CVE-2022-50488

CVE-2022-50488 is a Linux kernel issue in the block BFQ (BFQ scheduler) where bfqq objects could end up pointing to the same bic after cgroup moves, enabling a use-after-free scenario for bfqq->bic. The described sequence shows two processes sharing BICs, merging bfqq entries, and after a casc...

RLSA-2025:9327 Important: libblockdev security update

The libblockdev packages provide a C library with GObject introspection support used for low-level operations on block devices. The library serves as a thin wrapper around plug-ins for specific functionality, such as LVM, Btrfs, LUKS, or MD RAID. Security Fixes: libblockdev: LPE from allowactive ...

EUVD-2023-59954

Malicious code in bioql PyPI...

EUVD-2023-59904

Malicious code in bioql PyPI...

EUVD-2022-55556

Malicious code in bioql PyPI...

EUVD-2022-55541

Malicious code in bioql PyPI...

EUVD-2024-51839

Malicious code in bioql PyPI...

EUVD-2025-6213

Malicious code in bioql PyPI...

EUVD-2025-31907

Malicious code in bioql PyPI...

EUVD-2023-58145

Malicious code in bioql PyPI...

EUVD-2022-53626

Malicious code in bioql PyPI...

EUVD-2025-25538

Malicious code in bioql PyPI...

RLSA-2025:9328 Important: libblockdev security update

The libblockdev packages provide a C library with GObject introspection support used for low-level operations on block devices. The library serves as a thin wrapper around plug-ins for specific functionality, such as LVM, Btrfs, LUKS, or MD RAID. Security Fixes: libblockdev: LPE from allowactive ...

A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM attacker could use this flaw to inject a plaintext NBD_OPT_STRUCTURED_REPLY before proxying everything else a client sends to the server, potentially leading the client to terminate the NBD session. The highest threat from this vulnerability is to system availability.

...

USN-7774-4: Linux kernel (KVM) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Serial ATA and Parallel ATA...

CVE-2023-53513

In the Linux kernel, the following vulnerability has been resolved: nbd: fix incomplete validation of ioctl arg We tested and found an alarm caused by nbdioctl arg without verification. The UBSAN warning calltrace like below: UBSAN: Undefined behaviour in fs/buffer.c:1709:35 signed integer...

UBUNTU-CVE-2023-53531

In the Linux kernel, the following vulnerability has been resolved: nullblk: fix poll request timeout handling When doing iouring benchmark on /dev/nullb0, it's easy to crash the kernel if poll requests timeout triggered, as reported by David. 1 BUG: kernel NULL pointer dereference, address:...

CVE-2023-53531

Technical details for CVE-2023-53531 are not publicly available in the provided connected documents. The materials reference Linux kernel patch notes but do not disclose product/version, exploit vectors, impact, or remediation specifics.

CVE-2023-53513

The CVE-2023-53513 issue is a Linux kernel vulnerability where incomplete validation of the nbd ioctl arg can trigger an i_size overflow when the arg is coerced to int (arg cast in nbd_ioctl /nbd_add_socket). The root cause is insufficient validation of large ioctl arguments, allowing an overflow...

CVE-2023-53513 nbd: fix incomplete validation of ioctl arg

In the Linux kernel, the following vulnerability has been resolved: nbd: fix incomplete validation of ioctl arg We tested and found an alarm caused by nbdioctl arg without verification. The UBSAN warning calltrace like below: UBSAN: Undefined behaviour in fs/buffer.c:1709:35 signed integer...