CVE-2025-40080

In the Linux kernel, the following vulnerability has been resolved: nbd: restrict sockets to TCP and UDP Recently, syzbot started to abuse NBD with all kinds of sockets. Commit cf1b2326b734 "nbd: verify socket is supported during setup" made sure the socket supported a shutdown method. Explicitel...

UBUNTU-CVE-2025-40080

In the Linux kernel, the following vulnerability has been resolved: nbd: restrict sockets to TCP and UDP Recently, syzbot started to abuse NBD with all kinds of sockets. Commit cf1b2326b734 "nbd: verify socket is supported during setup" made sure the socket supported a shutdown method. Explicitel...

CVE-2025-40080 nbd: restrict sockets to TCP and UDP

In the Linux kernel, the following vulnerability has been resolved: nbd: restrict sockets to TCP and UDP Recently, syzbot started to abuse NBD with all kinds of sockets. Commit cf1b2326b734 "nbd: verify socket is supported during setup" made sure the socket supported a shutdown method. Explicitel...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unrestricted use of NBD to only use TCP and UNIX stream sockets, which could lead to abusive attacks...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987572)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987572 advisory. In the Linux kernel, the following vulnerability has been resolved: nbd: call genlunregisterfamily first in nbdcleanup Otherwise there may be race between module...

EUVD-2022-55078

In the Linux kernel, the following vulnerability has been resolved: block: Fix the maximum minor value is blkallocextminor idaallocrange..., min, max, ... returns values from min to max, inclusive. So, NREXTDEVT is a valid idx returned by blkallocextminor. This is an issue because in deviceadddis...

Linux Distros Unpatched Vulnerability : CVE-2023-53513

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nbd: fix incomplete validation of ioctl arg We tested and found an alarm caused by nbdioctl arg without verification. The UBSAN warning calltrace like below:...

Linux Distros Unpatched Vulnerability : CVE-2022-50506

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drbd: only clone bio if we have a backing device Commit c347a787e34cb drbd: set -bibdev in...

EUVD-2020-18307

Malware in sbrugna...

EUVD-2020-17972

Malware in sbrugna...

EUVD-2017-16552

Malware in sbrugna...

EUVD-2015-5170

Malware in sbrugna...

EUVD-2011-1923

Malware in sbrugna...

EUVD-2017-6580

Malware in sbrugna...

EUVD-2013-7205

Malware in sbrugna...

EUVD-2020-3177

Malware in sbrugna...

EUVD-2013-4193

Malware in sbrugna...

EUVD-2017-3718

Malware in sbrugna...

CVE-2023-53576

In the Linux kernel, the following vulnerability has been resolved: nullblk: Always check queue mode setting from configfs Make sure to check device queue mode in the nullvalidateconf and return error for NULLQRQ as we don't allow legacy I/O path, without this patch we get OOPs when queue mode is...

CVE-2022-50506 drbd: only clone bio if we have a backing device

In the Linux kernel, the following vulnerability has been resolved: drbd: only clone bio if we have a backing device Commit c347a787e34cb drbd: set -bibdev in drbdreqnew moved a biosetdev call which has since been removed to "earlier", from drbdrequestprepare to drbdreqnew. The problem is that th...