Lucene search
+L

11 matches found

osv_azl
osv_azl
•added 2026/10/06 9:18 a.m.•19 views

AZL-106269 CVE-2026-98215 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: selinux: preserve user SID across nested backing files SELinux saves the user file SID in a backing-file security blob so it remains available after mmap replaces vma-vmfile with a backing file. For nested backing files overlayfs...

5.9AI score0.00209EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/10/06 8:44 a.m.•18 views

CVE-2026-98215

In the Linux kernel, the following vulnerability has been resolved: selinux: preserve user SID across nested backing files SELinux saves the user file SID in a backing-file security blob so it remains available after mmap replaces vma-vmfile with a backing file. For nested backing files overlayfs...

6.2AI score0.00209EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•13 views

PT-2026-106544

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in SELinux regarding the preservation of the user security identifier SID across nested backing files, such as FUSE passthrough backed by overlayfs or overlayfs over...

8.8CVSS5.9AI score0.0053EPSS
SaveExploits1References230
Tenable Nessus
Tenable Nessus
•added 2026/10/06 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-98215

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - selinux: preserve user SID across nested backing files SELinux saves the user file SID in a backing-file security blob so it remains available after mmap replac...

5.8AI score0.00209EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2026/09/11 8:20 p.m.•25 views

DEBIAN-CVE-2026-89768

In the Linux kernel, the following vulnerability has been resolved: fs: fix user path of nested backing files backingfileopen derives the path to be stored in the new backing file from userfile-fpath. This is incorrect when userfile itself is a backing file, which is the case for nested stacking...

6.2AI score0.00191EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/09/11 7:47 p.m.•27 views

CVE-2026-89768

In the Linux kernel, the following vulnerability has been resolved: fs: fix user path of nested backing files backingfileopen derives the path to be stored in the new backing file from userfile-fpath. This is incorrect when userfile itself is a backing file, which is the case for nested stacking...

6.2AI score0.00191EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•10 views

PT-2026-96455

In the Linux kernel, the following vulnerability has been resolved: fs: fix user path of nested backing files backing file open derives the path to be stored in the new backing file from user file-f path. This is incorrect when user file itself is a backing file, which is the case for nested...

6AI score0.00191EPSS
SaveExploits0References2
osv_pysec
osv_pysec
•added 2026/07/06 8:03 a.m.•28 views

PYSEC-2026-874 OpenStack Nova DoS through ephemeral disk backing files

The libvirt driver in OpenStack Compute Nova before 2013.2.2 and icehouse before icehouse-2 allows remote authenticated users to cause a denial of service disk consumption by creating and deleting instances with unique ostype settings, which triggers the creation of a new ephemeral disk backing...

4CVSS5.9AI score0.02037EPSS
SaveExploits0References10
PyPA
PyPA
•added 2026/07/06 8:03 a.m.•19 views

OpenStack Nova DoS through ephemeral disk backing files

The libvirt driver in OpenStack Compute Nova before 2013.2.2 and icehouse before icehouse-2 allows remote authenticated users to cause a denial of service disk consumption by creating and deleting instances with unique ostype settings, which triggers the creation of a new ephemeral disk backing...

4CVSS5.9AI score0.02037EPSS
SaveExploits0References10Affected Software1
RedHat Linux
RedHat Linux
•added 2024/07/02 4:45 p.m.•22 views

OpenStack: malicious qcow2/vmdk images

An input validation flaw was discovered in how multiple OpenStack services validate images with backing file references. An authenticated attacker could provide a malicious image via upload, or by creating and modifying an image from an existing volume. Validation of images can be triggered durin...

6.5CVSS6AI score0.00835EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2014/03/04 7:00 p.m.•23 views

nova: Live migration can leak root disk into ephemeral storage

The icreateimagesandbacking aka createimagesandbacking method in libvirt driver in OpenStack Compute Nova Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expected files, which allows attackers to obtain snapshot root disk contents of other users vi...

7.1CVSS5.4AI score0.02438EPSS
SaveExploits0References4
Rows per page
Query Builder