, where dirty_cow_znode can leak memory in the error handling path (memleak). The fix is to add the copied znode back to the tnc so it is freed by ubifs_destroy_tnc_subtree() when closing the TNC. ...

PT-2025-37668

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak was identified and resolved in the ubifs module within the Linux kernel. The issue occurs within the dirty cow znode function during error handling when copying a znode...

Linux Distros Unpatched Vulnerability : CVE-2021-47351

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ubifs: Fix races between xattrset|get and listxattr operations UBIFS may occur some problems with concurrent xattrset|get and listxattr operations, such as...

LSN-0113-1: Kernel Live Patch Security Notice

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in async decryption Doing an async decryption large read crashes with a slab-use-after-free way down in the crypto API. In the Linux kernel, the following vulnerability has been resolved: ubifs: authenticatio...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ubifs: Skip dumping the tnc tree when zroot is null. Clearing the slab cache will free all znode entries in memory, and set c-zroot.znode to NULL. Dumping the tnc tree will then access c-zroot.znode, which can lead to a null...

CLSA-2025-1748366748 kernel: Fix of 12 CVEs

ext4: fix OOB read when checking dotdot dir CVE-2025-37785 - iscsiibft: Fix UBSAN shift-out-of-bounds warning in ibftattrshownic CVE-2025-21993 - media: uvcvideo: Fix double free in error path CVE-2024-57980 - jffs2: Prevent rtime decompress memory corruption CVE-2024-57850 - wifi: iwlegacy:...

CLSA-2025-1748365686 kernel: Fix of 12 CVEs

ext4: fix OOB read when checking dotdot dir CVE-2025-37785 - iscsiibft: Fix UBSAN shift-out-of-bounds warning in ibftattrshownic CVE-2025-21993 - media: uvcvideo: Fix double free in error path CVE-2024-57980 - jffs2: Prevent rtime decompress memory corruption CVE-2024-57850 - wifi: iwlegacy:...

ROS-20250521-01

Vulnerability of drm/v3d components of Linux kernel is related to dereferencing of NULL pointer in the v3dirq and v3dhubirq functions in drivers/gpu/drm/v3d/v3dirq.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the video component of t...

ubifs: skip dumping tnc tree when zroot is null

...

OESA-2025-1319 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ubifs: skip dumping tnc tree when zroot is null Clearing slab cache will free all znode in memory and make c-zroot.znode = NULL, then dumping tnc tree will acces...

The vulnerability of the ubifs_dump_tnc() function in the file system of the UBIFS driver (fs/ubifs/debug.c) in Linux kernel allows a attacker to cause a service failure.

The vulnerability of the ubifsdumptnc function in the file system of the UBIFS driver fs/ubifs/debug.c in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-53171)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53171 advisory. - In the Linux kernel, the following vulnerability has been resolved: ubifs: authentication: Fix use-after- fr...

DEBIAN-CVE-2024-58058

In the Linux kernel, the following vulnerability has been resolved: ubifs: skip dumping tnc tree when zroot is null Clearing slab cache will free all znode in memory and make c-zroot.znode = NULL, then dumping tnc tree will access c-zroot.znode which cause null pointer dereference...

CVE-2024-58058

In the Linux kernel, the following vulnerability has been resolved: ubifs: skip dumping tnc tree when zroot is null Clearing slab cache will free all znode in memory and make c-zroot.znode = NULL, then dumping tnc tree will access c-zroot.znode which cause null pointer dereference...

AZL-59139 CVE-2024-58058 affecting package kernel for versions less than 5.15.180.1-1

In the Linux kernel, the following vulnerability has been resolved: ubifs: skip dumping tnc tree when zroot is null Clearing slab cache will free all znode in memory and make c-zroot.znode = NULL, then dumping tnc tree will access c-zroot.znode which cause null pointer dereference...

CVE-2024-58058 ubifs: skip dumping tnc tree when zroot is null

In the Linux kernel, the following vulnerability has been resolved: ubifs: skip dumping tnc tree when zroot is null Clearing slab cache will free all znode in memory and make c-zroot.znode = NULL, then dumping tnc tree will access c-zroot.znode which cause null pointer dereference...

CVE-2024-58058

CVE-2024-58058 affects the Linux kernel ubifs component. The root cause is a null pointer dereference when c->zroot.znode becomes NULL (after slab cache clearing), causing a crash during tnc tree dumping. The vulnerability is described as resolved, with references in multiple advisories indica...

CVE-2024-58058

In the Linux kernel, the following vulnerability has been resolved: ubifs: skip dumping tnc tree when zroot is null Clearing slab cache will free all znode in memory and make c-zroot.znode = NULL, then dumping tnc tree will access c-zroot.znode which cause null pointer dereference...

CVE-2024-58058 ubifs: skip dumping tnc tree when zroot is null

In the Linux kernel, the following vulnerability has been resolved: ubifs: skip dumping tnc tree when zroot is null Clearing slab cache will free all znode in memory and make c-zroot.znode = NULL, then dumping tnc tree will access c-zroot.znode which cause null pointer dereference...

Linux Distros Unpatched Vulnerability : CVE-2024-53171

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ubifs: authentication: Fix use-after- free in ubifstncendcommit After an insertion in TNC, t...