15 matches found
DEBIAN-CVE-2026-89713
In the Linux kernel, the following vulnerability has been resolved: NFSD: check truncate permission under inode lock nfsdsetattr checks whether a size update needs NFSDMAYTRUNC before it takes inodelock. The comparison uses the file size sampled by that unlocked read, but the actual ATTRSIZE upda...
CVE-2026-89713
In the Linux kernel, the following vulnerability has been resolved: NFSD: check truncate permission under inode lock nfsdsetattr checks whether a size update needs NFSDMAYTRUNC before it takes inodelock. The comparison uses the file size sampled by that unlocked read, but the actual ATTRSIZE upda...
CVE-2026-89713 NFSD: check truncate permission under inode lock
In the Linux kernel, the following vulnerability has been resolved: NFSD: check truncate permission under inode lock nfsdsetattr checks whether a size update needs NFSDMAYTRUNC before it takes inodelock. The comparison uses the file size sampled by that unlocked read, but the actual ATTRSIZE upda...
CVE-2026-89713
A TOCTOU race condition in the Linux kernel's NFS Daemon (NFSD) component allows a remote, unauthenticated attacker to bypass append-only file protections. In nfsd_setattr(), the NFSD_MAY_TRUNC permission check samples the file size without holding inode_lock(), but the actual size update is appl...
CVE-2026-89713 NFSD: check truncate permission under inode lock
In the Linux kernel, the following vulnerability has been resolved: NFSD: check truncate permission under inode lock nfsdsetattr checks whether a size update needs NFSDMAYTRUNC before it takes inodelock. The comparison uses the file size sampled by that unlocked read, but the actual ATTRSIZE upda...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from NFSD checking the truncation permissions based on the size of unlocked files before acquiring the inode lock. The actual truncation operation is performed by notifychange after the lock is obtained. There is a TOCTOU ra...
CVE-1999-0323
FreeBSD mmap function allows users to modify append-only or immutable files...
EUVD-1999-0323
Malware in sbrugna...
CVE-2010-2537
The btrfsioctlclone function in fs/btrfs/ioctl.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a 1 BTRFSIOCCLONE or 2 BTRFSIOCCLONERANGE ioctl call that specifies this file as a donor...
kernel: ext4: Make sure the MOVE_EXT ioctl can't overwrite append-only files
The mextcheckarguments function in fs/ext4/moveextent.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a MOVEEXT ioctl call that specifies this file as a donor...
CVE-1999-0323
FreeBSD mmap function allows users to modify append-only or immutable files...
CVE-1999-0323
CVE-1999-0323 affects FreeBSD: the mmap function allows users to modify append-only or immutable files. The connected documents reiterate this description but do not provide additional technical details, affected versions, root cause specifics, exploit information, or remediation guidance. Practi...
CVE-1999-0323: Undefined Security Weakness
FreeBSD mmap function allows users to modify append-only or immutable files...
FreeBSD-SA-98:04.mmap
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-98:04 Security Advisory FreeBSD, Inc. Topic: security compromise via mmap Category: core Module: kernel Announced: 1998-06-02 Affects: FreeBSD 2.2., FreeBSD-stable before...
