PT-2022-30305

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A potential issue exists due to a deadlock in concurrent rename whiteout and inode writeback in the ubifs component. The actual impact and attack plausibility have not yet been proven...

PT-2022-30689

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description A double free issue was discovered in the rename whiteout function of the ubifs component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2022-30306

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue is related to a read out-of-bounds in the ubifs wbuf write nolock function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30601

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue is related to a read out-of-bounds in the ubifs wbuf write nolock function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30481

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description The issue is related to a read out-of-bounds in the ubifs wbuf write nolock function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30603

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description A potential issue exists due to a deadlock in concurrent rename whiteout and inode writeback in the ubifs component. The actual impact and attack plausibility have not yet been proven...

PT-2022-30033

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to the ubifs component. It was introduced in version v2.6.27 and fixed in version v5.15.33. The actual impact and attack plausibility have not yet been proven...

PT-2022-30034

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to a read out-of-bounds in the ubifs wbuf write nolock function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30482

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description A potential issue exists due to a deadlock in concurrent rename whiteout and inode writeback in the ubifs component. The actual impact and attack plausibility have not yet been proven...

PT-2022-29393

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A double free issue was discovered in the rename whiteout function of the ubifs component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-29392

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.9 through v5.17.1 Description A potential issue exists due to a deadlock in concurrent rename whiteout and inode writeback in the ubifs component. The actual impact and attack plausibility have not yet been proven...

PT-2022-29387

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to the ubifs component, where a fix was added to properly handle refcount once a page is set private. The actual impact and attack plausibility of this issue have not yet...

PT-2022-30035

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to a race condition in the ubifs component, specifically between the do tmpfile function and writeback work. This race condition affects the ui-dirty variable. The actual...

PT-2022-29711

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to the ubifs component. It was introduced in version v2.6.27 and fixed in version v5.16.19. The actual impact and attack plausibility have not yet been proven...

Mageia: Security Advisory (MGASA-2021-0418)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-7946

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.0-rc5 Description A bug in the Linux kernel's UBIFS Unsorted Block Image File System has been identified, which can cause a page migration issue. The problem arises when the PG private flag is set on a page...

PT-2022-38078

Уязвимость функции ubifs write end модуля fs/ubifs/file.c поддержки файловой системы ядра операционной системы Linux связана с ошибками при обновлении счетчика ссылок. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

Hands-On IoT Hacking: Rapid7 at DefCon 29 IoT Village, Part 4

The first 3 installments of our series on Rapid7's hands-on exercise from the IoT Village at this year's DefCon covered how to set up a UART header, how to determine UART status and baud rate, and how to log into single-user mode on the device. In this final post, we'll discuss how to gain full...

Hands-On IoT Hacking: Rapid7 at DefCon IoT Village, Part 1

This year, Rapid7 participated at the IoT Village during DefCon29 by running a hands-on hardware hacking exercise, with the goal of exposing attendees to concepts and methods for IoT hacking. Over the years, these exercises have covered several different embedded device topics, including how to u...

GSD-2021-1001359 ubifs: Fix races between xattr_{set|get} and listxattr operations

ubifs: Fix races between xattrset|get and listxattr operations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.133 by commit...